{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"business_continuity","domain":["Business Continuity & Disaster Recovery","Network & Communications Security"],"inherent_rating":"high","taxonomy":["enterprise-risk","iso-27005-vulnerability","nist-800-30-threat-event"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Abcdr-single-point-concentration","description":"Headquarters, data centers, or manufacturing concentrated in one region, single power feed or network path with no redundancy, and no failover — so one catastrophe or outage disables the whole service. Includes backup-facility loss destroying backups.","details":{"category":"business_continuity","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"bcdr-single-point-concentration","taxonomies":["enterprise-risk","iso-27005-vulnerability","nist-800-30-threat-event"],"treatment":"mitigate"},"id":"risk:bcdr-single-point-concentration","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Abcdr-single-point-concentration","sourceIds":["cobit-2019","iso-27001","nist-800-53","nist-csf-2","nydfs-500","soc2"],"sourceUrl":null,"title":"Single-site / single-region / single-supply concentration","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:09587b0b8459e12d55f0494d87c65a12b391407ab3a705c428529080d801c9e1","properties":{"rationale":"Maintaining alternate communications paths and failing to a known state provides network-path redundancy against loss of a single path.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-08-e0d8837a.json","sourceId":"uc:UC-NET-08","targetDetailPath":"/data/v1/records/risk-bcdr-single-point-concentration-91008453.json","targetId":"risk:bcdr-single-point-concentration","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1734cd2bfc119a9197c79da45a6e6b1f8b07b6a7e3e4fc2f3e67275a728d1224","properties":{"rationale":"Architecting name-resolution services to be fault tolerant removes a name-service single point of failure.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-07-53c6774f.json","sourceId":"uc:UC-NET-07","targetDetailPath":"/data/v1/records/risk-bcdr-single-point-concentration-91008453.json","targetId":"risk:bcdr-single-point-concentration","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1a9a1c7526a4b3c26fc4757de17cd2e5df23cb98741724d1e60073d1b36571a1","properties":{"rationale":"Distributing processing and storage across multiple physical locations directly counters single-site/single-region concentration and single points of failure.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-net-09-6777e6ac.json","sourceId":"uc:UC-NET-09","targetDetailPath":"/data/v1/records/risk-bcdr-single-point-concentration-91008453.json","targetId":"risk:bcdr-single-point-concentration","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:241e3c4629e7ee03b280b8c6dbdb716c14622bbc5999c308fe7cfff6775e4cd3","properties":{"rationale":"keeping copies separate from the primary environment mitigates backup-facility concentration","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-03-d30f4ccf.json","sourceId":"uc:UC-BCDR-03","targetDetailPath":"/data/v1/records/risk-bcdr-single-point-concentration-91008453.json","targetId":"risk:bcdr-single-point-concentration","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:523a02ed41baf910806e759f33f602a9a7c8fa1127ebf731fae5490b892c41ee","properties":{"rationale":"the BIA-based plan identifies single points of failure and prescribes failover arrangements","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-01-428f23d3.json","sourceId":"uc:UC-BCDR-01","targetDetailPath":"/data/v1/records/risk-bcdr-single-point-concentration-91008453.json","targetId":"risk:bcdr-single-point-concentration","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b534b5db478171edb0506e9fedd3f76a28ed2f9e844861c83ae7222bc1786546","properties":{"rationale":"alternate sites, separated processing, and diverse telecom directly remove single points of failure","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/risk-bcdr-single-point-concentration-91008453.json","targetId":"risk:bcdr-single-point-concentration","type":"mitigates"}],"schemaVersion":1}