# 💼 Role Profile: Business Owner / Application Owner / Asset Owner

![Business App Owner Avatar](../assets/Business%20App%20Owner%20Avatar.png)

## 📋 Role Overview
The **Business Owner / Application Owner / Asset Owner** provides business and application context, participates in impact assessments, approves containment affecting production systems, executes remediation and recovery, validates restoration, and confirms business recovery prior to incident closure.

---

## 🎯 Mandatory Responsibilities (SOP / Authority Matrix)
- 🏢 **Provide Context**: Provide vital business, operational, and application context to the Incident Command team.
- 📊 **Impact Assessment**: Participate in real-time business and operational impact assessment.
- 🛑 **Approve Production Containment**: Approve proposed containment actions that directly impact production systems or business applications.
- 🛠️ **Remediation & Recovery Execution**: Execute business-side remediation, manual workarounds, and business system recovery activities.
- ✅ **Validate Restoration**: Validate system restoration, data integrity, and application functionality after technical recovery.
- 🏁 **Confirm Business Recovery**: Confirm full business operational recovery as a mandatory prerequisite before incident closure.

---

## 🎮 TTX Scenario Responsibilities (Loan Ransomware Incident)
- Provide context on Telegram use by off-site loan officers and pending loan transactions.
- Approve shifting `\\FS01\LoanShares` to Read-Only during active containment.
- Activate manual loan application workarounds and validate restored loan files before business sign-off.

---

## 📝 Action Checklist
- [ ] Provide application/business context in WAR Room.
- [ ] Assess operational impact on loan processing.
- [ ] Approve proposed production system containment actions.
- [ ] Implement business workaround procedures.
- [ ] Validate restored data integrity and application functionality post-recovery.
- [ ] Confirm business recovery prior to final incident closure.
