Home
FT
STOP-IT Quantity FT
STOP-IT Water Quality FT
Import
List
SP Wizard
Risknought
Lists
Measures
Events
Tools
ST Procedures
Search
Login
Measure: ServerRoomSetup
Description
Appropriate setup of server rooms. Thus the lifetime of servers is extended and its ongoing functionality is ensured. The aim is to ensure the continuous operability of all servers under appropriate conditions.
Comments
The server room should be located apart from office rooms and ensure appropriate conditions (temperature, air humidity, constant electrical energy supply, etc.). The room should be secured by doors with an appropriate resistance class and with an appropriate access control system. Furthermore it should be protected against physical hazards like fire, water intrusion etc. A constant supply with electrical energy must be ensured, if necessary an Uninterruptable Power Supply (UPS) must be implemented.
Event source types
External attacker
Internal attacker
Human fault
Natural phenomena
Interdependent CI
Event types
Destruction
Interruption
Manipulation
Pollution
Risk reduction mechanism
Frequency/Likelihood & Consequences
Threat Types
Physical
Cyber-Physical
Action characteristics
Proactive
Measure types
Physical Barriers
Consequence Mitigation
event_ measures
Event-Measure: 98181
Event-Measure: 98267
Event-Measure: 98269
Event-Measure: 98277
Event-Measure: 98391
Event-Measure: 98408
Event-Measure: 98467
Event-Measure: 98528
Event-Measure: 98675
Event-Measure: 98688
Event-Measure: 98700
Event-Measure: 98708
Event-Measure: 98737
Event-Measure: 98766
Event-Measure: 98793
Event-Measure: 98832
Event-Measure: 98923
Event-Measure: 98935
Event-Measure: 98936
Event-Measure: 98947
Event-Measure: 99010
Event-Measure: 99055
Event-Measure: 99079
Event-Measure: 99209
Event-Measure: 99333
Event-Measure: 99343
Event-Measure: 99360
Event-Measure: 99364
Event-Measure: 99395
Event-Measure: 99415
Event-Measure: 99435
Event-Measure: 99458
Event-Measure: 99524
Event-Measure: 99556
Event-Measure: 99590
Event-Measure: 99684
Event-Measure: 99702
Event-Measure: 99754
Event-Measure: 99847
Event-Measure: 99889
Event-Measure: 99899
Event-Measure: 100033
Event-Measure: 100035
Event-Measure: 100099
Event-Measure: 100101
Event-Measure: 100249
Event-Measure: 100256
Event-Measure: 100282
Event-Measure: 100293
Event-Measure: 100528
Event-Measure: 100577
Event-Measure: 100603
Event-Measure: 100676
Event-Measure: 100691
Event-Measure: 100708
Event-Measure: 100718
Event-Measure: 100754
Event-Measure: 100755
Event-Measure: 100778
Event-Measure: 100799
Event-Measure: 100816
Event-Measure: 100828
Event-Measure: 100829
Event-Measure: 100869
Event-Measure: 100956
Event-Measure: 101201
Event-Measure: 101405
Event-Measure: 101413
Event-Measure: 101464
Event-Measure: 101469
Event-Measure: 101517
Event-Measure: 101537
Event-Measure: 101586
Event-Measure: 101653
Event-Measure: 101668
Event-Measure: 101730
Event-Measure: 101799
Event-Measure: 101863
Event-Measure: 101873
Event-Measure: 101939
Event-Measure: 101955
Event-Measure: 101988
Event-Measure: 102057
Event-Measure: 102090
Event-Measure: 102115
Event-Measure: 102126
Event-Measure: 102197
Event-Measure: 102212
Event-Measure: 102266
Event-Measure: 102281
Event-Measure: 102337
Event-Measure: 102351
Event-Measure: 102639
Event-Measure: 102653
Event-Measure: 102660
Event-Measure: 102737
Event-Measure: 102769
Event-Measure: 102785
Event-Measure: 102866
Event-Measure: 102895
Event-Measure: 102897
Event-Measure: 102966
Event-Measure: 102984
Event-Measure: 103140
Event-Measure: 103192
Event-Measure: 103268
Event-Measure: 103300
Event-Measure: 103311
Event-Measure: 103366
Event-Measure: 103416
Event-Measure: 103444
Event-Measure: 103486
Event-Measure: 103506
Event-Measure: 103517
Event-Measure: 103544
Event-Measure: 103584
Event-Measure: 103714
Event-Measure: 103722
Event-Measure: 103794
Event-Measure: 103831
Event-Measure: 103837
Event-Measure: 103947
Event-Measure: 103994
Event-Measure: 104058
Event-Measure: 104073
Event Consequences
Quantity
Quality
Financial
Reputation
Asset types
Drinking Water Network
Drinking Water Tanks
Pressure Boosting Station
Water Abstraction Points
Water Treatment Plants
Events
Basic Event 257 - Incorrect execution or failure of software acquired from an external party crashes PBS control system
Basic Event 41 - Disinfectant missdosage from WTP from operational staff error
