Home
FT
STOP-IT Quantity FT
STOP-IT Water Quality FT
Import
List
SP Wizard
Risknought
Lists
Measures
Events
Tools
ST Procedures
Search
Login
Measure: SecureDoorsAndWindows
Description
Construction of doors and windows with a sufficient resistance class. Thus the time and effort that an attacker needs to overcome the respective barrier is increased. The aim is to gain more time to detect an attack and to react on the attack, furthermore the attractivity for an attack is reduced.
Comments
An appropriate resistance class for doors and windows of specific buildings depends on the security zone that the building is assigned to.
Event source types
External attacker
Internal attacker
Human fault
Natural phenomena
Event types
Destruction
Manipulation
Pollution
Risk reduction mechanism
Frequency/Likelihood
Threat Types
Cyber
Physical
Cyber-Physical
Action characteristics
Proactive
Measure types
Physical Barriers
Redundancy
Consequence Mitigation
event_ measures
Event-Measure: 98142
Event-Measure: 98158
Event-Measure: 98207
Event-Measure: 98238
Event-Measure: 98252
Event-Measure: 98279
Event-Measure: 98298
Event-Measure: 98332
Event-Measure: 98357
Event-Measure: 98366
Event-Measure: 98397
Event-Measure: 98436
Event-Measure: 98440
Event-Measure: 98449
Event-Measure: 98480
Event-Measure: 98496
Event-Measure: 98511
Event-Measure: 98589
Event-Measure: 98648
Event-Measure: 98744
Event-Measure: 98746
Event-Measure: 98785
Event-Measure: 98805
Event-Measure: 98822
Event-Measure: 98867
Event-Measure: 98963
Event-Measure: 98970
Event-Measure: 99114
Event-Measure: 99139
Event-Measure: 99147
Event-Measure: 99249
Event-Measure: 99338
Event-Measure: 99349
Event-Measure: 99475
Event-Measure: 99479
Event-Measure: 99505
Event-Measure: 99568
Event-Measure: 99594
Event-Measure: 99740
Event-Measure: 99773
Event-Measure: 99822
Event-Measure: 99878
Event-Measure: 99888
Event-Measure: 99969
Event-Measure: 100079
Event-Measure: 100086
Event-Measure: 100127
Event-Measure: 100187
Event-Measure: 100220
Event-Measure: 100227
Event-Measure: 100304
Event-Measure: 100345
Event-Measure: 100541
Event-Measure: 100574
Event-Measure: 100590
Event-Measure: 100668
Event-Measure: 100735
Event-Measure: 100743
Event-Measure: 100781
Event-Measure: 100801
Event-Measure: 100834
Event-Measure: 100838
Event-Measure: 100880
Event-Measure: 100908
Event-Measure: 100919
Event-Measure: 100930
Event-Measure: 100947
Event-Measure: 100948
Event-Measure: 100957
Event-Measure: 100987
Event-Measure: 101001
Event-Measure: 101025
Event-Measure: 101043
Event-Measure: 101088
Event-Measure: 101168
Event-Measure: 101257
Event-Measure: 101298
Event-Measure: 101328
Event-Measure: 101368
Event-Measure: 101390
Event-Measure: 101429
Event-Measure: 101474
Event-Measure: 101523
Event-Measure: 101598
Event-Measure: 101612
Event-Measure: 101693
Event-Measure: 101718
Event-Measure: 101755
Event-Measure: 101768
Event-Measure: 101798
Event-Measure: 101866
Event-Measure: 101898
Event-Measure: 101908
Event-Measure: 102011
Event-Measure: 102076
Event-Measure: 102102
Event-Measure: 102136
Event-Measure: 102248
Event-Measure: 102260
Event-Measure: 102270
Event-Measure: 102294
Event-Measure: 102365
Event-Measure: 102372
Event-Measure: 102393
Event-Measure: 102400
Event-Measure: 102444
Event-Measure: 102559
Event-Measure: 102627
Event-Measure: 102758
Event-Measure: 102768
Event-Measure: 102795
Event-Measure: 102959
Event-Measure: 102980
Event-Measure: 103002
Event-Measure: 103038
Event-Measure: 103122
Event-Measure: 103130
Event-Measure: 103181
Event-Measure: 103229
Event-Measure: 103256
Event-Measure: 103286
Event-Measure: 103361
Event-Measure: 103400
Event-Measure: 103417
Event-Measure: 103423
Event-Measure: 103458
Event-Measure: 103492
Event-Measure: 103535
Event-Measure: 103558
Event-Measure: 103567
Event-Measure: 103599
Event-Measure: 103711
Event-Measure: 103731
Event-Measure: 103798
Event-Measure: 103908
Event-Measure: 103970
Event-Measure: 104042
Event-Measure: 104067
Event Consequences
Quantity
Quality
Financial
Reputation
Asset types
Drinking Water Network
Drinking Water Tanks
Pressure Boosting Station
Water Abstraction Points
Water Treatment Plants
Events
Basic Event 48 - External person physically manipulates WTP sensor readings
Basic Event 197 - External person physically manipulates well sensor signal
Basic Event 277 - Malware tampers network topology characteristics on prediction models (e.g. tank volume curve)
Basic Event 260 - Internal person silently takes over PBS SCADA control
Basic Event 242 - External person destroys WDN power transformer
Basic Event 64 - Man-in-the-Middle attack manipulates WTP control signals
Basic Event 179 - Man-in-the-Middle attack manipulates reservoir control signals
Basic Event 272 - WDN control center destroyed by intentional flood
Basic Event 233 - External person damages WDN tank
