Home
FT
STOP-IT Quantity FT
STOP-IT Water Quality FT
Import
List
SP Wizard
Risknought
Lists
Measures
Events
Tools
ST Procedures
Search
Login
Measure: DataBackups
Description
All relevant data should be saved in a data backup regularly. Due to redundant data storages the loss of one data set can be compensated by using the backup data. Thus the ongoing operability of the utility is ensured.
Comments
All relevant factors of influence on the process of data backup generation must be documented, e.g. the amount and time of changed data, availability requirements or similar. If applied, the requirements for online data backups, e.g. in clouds, must be determined (e.g. location of storage, methods of authentification, etc.). The backup data should be encrypted, furthermore the location of the backup data should not be the same as the location of the original data.
Event source types
External attacker
Internal attacker
Human fault
Natural phenomena
External supplier
Interdependent CI
Event types
Destruction
Interruption
Manipulation
Pollution
Risk reduction mechanism
Consequences
Threat Types
Cyber
Physical
Cyber-Physical
Action characteristics
Proactive
Measure types
Redundancy
Control System
Consequence Mitigation
Action and Crisis Management Plans and Training
event_ measures
Event-Measure: 98138
Event-Measure: 98162
Event-Measure: 98211
Event-Measure: 98217
Event-Measure: 98219
Event-Measure: 98286
Event-Measure: 98287
Event-Measure: 98290
Event-Measure: 98356
Event-Measure: 98364
Event-Measure: 98365
Event-Measure: 98375
Event-Measure: 98451
Event-Measure: 98488
Event-Measure: 98499
Event-Measure: 98501
Event-Measure: 98530
Event-Measure: 98570
Event-Measure: 98583
Event-Measure: 98631
Event-Measure: 98647
Event-Measure: 98697
Event-Measure: 98701
Event-Measure: 98713
Event-Measure: 98762
Event-Measure: 98764
Event-Measure: 98765
Event-Measure: 98836
Event-Measure: 98845
Event-Measure: 98852
Event-Measure: 98905
Event-Measure: 98955
Event-Measure: 98957
Event-Measure: 98959
Event-Measure: 98996
Event-Measure: 99029
Event-Measure: 99039
Event-Measure: 99042
Event-Measure: 99097
Event-Measure: 99110
Event-Measure: 99129
Event-Measure: 99156
Event-Measure: 99165
Event-Measure: 99199
Event-Measure: 99228
Event-Measure: 99229
Event-Measure: 99237
Event-Measure: 99301
Event-Measure: 99311
Event-Measure: 99359
Event-Measure: 99396
Event-Measure: 99439
Event-Measure: 99440
Event-Measure: 99502
Event-Measure: 99503
Event-Measure: 99510
Event-Measure: 99550
Event-Measure: 99576
Event-Measure: 99623
Event-Measure: 99633
Event-Measure: 99634
Event-Measure: 99705
Event-Measure: 99709
Event-Measure: 99712
Event-Measure: 99777
Event-Measure: 99837
Event-Measure: 99856
Event-Measure: 99864
Event-Measure: 99910
Event-Measure: 99922
Event-Measure: 99923
Event-Measure: 99946
Event-Measure: 99992
Event-Measure: 100012
Event-Measure: 100019
Event-Measure: 100034
Event-Measure: 100119
Event-Measure: 100158
Event-Measure: 100184
Event-Measure: 100193
Event-Measure: 100255
Event-Measure: 100262
Event-Measure: 100332
Event-Measure: 100336
Event-Measure: 100348
Event-Measure: 100373
Event-Measure: 100406
Event-Measure: 100420
Event-Measure: 100452
Event-Measure: 100453
Event-Measure: 100561
Event-Measure: 100570
Event-Measure: 100605
Event-Measure: 100661
Event-Measure: 100670
Event-Measure: 100675
Event-Measure: 100741
Event-Measure: 100772
Event-Measure: 100875
Event-Measure: 100885
Event-Measure: 100921
Event-Measure: 100935
Event-Measure: 100963
Event-Measure: 101016
Event-Measure: 101020
Event-Measure: 101027
Event-Measure: 101091
Event-Measure: 101092
Event-Measure: 101100
Event-Measure: 101140
Event-Measure: 101183
Event-Measure: 101280
Event-Measure: 101297
Event-Measure: 101337
Event-Measure: 101357
Event-Measure: 101364
Event-Measure: 101440
Event-Measure: 101457
Event-Measure: 101508
Event-Measure: 101565
Event-Measure: 101607
Event-Measure: 101623
Event-Measure: 101624
Event-Measure: 101633
Event-Measure: 101636
Event-Measure: 101685
Event-Measure: 101762
Event-Measure: 101763
Event-Measure: 101802
Event-Measure: 101828
Event-Measure: 101830
Event-Measure: 101837
Event-Measure: 101850
Event-Measure: 101880
Event-Measure: 101912
Event-Measure: 101917
Event-Measure: 101961
Event-Measure: 101969
Event-Measure: 101975
Event-Measure: 102034
Event-Measure: 102047
Event-Measure: 102110
Event-Measure: 102119
Event-Measure: 102121
Event-Measure: 102186
Event-Measure: 102214
Event-Measure: 102234
