STOP-IT - Detail page

Home
FT
SP Wizard
- Risknought
Lists
- Measures
- Events
- Tools
- ST Procedures
Search
Login

Measure: WaterQualityOnlineSurveillance

Description

Surveillance of the water composition along the supply chain by online sensors. Thus degradations of water quality (from raw water to the point of supply) are early detected. The aim is to enable fast reactions and the potential isolation of affected network parts or infrastructures.

Comments

The quality should be checked with respect to chemical, microbiological and physical parameters. Potential parameters can for example be taken from existing laws or guidelines defining the required drinking water quality, examples are temperatures, pH values, conductivities, oxygen concentrations, turbidities, UV absorption or redox potential.

Event source types

External attacker
Internal attacker
Human fault
Natural phenomena

Event types

Destruction
Manipulation
Pollution

Risk reduction mechanism

Consequences

Threat Types

Cyber
Physical
Cyber-Physical

Action characteristics

Reactive

Measure types

Control System
Consequence Mitigation
Action and Crisis Management Plans and Training

event_ measures

Event Consequences

Quantity
Quality
Financial
Reputation

Asset types

Catchment Area
Drinking Water Network
Drinking Water Tanks
Pressure Boosting Station
Raw Water Bodies
Water Abstraction Points
Water Treatment Plants