Basic Event 264 - Malware alters PLC statements that control valve
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 202 - External person destroys abstraction wells
Basic Event 153 - External attacker manipulates WTP transmission devices
Basic Event 245 - DoS attack on WDN pump
Basic Event 192 - External person physically destroys data transmission wires of wells
Gate 119 - Insufficient disinfection process controlled by intruder
Basic Event 62 - Internal person silently takes over SCADA control
Gate 258 - WDN control center power supply failure
Gate 236 - Outflow of WDN tank is interrupted
Basic Event 160 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 255 - Man-in-the-Middle attack manipulates local power transformer signals
Basic Event 211 - External attacker manipulates WTP transmission devices
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 45 - Internal person adds substance to WTP disinfectant storage tank
Basic Event 271 - WDN Control center destroyed by accidental flood
Basic Event 179 - Man-in-the-Middle attack manipulates reservoir control signals
Gate 142 - Chemical overdosing due to loss of WTP control
Basic Event 76 - External person physically damages WTP coagulation system
Basic Event 213 - Internal person silently takes over WTP SCADA control
Basic Event 261 - Undetected SCADA hijacking software takes control of PBS operation
Basic Event 65 - DoS attack to dosing system PLC
Basic Event 64 - Man-in-the-Middle attack manipulates WTP control signals
Gate 260 - WDN control system manipulated
Gate 239 - Mislead PLC controlled WDN tank refill process
Basic Event 80 - External person induces chemical or radioactive substance to treated water tank
Basic Event 270 - Control center destroyed by accidental fire
Basic Event 195 - External person manipulates data transmission system of wells
Gate 113 - Lower efficiency of WTP disinfectant undetected
Basic Event 199 - Internal person silently takes over abstraction well SCADA control
Basic Event 72 - External person induces biological substances to treated water tank
Gate 176 - Staff controlled processes run without WTP data
Basic Event 273 - External person attacks WDN control room
Basic Event 280 - External person physically destroys WDN servers
Gate 193 - Surface water management system functions on altered data
Gate 143 - External contamination of WTP
Basic Event 233 - External person damages WDN tank
Basic Event 275 - Malware alters WDN control statements
Basic Event 238 - External person in situ manipulates WDN tank transmission system
Basic Event 183 - Raw water pump energy supply failure
Basic Event 162 - Internal person adds substance to WTP stored additives
Basic Event 78 - Internal person adds substance to WTP coagulant storage tank
Gate 114 - Staff operate disinfection process without WTP data
Basic Event 46 - Internal person jams WTP sensor signal transmission
Gate 243 - Insufficient power supply
Basic Event 258 - Malware DoS to local PBS PLC
Basic Event 232 - External person physically interrupts WDN tank outflow
Basic Event 201 - Malware performs DoS attack on abstraction well PLCs
Basic Event 242 - External person destroys WDN power transformer
Basic Event 79 - Contaminated air from Industry reaches WTP and seeps into treated water
Basic Event 171 - Human error in operating/using surface water management system
Gate 123 - Contamination at WDN water tank
Basic Event 67 - Natural phenomena destroy dosing system
Gate 219 - Staff controlled hydraulic processes run without WTP data
Basic Event 282 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 61 - External person breaks in to WTP and takes over SCADA undetected
Gate 226 - Undetected WTP power transformer failure
Basic Event 218 - Accidental errors by authorized user while maintaining information system
Basic Event 221 - Internal person physically destroys WTP process system
Gate 186 - Quality verification process runs on altered WTP data
Basic Event 217 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 225 - External person destroys WTP power transformer
Basic Event 260 - Internal person silently takes over PBS SCADA control
Gate 111 - Insufficient disinfection due to loss of WTP control
Basic Event 277 - Malware tampers network topology characteristics on prediction models (e.g. tank volume curve)
Basic Event 244 - External person physically destroys pumps
