State of South Carolina · Department of Transportation

SCDOT Application Portfolio — BIA & Tiering Workbench

Demonstration — Synthetic data — Prepared by Concourse Tech
Portfolio inventory

Enterprise Document Management System

Tier 2 — Important

Two-platform document estate: ProjectWise for engineering plan sets and design files; OnBase for right-of-way records, executed contracts, and retention-scheduled records. Primary source for FOIA responses and litigation holds.

ID: edms
Last BIA review: 2026-06-24
Business Owner
T. Boykin — Chief Financial Officer
Finance & Administration
Technical Owner
C. Mendes — Integration Services Lead
Hosting
On-Premises
SCDOT data center; single SAN array, no off-site replica
Platform / Vendor
ProjectWise (engineering) + OnBase (records)
Data Classification
Confidential
User Base
~3,200 users agency-wide

Business Impact Assessment

Scored 1 (negligible) to 5 (severe) across the six impact categories from the Phase I BIA scope.

Public Safety1/5
Financial / Revenue2/5
Federal Funding & Compliance3/5
Operational Disruption3/5
Legal / Contractual4/5

FOIA clocks, litigation holds, and records-retention obligations continue during outages.

Public-Facing Service2/5
Max impact: 4/5Disruption likelihood: 2/5Risk score: 8 (Moderate)View on heat map →

Platform stable; storage architecture is the risk — single array without replica.

Recovery Objectives

Proposed via BIA
MTD
1 week
RTO
72 hours
RPO
24 hours
Minimum availability
99%
Service window
Business hours

Workaround Feasibility

Partial (manual)

Cached local copies cover active projects for days; records retrieval and FOIA response stall.

Dependencies

Systems, vendors, data feeds, infrastructure, and personnel this application depends on. Single points of failure are flagged.

DependencyTypeSPOFNotes
SAN storage arrayInfrastructure SPOFSingle array; replication project unfunded
Microsoft Entra IDInfrastructureAuthentication
Construction & Project Delivery SuiteSystemContract document linkage

Tier Assignment Traceability

Legal/contractual score of 4 with multi-day tolerance (R3): Tier 2. SAN SPOF is the top remediation flag from this BIA cycle.

R3
Federal compliance score ≥ 4 with periodic (weekly/monthly) deadlines, or any score = 4 with feasible workaround
Assign at least Tier 2
View full tiering framework and criteria →