Gate 123 - Contamination at WDN water tank
Basic Event 232 - External person physically interrupts WDN tank outflow
Gate 220 - Staff or PLC controlled hydraulic processes run on altered WTP data
Basic Event 168 - External person physically manipulates surface water system sensor readings
Basic Event 281 - Incorrect execution or failure of software acquired from an external party crashes WDN control system
Basic Event 262 - External person physically destroys valve
Basic Event 252 - Man-in-the-Middle attack manipulates WDN PBS sensor signals
Basic Event 217 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 211 - External attacker manipulates WTP transmission devices
Gate 193 - Surface water management system functions on altered data
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 194 - External person manipulates transmission wires of wells
Basic Event 171 - Human error in operating/using surface water management system
Gate 113 - Lower efficiency of WTP disinfectant undetected
Basic Event 257 - Incorrect execution or failure of software acquired from an external party crashes PBS control system
Basic Event 214 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 224 - External person destroys data transmission system of WTP power transformers
Basic Event 189 - Man-in-the-Middle attack manipulates groundwater quality sensor signal
Gate 122 - THM by-product formation in WTP
Basic Event 177 - External person breaks in to reservoir control area taking over SCADA
Basic Event 199 - Internal person silently takes over abstraction well SCADA control
Basic Event 221 - Internal person physically destroys WTP process system
Basic Event 190 - External person physically destroys observation well sensors
Basic Event 156 - Man-in-the-Middle attack manipulates abstraction point quality sensors
Basic Event 201 - Malware performs DoS attack on abstraction well PLCs
Gate 179 - Dosing system destroyed
Basic Event 254 - External person physically destroys PBS data transmission wires
Basic Event 70 - Natural phenomena alter reagent dosing system
Basic Event 82 - Organic matter present in consumers drinking water pipes
Gate 176 - Staff controlled processes run without WTP data
Basic Event 196 - Man-in-the-Middle attack manipulates well sensor signal
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Gate 114 - Staff operate disinfection process without WTP data
Basic Event 216 - Incorrect execution or failure of software acquired from an external party crashes WTP control system
Basic Event 76 - External person physically damages WTP coagulation system
Basic Event 50 - Man-in-the-Middle attack manipulates WTP sensor signal
Gate 111 - Insufficient disinfection due to loss of WTP control
Basic Event 41 - Disinfectant missdosage from WTP from operational staff error
Basic Event 160 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Gate 185 - Undetected contamination of WTP chemical solutions
Basic Event 153 - External attacker manipulates WTP transmission devices
Basic Event 56 - Wrong connection of drinking water pipes with non-potable water pipes
Basic Event 61 - External person breaks in to WTP and takes over SCADA undetected
Basic Event 57 - Contamination source present around pipe
Gate 234 - Contamination of WDN tank
Basic Event 66 - No back-up alternative for WTP dosing system PLC
Basic Event 280 - External person physically destroys WDN servers
Basic Event 259 - External person physically damages PBS PLC
Basic Event 63 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 178 - Internal person silently takes over reservoir SCADA control
Gate 239 - Mislead PLC controlled WDN tank refill process
Basic Event 271 - WDN Control center destroyed by accidental flood
Basic Event 270 - Control center destroyed by accidental fire
Basic Event 240 - Upadate of OS causes false positive alarms from Event Detection System
Basic Event 68 - External person physically destroys WTP dosing system
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 39 - External person adds substance through monitoring well
Gate 219 - Staff controlled hydraulic processes run without WTP data
Basic Event 167 - External person physically manipulates surface water system sensor readings
Basic Event 282 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 261 - Undetected SCADA hijacking software takes control of PBS operation
Basic Event 72 - External person induces biological substances to treated water tank
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 163 - External person attacks surface water system management party e.g. water board
Basic Event 202 - External person destroys abstraction wells
Basic Event 265 - Man-in-the-Middle attack manipulates WDN valve sensor signals
Basic Event 192 - External person physically destroys data transmission wires of wells
