STOP-IT - Measures

Measures

M01

FencesAndWalls

M03

CameraSurveillance

M02

MotionDetectors

M04

Patrols

M05

FloodProtection

M06

BarredWindows

M07

BinaryContacts

M08

SecureDoorsAndWindows

M09

EntranceAccessControl

M10

SecureLocks

M11

DiscreetAppearance

M12

SupervisionOfExternals

M13

SmokeDetectors

M14

ContainmentStructures

M15

RawWaterPipelineProtection

M16

SourceWaterQualityControl

M17

WatershedProtection

M18

InflowAndBackflowPrevention

M19

FiltersInAerationProcesses

M20

PressureAndFlowSensors

M21

OscillationSensors

M22

ValvePositionSensors

M23

LevelSensors

M24

AutomatedValveControl

M25

OperatingParameterSurveillance

M26

ProcedureForPersonnelChanges

M27

EmployeesTrainings

M28

SecurityCheckOfEmployees

M29

EmergencyPlans

M30

RedundantAssetsAndInfrastructures

M31

DistributedEnergySupply

M32

EmergencyGenerators

M33

AdditionalStorageCapacity

M34

WaterIntakeAdaption

M35

WaterQualityOnlineSurveillance

M36

WaterTreatmentControl

M37

WaterQualityOfflineSurveillance

M38

MonitoringAndControlOfDistributionSystem

M39

WaterNetworkInterventionsForWaterSupplyRecovery

M40

AdditivesQualityCheck

M41

InfrastructureAndAssetInspections

M42

InformationSecurityGuidelines

M43

InformationSecurityManagementSystem

M44

PasswordSecurity

M45

TwoFactorAuthentification

M46

RestrictedAccesToITSytem

M47

NonManipulationConnectionTool

M48

CryptographicProcesses

M49

DataBackups

M50

NetworkSeparation

M51

AppropriateLayingOfWires

M52

ServerRoomSetup

M53

MirroredSCADA

M54

DataIntegrityCheck

M55

MalwareProtectionGuidelines

M56

MalwareProtectionSoftware

M57

PatchAndChangeManagement

M58

NetworkTrafficAnalysis

M59

SecurityOfWirelessNetworks

M60

SoftwareManagement

M61

MobileDeviceUsageRules

M62

DeletionAndDestructionOfDataCarriers

M63

SecureOutsourcing

M64

Documentation

M65

IdentificationClassificationAndRiskAssessmentTool

Measures

Measure ID	Name	Description	Comments	Risk reduction mechanism
M01	FencesAndWalls	Construction of fences or walls around sensitive sites. By the construction of such physical barriers the entrance to sensitive sites ...	Which kind of fence and/or wall is chosen depends inter alia on the protection needs of the respective infrastructure/asset/building. Thus, ...	Frequency/Likelihood
M03	CameraSurveillance	Surveillance of sensitive sites, buildings or assets with camera systems. Thus intruders are detected by the staff that is surveilling ...		Consequences
M02	MotionDetectors	Implementation of motion detectors. Thus the intrusion of unauthorized personnel to sensitive sites is automatically detected. The aim is to ...	Different reactions are possible if a motion detector is triggered by an intruder. A silent alarm could be sent to ...	Consequences
M04	Patrols	Organization of regular or irregular patrols at sensitive sites, buildings and assets. Thus intruders shall be noticed and the investigated ...	A positive side-effect of patrols might be the deterrent effect on potential attackers decreasing the likelihood of malicious attacks.	Frequency/Likelihood & Consequences
M05	FloodProtection	Implementation of flood protection measures. By the building of dams or object protection measures against floods the intrusion of flood ...		Frequency/Likelihood
M06	BarredWindows	Protection of windows with bars. Thus intruders cannot enter a building by destroying a window. The aim is to ensure ...	It might be sufficient to implement bars at windows below the second floor as the height of all other windows ...	Frequency/Likelihood
M07	BinaryContacts	Implementation of binary contacts as alarm system at doors, windows or storage tanks. Thus the intrusion of unauthorized personnel to ...	Different reactions are possible if a binary contact is triggered by an intruder. A silent alarm could be sent to ...	Consequences
M08	SecureDoorsAndWindows	Construction of doors and windows with a sufficient resistance class. Thus the time and effort that an attacker needs to ...	An appropriate resistance class for doors and windows of specific buildings depends on the security zone that the building is ...	Frequency/Likelihood
M09	EntranceAccessControl	Implementation of an access control system for entrances to sensitive sites. Thus it shall be avoided that unauthorized people get ...	The physical access control can be implemented in different forms. The most common way of access control is the distribution ...	Frequency/Likelihood
M10	SecureLocks	Installation of secure locks. Thus the picking of locks is substantially complicated. The aim is to prevent that attackers can ...		Frequency/Likelihood
