BMW-targeted concept demonstration. Operational entities, suppliers, parts, inventory, production, financial values and incident conditions are synthetic and do not represent BMW systems, performance or current exposure.
Recovery validation gates
Reconnection is a decision, not a status update. Each gate needs its requirement met, evidence attached and a named approver.
Recovery position
Reconnection cannot be authorised until every preceding gate has passed with evidence. Supplier recovery estimate: 72h (unverified supplier statement).
Gates
- 1
Affected environment identified
passedSupplier states which systems, sites and accounts were in scope, with dates.
Approver role: CISO Office · Evidence: EV-1 · passed by A. Fournier, CISO Office - 2
Containment completed
openPartner connectivity terminated and supplier confirms containment of the affected estate.
Approver role: CISO Office · Evidence: EV-8 - 3
Credentials rotated
blockedAll shared service accounts, keys and portal identities rotated on both sides.
Approver role: CISO Office · Evidence: none attachedBlocked by gate 2 - 4
Malicious persistence addressed
blockedEvidence that persistence mechanisms were removed and the estate rebuilt or cleaned.
Approver role: CISO Office · Evidence: none attachedBlocked by gate 3 - 5
Data integrity validated
blockedSupplier proves order, release and shipment data is complete and unaltered.
Approver role: ERP Owner · Evidence: none attachedBlocked by gate 4 - 6
Critical interface tested
blocked830, 862 and 856 exchanged successfully in a controlled test window.
Approver role: ERP Owner · Evidence: none attachedBlocked by gate 5 - 7
Business transaction completed
blockedOne real purchase order, release and receipt processed end to end.
Approver role: Supply Chain · Evidence: none attachedBlocked by gate 6 - 8
Production or service test passed
blockedReceived material consumed on line without sequencing or quality exception.
Approver role: Plant Ops · Evidence: none attachedBlocked by gate 7 - 9
Cybersecurity approval recorded
blockedNamed security approver signs off with evidence references.
Approver role: CISO Office · Evidence: none attachedBlocked by gate 8 - 10
Operational approval recorded
blockedNamed operations approver signs off on continuity exit.
Approver role: Plant Ops · Evidence: none attachedBlocked by gate 9 - 11
Reconnection authorised
blockedExecutive authorisation recorded; tunnel re-enabled under monitoring.
Approver role: Executive · Evidence: none attachedBlocked by gate 10
Continuity strategies in force
- Manual EDI processing — releases & ASNsScope SYS-05 / supplier EDI outage · RTO 8h · RPO 15m · manual capacity 220/dayPortal upload of 830/862 and keyed ASN entry, 2 clerks per shiftLast tested 2025-10-26
- Supplier isolation and re-onboardingScope SYS-18 partner connectivity · RTO 4h · RPO 0m · manual capacity 0/dayTerminate tunnel, rotate credentials, stage clean-room re-entryLast tested 2026-01-18
- SC Assembly body shop bank build-aheadScope PLT-1 stamping shortage · RTO 24h · RPO 60m · manual capacity 180/dayRun banked bodies, resequence Line SC-2 to the SX-2 mixNever tested — capacity figure is an assumption, not a proven capability