Events

Basic Event 35 - Infiltration of contaminated floodwater to groundwater catchment
Basic Event 250 - Malware alters PLC statements that control pump
Basic Event 38 - External person adds substance at the topsoil of monitoring site
Basic Event 45 - Internal person adds substance to WTP disinfectant storage tank
Basic Event 171 - Human error in operating/using surface water management system
Gate 123 - Contamination at WDN water tank
Basic Event 67 - Natural phenomena destroy dosing system
Gate 219 - Staff controlled hydraulic processes run without WTP data
Basic Event 213 - Internal person silently takes over WTP SCADA control
Basic Event 261 - Undetected SCADA hijacking software takes control of PBS operation
Basic Event 68 - External person physically destroys WTP dosing system
Gate 220 - Staff or PLC controlled hydraulic processes run on altered WTP data
Basic Event 219 - DoS attack to WTP process system PLC
Basic Event 39 - External person adds substance through monitoring well
Gate 113 - Lower efficiency of WTP disinfectant undetected
Basic Event 35 - Infiltration of contaminated floodwater to groundwater catchment
Basic Event 54 - Biological, chemical or radioactive substance pumped through hydrant
Basic Event 34 - Nutrient pollution of groundwater catchment
Basic Event 277 - Malware tampers network topology characteristics on prediction models (e.g. tank volume curve)
Gate 182 - Seepage of contaminated floodwater through monitoring wells
Gate 193 - Surface water management system functions on altered data
Basic Event 278 - Ransomware wipes out WDN control system files
Basic Event 69 - Internal person physically destroys WTP dosing system
Basic Event 233 - External person damages WDN tank
Basic Event 159 - Incorrect execution or failure of software acquired from an external party crashes WTP control system
Gate 118 - Disinfectant composition altered
Basic Event 214 - Undetected SCADA hijacking software takes control of WTP operation
Gate 114 - Staff operate disinfection process without WTP data
Basic Event 215 - Man-in-the-Middle attack manipulates WTP control signals
Basic Event 37 - External person injects substance at sub-surface of monitoring site
Basic Event 194 - External person manipulates transmission wires of wells
Basic Event 38 - External person adds substance at the topsoil of monitoring site
Basic Event 71 - Contaminated floodwater mixed with treated water in WTP
Basic Event 76 - External person physically damages WTP coagulation system
Gate 116 - Chemical overdosing due to misled WTP operation
Basic Event 77 - External person adds substance to WTP coagulant storage tank
Basic Event 279 - Malware corrupts prediction model database
Basic Event 236 - Man-in-the-Middle attack manipulates WDN tank level sensor signals
Basic Event 14 - Heavy rain
Basic Event 60 - Flood control measures failure near monitoring site
Basic Event 157 - Man-in-the-Middle attack manipulates WDN quality sensor readings
Basic Event 216 - Incorrect execution or failure of software acquired from an external party crashes WTP control system
Basic Event 61 - External person breaks in to WTP and takes over SCADA undetected
Basic Event 195 - External person manipulates data transmission system of wells
Basic Event 72 - External person induces biological substances to treated water tank
Gate 176 - Staff controlled processes run without WTP data
Gate 177 - Staff or PLC controlled processes run on altered WTP data
Gate 117 - Staff or PLC controlled disinfection processes run on altered WTP data
Basic Event 281 - Incorrect execution or failure of software acquired from an external party crashes WDN control system
Gate 111 - Insufficient disinfection due to loss of WTP control
Basic Event 207 - External person destroys WTP transmission wires
Basic Event 264 - Malware alters PLC statements that control valve
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 33 - Pesticide seepage to groundwater catchment
Basic Event 265 - Man-in-the-Middle attack manipulates WDN valve sensor signals
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 78 - Internal person adds substance to WTP coagulant storage tank
Basic Event 240 - Upadate of OS causes false positive alarms from Event Detection System
Basic Event 232 - External person physically interrupts WDN tank outflow
Basic Event 224 - External person destroys data transmission system of WTP power transformers
Basic Event 251 - External person in situ manipulates PBS transmission devices
Gate 119 - Insufficient disinfection process controlled by intruder
Basic Event 62 - Internal person silently takes over SCADA control
Basic Event 211 - External attacker manipulates WTP transmission devices
Basic Event 63 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 73 - High biological load from improperly maintained WTP storage tank
Basic Event 179 - Man-in-the-Middle attack manipulates reservoir control signals
Gate 142 - Chemical overdosing due to loss of WTP control
Gate 234 - Contamination of WDN tank
Basic Event 180 - Incorrect execution or failure of software acquired from an external party crashes reservoir control system
Basic Event 33 - Pesticide seepage to groundwater catchment
Basic Event 282 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 27 - Serious spill from inderedependent Industry CI accident
Basic Event 227 - Fake news about contamination in WTP using manipulated water company public communication
Gate 146 - Free chlorine residual in WDN
Gate 122 - THM by-product formation in WTP
Basic Event 257 - Incorrect execution or failure of software acquired from an external party crashes PBS control system
Basic Event 169 - Man-in-the-Middle attack manipulates surface water system sensor signal
Basic Event 64 - Man-in-the-Middle attack manipulates WTP control signals
Gate 260 - WDN control system manipulated
Basic Event 199 - Internal person silently takes over abstraction well SCADA control
Basic Event 267 - Man-in-the-Middle attack manipulates WDN valve control signals
Gate 143 - External contamination of WTP
Gate 96 - Contamination from farming activities
Gate 185 - Undetected contamination of WTP chemical solutions
Basic Event 170 - External attacker manipulates surface water system transmission devices
Basic Event 30 - Sewer line accidental break
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 34 - Nutrient pollution of groundwater catchment
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 37 - External person injects substance at sub-surface of monitoring site
Basic Event 70 - Natural phenomena alter reagent dosing system
Basic Event 220 - External person physically destroys WTP process system
Basic Event 65 - DoS attack to dosing system PLC
Basic Event 191 - External person physically destroys data transmission system of wells
Basic Event 259 - External person physically damages PBS PLC
Basic Event 200 - Incorrect execution or failure of software acquired from an external party crashes abstraction well control system
Basic Event 29 - Sewer line overflow from blockage
Gate 179 - Dosing system destroyed
Basic Event 75 - Chlorination disinfection process in WTP
Gate 239 - Mislead PLC controlled WDN tank refill process
Basic Event 80 - External person induces chemical or radioactive substance to treated water tank
Basic Event 201 - Malware performs DoS attack on abstraction well PLCs
Basic Event 31 - Combined sewer line overflow from flooding
Basic Event 254 - External person physically destroys PBS data transmission wires
Basic Event 210 - Man-in-the-Middle attack manipulates WTP sensor signal
Basic Event 218 - Accidental errors by authorized user while maintaining information system
Basic Event 221 - Internal person physically destroys WTP process system
Gate 186 - Quality verification process runs on altered WTP data
Basic Event 66 - No back-up alternative for WTP dosing system PLC
Basic Event 237 - Malware alters PLC statements that control WDN tank refill
Gate 187 - Contamination of WTP chemical solutions
Basic Event 275 - Malware alters WDN control statements
Basic Event 238 - External person in situ manipulates WDN tank transmission system
Basic Event 161 - External person adds substance to WTP stored additives
Gate 182 - Seepage of contaminated floodwater through monitoring wells
Basic Event 27 - Serious spill from inderedependent Industry CI accident
Basic Event 41 - Disinfectant missdosage from WTP from operational staff error
Basic Event 162 - Internal person adds substance to WTP stored additives
Basic Event 202 - External person destroys abstraction wells
Basic Event 153 - External attacker manipulates WTP transmission devices
Gate 96 - Contamination from farming activities
Basic Event 192 - External person physically destroys data transmission wires of wells
Basic Event 81 - Additive and/or disinfectant overdose from WTP staff error
Gate 189 - Additives composition altered
Basic Event 32 - External person physically damages sewer line
Basic Event 276 - SQL injection to data used for demand prediction
Basic Event 39 - External person adds substance through monitoring well
Basic Event 44 - External person adds substance to WTP disinfectant storage tank

Specific Assets

Additives
Control System
Dosing System
Drinking Water Tanks
Fire Hydrants
Groundwater
Spring Water
Surface Water
Transferred Information
Transmission Devices
Water under treatment
Well

Measure ID

M35

Name

WaterQualityOnlineSurveillance

Risk reduction mechanism

Consequences

Action characteristics

Reactive

This project has received funding from the European Union's Horizon 2020 research and innovation programme under grant agreement No. 740610. The publication reflects only the authors' views and the European Union is not liable for any use that may be made of the information contained therein. All illustrations in the homepage are attributed to rudall30/Shutterstock.com.