M11	DiscreetAppearance	If possible, sensitive sites and buildings should be designed in a discreet appearance. Thus it shall be avoided that the ...	An example for a discreet design could be pumping stations. The building in which the pumps are located should not ...	Frequency/Likelihood
M12	SupervisionOfExternals	Supervision of any external people entering the water utility or sensitive sites. Any people who enter sites and who are ...		Frequency/Likelihood
M13	SmokeDetectors	Installation of smoke detectors. Thus fires are immediately noticed by the present staff. The aim is to protect all employees ...		Frequency/Likelihood & Consequences
M14	ContainmentStructures	Construction of containment structures at sensitive locations like roads or airports. Thus raw water contaminations due to traffic accidents, leakages ...		Frequency/Likelihood
M15	RawWaterPipelineProtection	Physical protection of raw water transmission pipeline and equipment (pumps, valves,…). The aim is to protect the water transmission pipes ...	This measure includes for example regular inspections of the raw water pipelines.	Frequency/Likelihood
M16	SourceWaterQualityControl	Control of raw water quality. The aim is to control the raw water quality in order to select the best ...		Frequency/Likelihood & Consequences
M17	WatershedProtection	Pollution sources in the watershed may affect raw water quality. The aim is to control the activities within the watershed ...	One of the objectives of the Water framework directive is to protect the drinking water sources. Part of this measures ...	Frequency/Likelihood
M18	InflowAndBackflowPrevention	Implementation of inflow and backflow prevention devices at relevant points of the network (e.g. house connections, fire hydrants). Thus the ...		Frequency/Likelihood
M19	FiltersInAerationProcesses	All air for aeration purposes in water treatment plants and water storage tanks should be filtered. Thus it is aimed ...	Filters should be installed at every air intake for aeration purposes. Furthermore, no openings for aeration purposes should be built ...	Frequency/Likelihood
M20	PressureAndFlowSensors	Installation of pressure and flow sensors at different positions in the water distribution network. Thus it can be checked if ...	With this measure failures in the distribution network due to intended attacks like destructions of pumps or pipes might be ...	Frequency/Likelihood & Consequences
M21	OscillationSensors	Installation of oscillation sensors at pumps. Thus any imminent damages of the pump or manipulations of the pump operation or ...	This measure might indicate imminent pump failures due to wear or intended pump manipulations which are not detected in another ...	Frequency/Likelihood & Consequences
M22	ValvePositionSensors	Installation of sensors indicating the position of valves. Thus it can be checked if all valves are are in the ...		Consequences
M23	LevelSensors	Installation of sensors indicating the filling level of storage tanks or additive reservoirs. Thus it can be supervised if any ...		Frequency/Likelihood
M24	AutomatedValveControl	Automated control of valves to regulate required pressures and flows. Thus human errors e.g. leading to pressure shocks are avoided. ...	Although the control of valves is automated, the possibility of a manual control should be given at every point of ...	Frequency/Likelihood
M25	OperatingParameterSurveillance	Surveillance of operating parameters from the catchment to the final distribution point. Thus any damages, malfunctions or manipulations in the ...	Potential parameters to be supvervised are volume flows and pressures of water at different positions in the system, pressure losses ...	Consequences
M26	ProcedureForPersonnelChanges	Following of a structured procedure in case of new employees entering the company or employees leaving the company. Thus new ...	For new employees checklists should be used to ensure that no important issues about information security are forgotten. If possible, ...	Frequency/Likelihood
M27	EmployeesTrainings	Regular trainings, seminars, updates and informations on security issues should be implemented for all employees. Thus the staff is always ...		Frequency/Likelihood & Consequences
M28	SecurityCheckOfEmployees	Security check of new employees. By checking relevant data of new employees like the completeness of the CV and the ...	The possibilities for security checks are significantly limited by different laws and regulations in the field of data protection. Therefore ...	Frequency/Likelihood
M29	EmergencyPlans	Setting up of emergency plans. Thus clear responsabilities, courses of action, procedures and contacts are defined and documented for emergency ...	A complete crisis plan should exist including responsabilities, pending tasks, important contacts etc. All tasks from the evaluation of the ...	Consequences
