{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Physical & Environmental Security","Business Continuity & Disaster Recovery"],"inherent_rating":"medium","taxonomy":["nist-800-30-threat-event"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aphys-cyber-physical-facility-attack","description":"Adversary conducts physical attacks on facilities (arson) or supporting infrastructure (cuts power/water), or cyber-physical attacks (remotely altering HVAC), damaging systems and supporting utilities.","details":{"category":"cyber_security","impact":"high","inherent_rating":"medium","likelihood":"low","risk_id":"phys-cyber-physical-facility-attack","taxonomies":["nist-800-30-threat-event"],"treatment":"mitigate"},"id":"risk:phys-cyber-physical-facility-attack","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aphys-cyber-physical-facility-attack","sourceIds":["hipaa","iso-27001","nist-800-53","nist-csf-2","soc1","soc2"],"sourceUrl":null,"title":"Physical and cyber-physical attacks on facilities and infrastructure","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:11deefa2c69ae78c6e290231e22f934ffc1b7ed6e9c988802d9b47db693c2f16","properties":{"rationale":"Backup power and generators sustain operation when an adversary cuts power/utilities, mitigating attack impact.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-05-da41e189.json","sourceId":"uc:UC-PHYS-05","targetDetailPath":"/data/v1/records/risk-phys-cyber-physical-facility-attack-e372d06e.json","targetId":"risk:phys-cyber-physical-facility-attack","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:11fe9a986e34244ae40027d08cce29410f0ad1ec4a74cb082300df6f05ac6c05","properties":{"rationale":"Access authorization plus review of physical/environmental events deters and detects an adversary physically reaching and sabotaging infrastructure.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-19-08a17359.json","sourceId":"uc:UC-ACCESS-19","targetDetailPath":"/data/v1/records/risk-phys-cyber-physical-facility-attack-e372d06e.json","targetId":"risk:phys-cyber-physical-facility-attack","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:27c8f3cb070c242662d115aac643c19e0d4f2446ffecec620cbb6d7ede1a2df6","properties":{"rationale":"Restricting entry to facilities and secure areas keeps intruders from reaching interior systems/infrastructure to commit arson or sabotage.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-01-354431a7.json","sourceId":"uc:UC-PHYS-01","targetDetailPath":"/data/v1/records/risk-phys-cyber-physical-facility-attack-e372d06e.json","targetId":"risk:phys-cyber-physical-facility-attack","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:31b6d4ceb31573682d32aab382647207340a0be4554ed590a7548681e58b0dbb","properties":{"rationale":"Protected conduits and inspection for tampering/rogue devices defend power and comms infrastructure against physical sabotage.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-06-1be360d8.json","sourceId":"uc:UC-PHYS-06","targetDetailPath":"/data/v1/records/risk-phys-cyber-physical-facility-attack-e372d06e.json","targetId":"risk:phys-cyber-physical-facility-attack","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:413f112d7496e96033344e24041ab908ab235e34ffd558e60267a4816e11869e","properties":{"rationale":"safe mode on detected conditions and alternative security mechanisms sustain safe operation during a facility/cyber-physical attack","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-11-c3dddae2.json","sourceId":"uc:UC-BCDR-11","targetDetailPath":"/data/v1/records/risk-phys-cyber-physical-facility-attack-e372d06e.json","targetId":"risk:phys-cyber-physical-facility-attack","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:701ef03663fb677a5363946461a13bfe2a9152bcb3eb3c0d7f34d5bc6cf19c42","properties":{"rationale":"Fire detection and suppression mitigate fire damage from arson, an attack vector this risk names.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-03-edaccc19.json","sourceId":"uc:UC-PHYS-03","targetDetailPath":"/data/v1/records/risk-phys-cyber-physical-facility-attack-e372d06e.json","targetId":"risk:phys-cyber-physical-facility-attack","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a6b22fd7b482368b345a8daab8c99e67a501021bce8e7c798e0eb75cbb861eed","properties":{"rationale":"Monitoring and intrusion detection surface an adversary physically breaching or attacking the facility and its infrastructure.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-02-05f35d07.json","sourceId":"uc:UC-PHYS-02","targetDetailPath":"/data/v1/records/risk-phys-cyber-physical-facility-attack-e372d06e.json","targetId":"risk:phys-cyber-physical-facility-attack","type":"mitigates"}],"schemaVersion":1}