{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Network & Communications Security","Business Continuity & Disaster Recovery"],"inherent_rating":"high","taxonomy":["nist-800-30-threat-event","iso-27005-threat","basel-operational-risk","coso-erm-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-denial-of-service","description":"Simple, targeted, or distributed denial-of-service attacks, wireless jamming, and saturation of systems or networks (adversarial or excessive legitimate load) make resources unavailable to intended users.","details":{"category":"cyber_security","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"net-denial-of-service","taxonomies":["nist-800-30-threat-event","iso-27005-threat","basel-operational-risk","coso-erm-risk"],"treatment":"mitigate"},"id":"risk:net-denial-of-service","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-denial-of-service","sourceIds":["cobit-2019","dora","nist-800-53","nist-csf-2","soc2"],"sourceUrl":null,"title":"Denial-of-service and system saturation","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2016d9d0b97b703894782f376e98d4c833a6f1c27c1ca110289146b06ec98c01","properties":{"rationale":"Distributing processing/storage removes single choke points, reducing the impact of a denial-of-service attack on any one node.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-09-6777e6ac.json","sourceId":"uc:UC-NET-09","targetDetailPath":"/data/v1/records/risk-net-denial-of-service-934ccd7f.json","targetId":"risk:net-denial-of-service","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e2764825f1902b116d8bd2e64b2318cab5bd455d75ecc81e20b378e063f8c432","properties":{"rationale":"priority-based allocation and quotas protect shared-resource availability under saturation","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-05-f73361f2.json","sourceId":"uc:UC-BCDR-05","targetDetailPath":"/data/v1/records/risk-net-denial-of-service-934ccd7f.json","targetId":"risk:net-denial-of-service","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eafcf60fbd5b37bd73828722db4dd5943e6c08e63876f0f46d13d9664a3604fb","properties":{"rationale":"Capacity management, rate limiting, filtering, and upstream DoS mitigation are the operative defense against denial-of-service saturation.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-net-08-e0d8837a.json","sourceId":"uc:UC-NET-08","targetDetailPath":"/data/v1/records/risk-net-denial-of-service-934ccd7f.json","targetId":"risk:net-denial-of-service","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fb1605fa71e8c698225f13730978a2d1108c3677adb1265b2e61f81525255a57","properties":{"rationale":"incident detection and escalation mitigate an ongoing denial-of-service event","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-06-c505e5bd.json","sourceId":"uc:UC-BCDR-06","targetDetailPath":"/data/v1/records/risk-net-denial-of-service-934ccd7f.json","targetId":"risk:net-denial-of-service","type":"mitigates"}],"schemaVersion":1}