M30	RedundantAssetsAndInfrastructures	Constructions of redundant infrastructures and assets along the whole water supply chain. Thus the failure of one component can, at ...	Redundant infrastructures could exist in the water extraction (wells, river extractions, reservoir extractions, spring water), water treatment infrastructures (filtration, adsorption, ...	Consequences
M31	DistributedEnergySupply	Supply of energy from more than one supplier. Thus a potential supply failure of one electrical energy supplier can quickly ...		Consequences
M32	EmergencyGenerators	Installation of emergency generators. Thus a complete failure of external energy supply can be compensated by the emergency generators. The ...		Consequences
M33	AdditionalStorageCapacity	Construction of additional storage tanks. Thus periods of water scarcity can be bridged easier due to a higher amount of ...		Consequences
M34	WaterIntakeAdaption	Re-designing of water intakes for periods of raw water scarcities. Thus the usual sources for raw water can also be ...		Frequency/Likelihood
M35	WaterQualityOnlineSurveillance	Surveillance of the water composition along the supply chain by online sensors. Thus degradations of water quality (from raw water ...	The quality should be checked with respect to chemical, microbiological and physical parameters. Potential parameters can for example be taken ...	Consequences
M36	WaterTreatmentControl	Implementation of monitoring, treatment and disinfection processes in order to comply with the water quality standards under all circumstances.	This is a measure for process control & optimization.	Frequency/Likelihood & Consequences
M37	WaterQualityOfflineSurveillance	Offline monitoring of water quality parameters in the distribution systems to comply with the water quality standards under all circumstances.		Frequency/Likelihood & Consequences
M38	MonitoringAndControlOfDistributionSystem	Monitoring and controlling the distribution system for biofilms, deposits and corrosion.		Frequency/Likelihood & Consequences
M39	WaterNetworkInterventionsForWaterSupplyRecovery	There are many events that potentially may lead to anomalies affecting the physical elements of the water network (i.e. pipe ...		Consequences
M40	AdditivesQualityCheck	Supervision of quality of delivered additives. Thus the use of additives produced with substandard quality or the use of subsequently ...		Frequency/Likelihood
M41	InfrastructureAndAssetInspections	Regular and/or continuous inspections of existing infrastructure and assets by trained and professional personnel. Thus existing or impending damages, failures ...	The inspections shall detect intended manipulations of the assets and infrastructure by attackers as well as existing and imminent damages ...	Consequences
M42	InformationSecurityGuidelines	Establishment of a guideline for information security. This guideline contains all relevant aspects about the company's information security aims and ...	The guideline(s) should contain information about the importance of information security, the security objectives, the most important aspects of the ...	Frequency/Likelihood
M43	InformationSecurityManagementSystem	Implementation of an Information Security Management System (ISMS). The ISMS enables the implementation and continuous application of a thought out ...	An ISMS should be tailored to the existing management structures of the specific water utility. Due to different conditions existing ...	Frequency/Likelihood
M44	PasswordSecurity	Access to sensitive and critical cyber applications, databases, control tools or similar should be protected by secure passwords. Thus only ...	For the access to any application, database or similar a different password has to be used. Passwords should not be ...	Frequency/Likelihood
M45	TwoFactorAuthentification	Implementation of two-factor authentification for especially sensitive applications. Thus the possibility of unauthorized access to sensitive applications is significantly reduced. ...	Possible realizations for a two-factor authentification could for example be individual codes that are sent via SMS or TAN generators.	Frequency/Likelihood
M46	RestrictedAccesToITSytem	The company must to restrict the network control actions and information accesibility to particular actors inside the company using a ...		Frequency/Likelihood
M47	NonManipulationConnectionTool	The company must forbid the network connection to not authorized mobile devices (PC, laptop, etc.).		Frequency/Likelihood
M48	CryptographicProcesses	Implementation of cryptographic processes. Thus any relevant data is encrypted and therfore unreadable for an attacker. The aim is to ...	Additionally to the data encryption, the possibility of encrypting also communication connections should be checked in dependence on the necessary ...	Consequences
