State of South Carolina · Department of Transportation

SCDOT Application Portfolio — BIA & Tiering Workbench

Demonstration — Synthetic data — Prepared by Concourse Tech

Risk Heat Map

Maximum business impact (highest of the six category scores) plotted against disruption likelihood, following the NIST SP 800-34 Rev. 1 risk characterization approach. Chips are colored by assigned tier; select any application for its full BIA record.

Business Impact →
5
Severe
4
Major
3
Moderate
2
Minor
1
Negligible
1
Rare
2
Unlikely
3
Possible
4
Likely
5
Very Likely
Disruption Likelihood →
Risk zone: Low (<5) Moderate (5–9) High (10–14) Severe (≥15)
Chip border = tier:T0T1T2T3

Ranked Risk Register

Impact × likelihood, descending

Likelihood reflects architecture fragility, vendor concentration, platform age, and outage history gathered during BIA interviews — not threat-actor probability. Methodology note: impact axis uses the maximum of the six category scores to avoid averaging away single-category severity.