risk
Physical and cyber-physical attacks on facilities and infrastructure
Adversary conducts physical attacks on facilities (arson) or supporting infrastructure (cuts power/water), or cyber-physical attacks (remotely altering HVAC), damaging systems and supporting utilities.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- category
- cyber_security
- domain
- Physical & Environmental Security
- Business Continuity & Disaster Recovery
- taxonomy
- nist-800-30-threat-event
- inherent_rating
- medium
Details
- risk_id
- phys-cyber-physical-facility-attack
- category
- cyber_security
- likelihood
- low
- impact
- high
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- nist-800-30-threat-event
Source
No record-specific source URL is provided.
Connections
- UC-PHYS-05 — Provide emergency power, lighting, and resilient utilities mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Backup power and generators sustain operation when an adversary cuts power/utilities, mitigating attack impact.
- UC-ACCESS-19 — Restrict physical access and maintain environmental safeguards mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Access authorization plus review of physical/environmental events deters and detects an adversary physically reaching and sabotaging infrastructure.
- UC-PHYS-01 — Restrict physical access to facilities and secure areas mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Restricting entry to facilities and secure areas keeps intruders from reaching interior systems/infrastructure to commit arson or sabotage.
- UC-PHYS-06 — Protect power and communications cabling from damage and taps mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Protected conduits and inspection for tampering/rogue devices defend power and comms infrastructure against physical sabotage.
- UC-BCDR-11 — Sustain operations via safe modes and alternate mechanisms mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- safe mode on detected conditions and alternative security mechanisms sustain safe operation during a facility/cyber-physical attack
- UC-PHYS-03 — Protect facilities against fire, water, and environmental hazards mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Fire detection and suppression mitigate fire damage from arson, an attack vector this risk names.
- UC-PHYS-02 — Monitor physical access and retain visitor and entry records mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Monitoring and intrusion detection surface an adversary physically breaching or attacking the facility and its infrastructure.