M49	DataBackups	All relevant data should be saved in a data backup regularly. Due to redundant data storages the loss of one ...	All relevant factors of influence on the process of data backup generation must be documented, e.g. the amount and time ...	Consequences
M50	NetworkSeparation	Secure installation and operation of different network security zones. Thus unauthorized entries into sensitive networks can be complicated. The aim ...	This measure is dealing with the IT networks. The complete network setup, structure, changes or similar must be documented in ...	Frequency/Likelihood
M51	AppropriateLayingOfWires	Information transmitting wires should be laid in a security conform way. Thus the probability of data thieveries and damages of ...	It should be made difficult to get access to wires e.g. by underground laying of wires, the protection of wires ...	Frequency/Likelihood
M52	ServerRoomSetup	Appropriate setup of server rooms. Thus the lifetime of servers is extended and its ongoing functionality is ensured. The aim ...	The server room should be located apart from office rooms and ensure appropriate conditions (temperature, air humidity, constant electrical energy ...	Frequency/Likelihood & Consequences
M53	MirroredSCADA	Implementation of a mirrored SCADA system. Thus in case of a failure of the SCADA system, this failure can be ...	The mirrored SCADA system should be not be located at the same position as the acutally used SCADA system.	Consequences
M54	DataIntegrityCheck	The integrity of important data should be checked e.g. by blockchain technology. Thus falsified signals are immediately detected. The aim ...		Frequency/Likelihood & Consequences
M55	MalwareProtectionGuidelines	Implementation of guidelines for a correct behaviour to protect the IT systems from malware. Thus all employees know how to ...	The guidelines should define the handling of potentially harmful soft- and hardware. It should e.g. be defined when and which ...	Frequency/Likelihood
M56	MalwareProtectionSoftware	Installation of suitable software to protect the IT systems against malware. By this measure malware reaching the IT system shall ...	Used applications and software for defense against malware should be tailored for the use in enterprises, solutions for home use ...	Frequency/Likelihood
M57	PatchAndChangeManagement	Implementation of a concept for the patch and change management in the IT environment. By following this concept, emerging security ...	The concept should clearly define all responsabilites and procedures of the patch and changes management process. Furthermore, the handling of ...	Frequency/Likelihood
M58	NetworkTrafficAnalysis	Surveillance of all network traffic on suspicious patterns. Thus hacker attacks shall be recognized and negative consequences shall be prevented. ...		Consequences
M59	SecurityOfWirelessNetworks	Defitinition of security measures for the implementation and use of wireless network connections. Thus attacks on wireless connections shall be ...	Before the implementation of wireless networks it must be checked if any other wireless networks exist in the same area ...	Frequency/Likelihood
M60	SoftwareManagement	The software management should be organized and carried out by responsible IT experts. Thus only credible software is installed correctly, ...		Frequency/Likelihood
M61	MobileDeviceUsageRules	Setting up of clear rules for the use of mobile devices. Thus the staff knows how to use mobile devices ...	Examples for rules could be the mandatory use of privacy films for monitors or automatic screen locks after a certain ...	Frequency/Likelihood & Consequences
M62	DeletionAndDestructionOfDataCarriers	Ensuring of proper deletion of data and destruction of data carriers. By a proper deletion or destruction, the data shall ...	The data deletion mechanisms should ensure that no data can be restored and that no residual data exist. All employees ...	Frequency/Likelihood
M63	SecureOutsourcing	Assurance of IT security in case of outsourcing by setting-up appropriate agreements with the respective companies. By these agreements it ...	The agreement should ensure that the commissioned company complies with a sufficiently acknowledged security standard (e.g. the German IT-Grundschutz [IT-Basic ...	Frequency/Likelihood & Consequences
M64	Documentation	A complete documentation of all relevant assets and processes in the physical and digital infrastructure of the water utility must ...		Frequency/Likelihood & Consequences
M65	IdentificationClassificationAndRiskAssessmentTool	The Company must select a particular approach and methodology for risk assessment and analysis that incidents and prioritizes risks based ...		Frequency/Likelihood & Consequences