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 178 - Internal person silently takes over reservoir SCADA control
Gate 189 - Additives composition altered
Basic Event 69 - Internal person physically destroys WTP dosing system
Basic Event 170 - External attacker manipulates surface water system transmission devices
Basic Event 44 - External person adds substance to WTP disinfectant storage tank
Basic Event 159 - Incorrect execution or failure of software acquired from an external party crashes WTP control system
Basic Event 250 - Malware alters PLC statements that control pump
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 63 - Undetected SCADA hijacking software takes control of WTP operation
Gate 259 - Insufficient power supply
Basic Event 194 - External person manipulates transmission wires of wells
Basic Event 70 - Natural phenomena alter reagent dosing system
Basic Event 198 - External person breaks in to well control area and takes over SCADA
Basic Event 71 - Contaminated floodwater mixed with treated water in WTP
Gate 116 - Chemical overdosing due to misled WTP operation
Basic Event 191 - External person physically destroys data transmission system of wells
Basic Event 180 - Incorrect execution or failure of software acquired from an external party crashes reservoir control system
Basic Event 77 - External person adds substance to WTP coagulant storage tank
Basic Event 279 - Malware corrupts prediction model database
Gate 146 - Free chlorine residual in WDN
Gate 122 - THM by-product formation in WTP
Basic Event 272 - WDN control center destroyed by intentional flood
Basic Event 254 - External person physically destroys PBS data transmission wires
Basic Event 66 - No back-up alternative for WTP dosing system PLC
Basic Event 274 - Ransomeware denies access to the WDN control system
Basic Event 237 - Malware alters PLC statements that control WDN tank refill
Basic Event 177 - External person breaks in to reservoir control area taking over SCADA
Gate 177 - Staff or PLC controlled processes run on altered WTP data
Basic Event 161 - External person adds substance to WTP stored additives
Gate 118 - Disinfectant composition altered
Basic Event 214 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 281 - Incorrect execution or failure of software acquired from an external party crashes WDN control system
Gate 185 - Undetected contamination of WTP chemical solutions
Gate 225 - Inability to perform WTP process due to enegy supply failure
Basic Event 241 - No alternative power supply available
Basic Event 81 - Additive and/or disinfectant overdose from WTP staff error
Basic Event 240 - Upadate of OS causes false positive alarms from Event Detection System
Basic Event 276 - SQL injection to data used for demand prediction
Basic Event 39 - External person adds substance through monitoring well
Basic Event 220 - External person physically destroys WTP process system
Basic Event 224 - External person destroys data transmission system of WTP power transformers
Basic Event 163 - External person attacks surface water system management party e.g. water board
Basic Event 259 - External person physically damages PBS PLC
Basic Event 200 - Incorrect execution or failure of software acquired from an external party crashes abstraction well control system
Gate 179 - Dosing system destroyed
Basic Event 216 - Incorrect execution or failure of software acquired from an external party crashes WTP control system
Basic Event 73 - High biological load from improperly maintained WTP storage tank
Basic Event 68 - External person physically destroys WTP dosing system
Gate 220 - Staff or PLC controlled hydraulic processes run on altered WTP data
Basic Event 243 - External power supply provider failure
Gate 234 - Contamination of WDN tank
Basic Event 219 - DoS attack to WTP process system PLC
Gate 117 - Staff or PLC controlled disinfection processes run on altered WTP data
Gate 178 - Dosing system disabled
Gate 187 - Contamination of WTP chemical solutions
Basic Event 207 - External person destroys WTP transmission wires
Specific Assets
Additives
Control Center
Control System
Dosing System
Drinking Water Tanks
Power Transformer
Pressure Boosting Station
Pump
Server
Transmission Devices
Water under treatment
Well
Measure ID
M52
Name
ServerRoomSetup
Risk reduction mechanism
Frequency/Likelihood & Consequences
Action characteristics
Proactive