Basic Event 164 - External person physically destroys surface water system sensors
Basic Event 276 - SQL injection to data used for demand prediction
Basic Event 238 - External person in situ manipulates WDN tank transmission system
Basic Event 188 - Internal person physically manipulates groundwater quality sensor readings
Basic Event 205 - External person physically destroys WTP sensors
Basic Event 250 - Malware alters PLC statements that control pump
Basic Event 278 - Ransomware wipes out WDN control system files
Basic Event 244 - External person physically destroys pumps
Gate 260 - WDN control system manipulated
Gate 142 - Chemical overdosing due to loss of WTP control
Basic Event 235 - External person in situ manipulates WDN tank level sensor
Basic Event 198 - External person breaks in to well control area and takes over SCADA
Basic Event 170 - External attacker manipulates surface water system transmission devices
Basic Event 220 - External person physically destroys WTP process system
Basic Event 219 - DoS attack to WTP process system PLC
Basic Event 180 - Incorrect execution or failure of software acquired from an external party crashes reservoir control system
Basic Event 200 - Incorrect execution or failure of software acquired from an external party crashes abstraction well control system
Basic Event 209 - External person physically manipulates WTP sensor readings
Basic Event 253 - External person in situ destroys PBS sensors
Basic Event 195 - External person manipulates data transmission system of wells
Basic Event 213 - Internal person silently takes over WTP SCADA control
Basic Event 148 - PRESSURE DIFFICIENCY CONDITIONS
Basic Event 186 - Quality sensor transmission wires of observation wells manipulated
Gate 116 - Chemical overdosing due to misled WTP operation
Basic Event 151 - External person physicaly manipulates tank quality sensor readings
Basic Event 225 - External person destroys WTP power transformer
Basic Event 49 - Internal person physically manipulates WTP sensor readings
Basic Event 52 - Restricted area authorization procedure failure
Gate 117 - Staff or PLC controlled disinfection processes run on altered WTP data
Gate 143 - External contamination of WTP
Basic Event 69 - Internal person physically destroys WTP dosing system
Basic Event 159 - Incorrect execution or failure of software acquired from an external party crashes WTP control system
Basic Event 191 - External person physically destroys data transmission system of wells
Gate 186 - Quality verification process runs on altered WTP data
Basic Event 80 - External person induces chemical or radioactive substance to treated water tank
Basic Event 222 - A valve is opened and floods equipment
Basic Event 154 - External attacker destroyes absraction point quality sensors
Basic Event 47 - Internal person physically destroys WTP sensors
Basic Event 62 - Internal person silently takes over SCADA control
Basic Event 149 - Biological, chemical or radioactive substance injected through pipe
Gate 237 - Outflow valve of WDN tank closed
Basic Event 65 - DoS attack to dosing system PLC
Basic Event 151 - External person physicaly manipulates tank quality sensor readings
Basic Event 279 - Malware corrupts prediction model database
Basic Event 75 - Chlorination disinfection process in WTP
Gate 177 - Staff or PLC controlled processes run on altered WTP data
Basic Event 207 - External person destroys WTP transmission wires
Basic Event 269 - External person physically destroys WDN pipes
Basic Event 67 - Natural phenomena destroy dosing system
Basic Event 51 - Internal cyber manipulation of WTP sensor signal
Gate 119 - Insufficient disinfection process controlled by intruder
Basic Event 264 - Malware alters PLC statements that control valve
Basic Event 71 - Contaminated floodwater mixed with treated water in WTP
Basic Event 42 - External person physically destroys WTP sensors
Basic Event 237 - Malware alters PLC statements that control WDN tank refill
Basic Event 155 - External person physicaly manipulates abstraction point quality sensor readings
Basic Event 73 - High biological load from improperly maintained WTP storage tank
Basic Event 275 - Malware alters WDN control statements
Basic Event 187 - External person physically manipulates groundwater quality sensor readings
Basic Event 218 - Accidental errors by authorized user while maintaining information system
Basic Event 255 - Man-in-the-Middle attack manipulates local power transformer signals
Specific Assets
Control Center
Control System
Dosing System
Drinking Water Pipes
Drinking Water Tanks
Power Transformer
Pressure Boosting Station
Pump
Sensor
Server
Transmission Devices
Valve
Water under treatment
Well
Measure ID
M08
Name
SecureDoorsAndWindows
Risk reduction mechanism
Frequency/Likelihood
Action characteristics
Proactive