Event-Measure: 102246
Event-Measure: 102302
Event-Measure: 102303
Event-Measure: 102379
Event-Measure: 102390
Event-Measure: 102449
Event-Measure: 102457
Event-Measure: 102533
Event-Measure: 102535
Event-Measure: 102536
Event-Measure: 102541
Event-Measure: 102543
Event-Measure: 102613
Event-Measure: 102620
Event-Measure: 102628
Event-Measure: 102684
Event-Measure: 102723
Event-Measure: 102732
Event-Measure: 102733
Event-Measure: 102802
Event-Measure: 102804
Event-Measure: 102810
Event-Measure: 102880
Event-Measure: 102890
Event-Measure: 102943
Event-Measure: 102958
Event-Measure: 103008
Event-Measure: 103014
Event-Measure: 103017
Event-Measure: 103018
Event-Measure: 103078
Event-Measure: 103087
Event-Measure: 103096
Event-Measure: 103127
Event-Measure: 103151
Event-Measure: 103200
Event-Measure: 103201
Event-Measure: 103266
Event-Measure: 103267
Event-Measure: 103277
Event-Measure: 103278
Event-Measure: 103288
Event-Measure: 103344
Event-Measure: 103385
Event-Measure: 103395
Event-Measure: 103419
Event-Measure: 103459
Event-Measure: 103465
Event-Measure: 103467
Event-Measure: 103468
Event-Measure: 103542
Event-Measure: 103549
Event-Measure: 103550
Event-Measure: 103552
Event-Measure: 103602
Event-Measure: 103617
Event-Measure: 103622
Event-Measure: 103630
Event-Measure: 103669
Event-Measure: 103743
Event-Measure: 103744
Event-Measure: 103755
Event-Measure: 103756
Event-Measure: 103816
Event-Measure: 103829
Event-Measure: 103881
Event-Measure: 103886
Event-Measure: 103955
Event-Measure: 103962
Event-Measure: 103963
Event-Measure: 103971
Event-Measure: 104029
Event-Measure: 104032
Event-Measure: 104040
Event Consequences
Quantity
Quality
Financial
Reputation
Asset types
Catchment Area
Drinking Water Network
Drinking Water Tanks
Pressure Boosting Station
Raw Water Bodies
Water Abstraction Points
Water Treatment Plants
Events
Basic Event 199 - Internal person silently takes over abstraction well SCADA control
Basic Event 154 - External attacker destroyes absraction point quality sensors
Basic Event 36 - Seepage of Interdependent Industry CI waste to groundwater catchment
Basic Event 196 - Man-in-the-Middle attack manipulates well sensor signal
Basic Event 72 - External person induces biological substances to treated water tank
Basic Event 34 - Nutrient pollution of groundwater catchment
Basic Event 187 - External person physically manipulates groundwater quality sensor readings
Basic Event 270 - Control center destroyed by accidental fire
Basic Event 30 - Sewer line accidental break
Gate 177 - Staff or PLC controlled processes run on altered WTP data
Basic Event 267 - Man-in-the-Middle attack manipulates WDN valve control signals
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 240 - Upadate of OS causes false positive alarms from Event Detection System
Basic Event 281 - Incorrect execution or failure of software acquired from an external party crashes WDN control system
Basic Event 158 - External attacker blocks WDN sensor reading to reach WTP
Basic Event 183 - Raw water pump energy supply failure
Basic Event 241 - No alternative power supply available
Gate 185 - Undetected contamination of WTP chemical solutions
Basic Event 78 - Internal person adds substance to WTP coagulant storage tank
Basic Event 188 - Internal person physically manipulates groundwater quality sensor readings
Basic Event 50 - Man-in-the-Middle attack manipulates WTP sensor signal
Basic Event 200 - Incorrect execution or failure of software acquired from an external party crashes abstraction well control system
Basic Event 29 - Sewer line overflow from blockage
Basic Event 151 - External person physicaly manipulates tank quality sensor readings
Basic Event 73 - High biological load from improperly maintained WTP storage tank
Basic Event 220 - External person physically destroys WTP process system
Basic Event 258 - Malware DoS to local PBS PLC
Basic Event 251 - External person in situ manipulates PBS transmission devices
Basic Event 57 - Contamination source present around pipe
Basic Event 242 - External person destroys WDN power transformer
Gate 179 - Dosing system destroyed
Basic Event 210 - Man-in-the-Middle attack manipulates WTP sensor signal
Basic Event 51 - Internal cyber manipulation of WTP sensor signal
Basic Event 33 - Pesticide seepage to groundwater catchment
Gate 234 - Contamination of WDN tank
Basic Event 26 - Serious spill from Interdependent Industry CI from cyber-physical attack
