Home
FT
STOP-IT Quantity FT
STOP-IT Water Quality FT
Import
List
SP Wizard
Risknought
Lists
Measures
Events
Tools
ST Procedures
Search
Login
Measure: SoftwareManagement
Description
The software management should be organized and carried out by responsible IT experts. Thus only credible software is installed correctly, furthermore an appropriate use of the software is teached to the staff. The aim is to avoid cyber security issues due to the installation of untrustful software, wrong installation of trustful software or inappropriate software uses.
Event source types
External attacker
Internal attacker
Human fault
External supplier
Event type
Manipulation
Risk reduction mechanism
Frequency/Likelihood
Threat Type
Cyber
Action characteristics
Proactive
Measure types
Cyber Barriers
Control System
Action and Crisis Management Plans and Training
event_ measures
Event-Measure: 98326
Event-Measure: 98661
Event-Measure: 98705
Event-Measure: 98911
Event-Measure: 98919
Event-Measure: 98984
Event-Measure: 99208
Event-Measure: 99272
Event-Measure: 99638
Event-Measure: 99778
Event-Measure: 100126
Event-Measure: 100297
Event-Measure: 100411
Event-Measure: 100517
Event-Measure: 100690
Event-Measure: 100745
Event-Measure: 100981
Event-Measure: 101173
Event-Measure: 101282
Event-Measure: 101577
Event-Measure: 101879
Event-Measure: 102157
Event-Measure: 102175
Event-Measure: 102326
Event-Measure: 103079
Event-Measure: 103244
Event-Measure: 103295
Event-Measure: 103697
Event-Measure: 103728
Event-Measure: 103993
Event Consequences
Quantity
Quality
Financial
Asset types
Drinking Water Network
Drinking Water Tanks
Pressure Boosting Station
Water Abstraction Points
Water Treatment Plants
Events
Basic Event 219 - DoS attack to WTP process system PLC
Basic Event 261 - Undetected SCADA hijacking software takes control of PBS operation
Basic Event 264 - Malware alters PLC statements that control valve
Basic Event 64 - Man-in-the-Middle attack manipulates WTP control signals
Gate 260 - WDN control system manipulated
Basic Event 195 - External person manipulates data transmission system of wells
Basic Event 211 - External attacker manipulates WTP transmission devices
Gate 193 - Surface water management system functions on altered data
Basic Event 65 - DoS attack to dosing system PLC
Gate 239 - Mislead PLC controlled WDN tank refill process
Basic Event 201 - Malware performs DoS attack on abstraction well PLCs
Basic Event 275 - Malware alters WDN control statements
Gate 186 - Quality verification process runs on altered WTP data
Basic Event 156 - Man-in-the-Middle attack manipulates abstraction point quality sensors
Basic Event 51 - Internal cyber manipulation of WTP sensor signal
Gate 111 - Insufficient disinfection due to loss of WTP control
Basic Event 277 - Malware tampers network topology characteristics on prediction models (e.g. tank volume curve)
Basic Event 170 - External attacker manipulates surface water system transmission devices
Basic Event 252 - Man-in-the-Middle attack manipulates WDN PBS sensor signals
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 265 - Man-in-the-Middle attack manipulates WDN valve sensor signals
Basic Event 250 - Malware alters PLC statements that control pump
Basic Event 196 - Man-in-the-Middle attack manipulates well sensor signal
Gate 177 - Staff or PLC controlled processes run on altered WTP data
Basic Event 237 - Malware alters PLC statements that control WDN tank refill
Basic Event 50 - Man-in-the-Middle attack manipulates WTP sensor signal
Gate 220 - Staff or PLC controlled hydraulic processes run on altered WTP data
Basic Event 240 - Upadate of OS causes false positive alarms from Event Detection System
Basic Event 276 - SQL injection to data used for demand prediction
Basic Event 189 - Man-in-the-Middle attack manipulates groundwater quality sensor signal
Specific Assets
Control System
Media Channels
Sensor
Server
Transmission Devices
Measure ID
M60
Name
SoftwareManagement
Risk reduction mechanism
Frequency/Likelihood
Action characteristics
Proactive