Basic Event 48 - External person physically manipulates WTP sensor readings
Basic Event 37 - External person injects substance at sub-surface of monitoring site
Basic Event 221 - Internal person physically destroys WTP process system
Basic Event 36 - Seepage of Interdependent Industry CI waste to groundwater catchment
Gate 184 - Suspended exploitation of groundwater from authorities
Basic Event 189 - Man-in-the-Middle attack manipulates groundwater quality sensor signal
Basic Event 256 - External person jams PBS communications
Basic Event 232 - External person physically interrupts WDN tank outflow
Basic Event 31 - Combined sewer line overflow from flooding
Basic Event 224 - External person destroys data transmission system of WTP power transformers
Basic Event 282 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 259 - External person physically damages PBS PLC
Gate 186 - Quality verification process runs on altered WTP data
Basic Event 27 - Serious spill from inderedependent Industry CI accident
Basic Event 243 - External power supply provider failure
Basic Event 33 - Pesticide seepage to groundwater catchment
Basic Event 201 - Malware performs DoS attack on abstraction well PLCs
Basic Event 153 - External attacker manipulates WTP transmission devices
Basic Event 169 - Man-in-the-Middle attack manipulates surface water system sensor signal
Basic Event 79 - Contaminated air from Industry reaches WTP and seeps into treated water
Basic Event 225 - External person destroys WTP power transformer
Basic Event 41 - Disinfectant missdosage from WTP from operational staff error
Basic Event 192 - External person physically destroys data transmission wires of wells
Basic Event 222 - A valve is opened and floods equipment
Basic Event 260 - Internal person silently takes over PBS SCADA control
Basic Event 202 - External person destroys abstraction wells
Basic Event 257 - Incorrect execution or failure of software acquired from an external party crashes PBS control system
Basic Event 218 - Accidental errors by authorized user while maintaining information system
Basic Event 227 - Fake news about contamination in WTP using manipulated water company public communication
Basic Event 170 - External attacker manipulates surface water system transmission devices
Gate 187 - Contamination of WTP chemical solutions
Basic Event 255 - Man-in-the-Middle attack manipulates local power transformer signals
Basic Event 28 - Illegal disposal practices from interdependent Industry CI
Basic Event 44 - External person adds substance to WTP disinfectant storage tank
Basic Event 203 - Mine drainage
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 32 - External person physically damages sewer line
Basic Event 148 - PRESSURE DIFFICIENCY CONDITIONS
Gate 236 - Outflow of WDN tank is interrupted
Gate 95 - Surface water contamination
Basic Event 209 - External person physically manipulates WTP sensor readings
Basic Event 252 - Man-in-the-Middle attack manipulates WDN PBS sensor signals
Basic Event 261 - Undetected SCADA hijacking software takes control of PBS operation
Gate 189 - Additives composition altered
Basic Event 271 - WDN Control center destroyed by accidental flood
Basic Event 155 - External person physicaly manipulates abstraction point quality sensor readings
Basic Event 82 - Organic matter present in consumers drinking water pipes
Gate 237 - Outflow valve of WDN tank closed
Gate 97 - Industrial activities and waste disposal failure
Basic Event 193 - External person jams data transmission of wells
Basic Event 70 - Natural phenomena alter reagent dosing system
Gate 96 - Contamination from farming activities
Basic Event 45 - Internal person adds substance to WTP disinfectant storage tank
Basic Event 190 - External person physically destroys observation well sensors
Basic Event 213 - Internal person silently takes over WTP SCADA control
Basic Event 272 - WDN control center destroyed by intentional flood
Basic Event 250 - Malware alters PLC statements that control pump
Basic Event 80 - External person induces chemical or radioactive substance to treated water tank
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 253 - External person in situ destroys PBS sensors
Gate 113 - Lower efficiency of WTP disinfectant undetected
Basic Event 191 - External person physically destroys data transmission system of wells
Basic Event 75 - Chlorination disinfection process in WTP
Gate 239 - Mislead PLC controlled WDN tank refill process
Basic Event 34 - Nutrient pollution of groundwater catchment
Basic Event 262 - External person physically destroys valve
Basic Event 65 - DoS attack to dosing system PLC
Basic Event 161 - External person adds substance to WTP stored additives
Gate 182 - Seepage of contaminated floodwater through monitoring wells
Basic Event 254 - External person physically destroys PBS data transmission wires
Gate 118 - Disinfectant composition altered
Basic Event 274 - Ransomeware denies access to the WDN control system
Basic Event 237 - Malware alters PLC statements that control WDN tank refill
Basic Event 273 - External person attacks WDN control room
Basic Event 233 - External person damages WDN tank
Basic Event 37 - External person injects substance at sub-surface of monitoring site
Basic Event 66 - No back-up alternative for WTP dosing system PLC
Basic Event 214 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 46 - Internal person jams WTP sensor signal transmission
Gate 243 - Insufficient power supply
Basic Event 156 - Man-in-the-Middle attack manipulates abstraction point quality sensors
Gate 193 - Surface water management system functions on altered data
Basic Event 235 - External person in situ manipulates WDN tank level sensor
Basic Event 162 - Internal person adds substance to WTP stored additives
Basic Event 177 - External person breaks in to reservoir control area taking over SCADA
Gate 114 - Staff operate disinfection process without WTP data
Basic Event 275 - Malware alters WDN control statements
Basic Event 238 - External person in situ manipulates WDN tank transmission system
Basic Event 81 - Additive and/or disinfectant overdose from WTP staff error
Basic Event 163 - External person attacks surface water system management party e.g. water board
Basic Event 157 - Man-in-the-Middle attack manipulates WDN quality sensor readings
Basic Event 39 - External person adds substance through monitoring well
Basic Event 38 - External person adds substance at the topsoil of monitoring site
Basic Event 67 - Natural phenomena destroy dosing system
Basic Event 14 - Heavy rain
Gate 219 - Staff controlled hydraulic processes run without WTP data
Gate 225 - Inability to perform WTP process due to enegy supply failure
Basic Event 215 - Man-in-the-Middle attack manipulates WTP control signals
Basic Event 38 - External person adds substance at the topsoil of monitoring site
Gate 96 - Contamination from farming activities
Basic Event 217 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 276 - SQL injection to data used for demand prediction
Basic Event 239 - Subcontractor physically disconnects local PLC
Gate 123 - Contamination at WDN water tank
Basic Event 236 - Man-in-the-Middle attack manipulates WDN tank level sensor signals
Basic Event 263 - DoS attack on WDN valve
Gate 226 - Undetected WTP power transformer failure
Basic Event 47 - Internal person physically destroys WTP sensors
Basic Event 42 - External person physically destroys WTP sensors
Basic Event 216 - Incorrect execution or failure of software acquired from an external party crashes WTP control system
Basic Event 171 - Human error in operating/using surface water management system
Basic Event 39 - External person adds substance through monitoring well
Basic Event 61 - External person breaks in to WTP and takes over SCADA undetected
Basic Event 35 - Infiltration of contaminated floodwater to groundwater catchment
Basic Event 60 - Flood control measures failure near monitoring site
Gate 117 - Staff or PLC controlled disinfection processes run on altered WTP data
Basic Event 264 - Malware alters PLC statements that control valve
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 277 - Malware tampers network topology characteristics on prediction models (e.g. tank volume curve)
Gate 182 - Seepage of contaminated floodwater through monitoring wells
Basic Event 207 - External person destroys WTP transmission wires
Basic Event 244 - External person physically destroys pumps
Basic Event 43 - External person jams WTP sensor signal transmission
Basic Event 54 - Biological, chemical or radioactive substance pumped through hydrant
Basic Event 68 - External person physically destroys WTP dosing system
Gate 220 - Staff or PLC controlled hydraulic processes run on altered WTP data
Basic Event 150 - No sensor or insufficient type of quality sensor in the tank
Basic Event 167 - External person physically manipulates surface water system sensor readings
Basic Event 26 - Serious spill from Interdependent Industry CI from cyber-physical attack
Basic Event 219 - DoS attack to WTP process system PLC
Basic Event 159 - Incorrect execution or failure of software acquired from an external party crashes WTP control system
Basic Event 178 - Internal person silently takes over reservoir SCADA control
Basic Event 35 - Infiltration of contaminated floodwater to groundwater catchment
Basic Event 69 - Internal person physically destroys WTP dosing system
Gate 178 - Dosing system disabled
Basic Event 205 - External person physically destroys WTP sensors
Gate 111 - Insufficient disinfection due to loss of WTP control
Basic Event 265 - Man-in-the-Middle attack manipulates WDN valve sensor signals
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 151 - External person physicaly manipulates tank quality sensor readings
Basic Event 164 - External person physically destroys surface water system sensors
Basic Event 208 - External attacker blocks WDN sensor signals to reach WTP
Basic Event 62 - Internal person silently takes over SCADA control
Gate 258 - WDN control center power supply failure
Basic Event 179 - Man-in-the-Middle attack manipulates reservoir control signals
Basic Event 55 - Biological, chemical or radioactive substance pumped through tap
Basic Event 76 - External person physically damages WTP coagulation system
Basic Event 197 - External person physically manipulates well sensor signal
Basic Event 27 - Serious spill from inderedependent Industry CI accident
Basic Event 194 - External person manipulates transmission wires of wells
Gate 119 - Insufficient disinfection process controlled by intruder
Basic Event 278 - Ransomware wipes out WDN control system files
Basic Event 245 - DoS attack on WDN pump
Gate 142 - Chemical overdosing due to loss of WTP control
Gate 146 - Free chlorine residual in WDN
Basic Event 211 - External attacker manipulates WTP transmission devices
Gate 116 - Chemical overdosing due to misled WTP operation
Basic Event 269 - External person physically destroys WDN pipes
Basic Event 206 - External person jams WTP sensor signal transmission
Basic Event 56 - Wrong connection of drinking water pipes with non-potable water pipes
Basic Event 168 - External person physically manipulates surface water system sensor readings
Basic Event 279 - Malware corrupts prediction model database
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 165 - External person jams surface water system sensor signal transmission
Basic Event 160 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 195 - External person manipulates data transmission system of wells
Gate 122 - THM by-product formation in WTP
Basic Event 63 - Undetected SCADA hijacking software takes control of WTP operation
Gate 259 - Insufficient power supply
Basic Event 180 - Incorrect execution or failure of software acquired from an external party crashes reservoir control system
Basic Event 77 - External person adds substance to WTP coagulant storage tank
Basic Event 198 - External person breaks in to well control area and takes over SCADA
Gate 176 - Staff controlled processes run without WTP data
Basic Event 266 - External person jams WDN valve communications
Basic Event 71 - Contaminated floodwater mixed with treated water in WTP
Gate 97 - Industrial activities and waste disposal failure
Basic Event 280 - External person physically destroys WDN servers
Basic Event 166 - External person jams surface water system sensor signal transmission
Gate 143 - External contamination of WTP
Basic Event 64 - Man-in-the-Middle attack manipulates WTP control signals
Basic Event 186 - Quality sensor transmission wires of observation wells manipulated
Gate 260 - WDN control system manipulated
Basic Event 149 - Biological, chemical or radioactive substance injected through pipe
Basic Event 49 - Internal person physically manipulates WTP sensor readings
Basic Event 28 - Illegal disposal practices from interdependent Industry CI
Specific Assets
Additives
Control Center
Control System
Dosing System
Drinking Water Pipes
Drinking Water Tanks
Drinking Water Taps
Fire Hydrants
Groundwater
Media Channels
Power Transformer
Pressure Boosting Station
Pump
Sensor
Server
Spring Water
Surface Water
Transferred Information
Transmission Devices
Valve
Water under treatment
Well
Measure ID
M49
Name
DataBackups
Risk reduction mechanism
Consequences
Action characteristics
Proactive