{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"operational","domain":["Business Continuity & Disaster Recovery","Secure Development (SDLC) & Application Security"],"inherent_rating":"high","taxonomy":["iso-27005-threat","nist-800-30-threat-source","basel-operational-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Atech-software-system-failure","description":"Failure or malfunction of operating-system, networking, or application software (defects, resource depletion, failed releases) causing loss of availability/integrity and impeding mission/business functions — including core banking/payments outages.","details":{"category":"operational","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"tech-software-system-failure","taxonomies":["iso-27005-threat","nist-800-30-threat-source","basel-operational-risk"],"treatment":"mitigate"},"id":"risk:tech-software-system-failure","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Atech-software-system-failure","sourceIds":["cobit-2019","dora","iso-27001","nist-800-53","nist-csf-2","soc1","soc2","sox"],"sourceUrl":null,"title":"Software and information-system failure","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3a5f993723cbabcfd4415a9cb64579920b4a00f47b5725d737c2dd15f57daa17","properties":{"rationale":"prioritized recovery execution restores a failed system to operational state","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-07-e5d74596.json","sourceId":"uc:UC-BCDR-07","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:40139308eb8d48d864aeab64c2e3b9c1db6ac896590911df0a6405d44ff37434","properties":{"rationale":"entering a defined safe mode provides graceful degradation when a system fails","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-11-c3dddae2.json","sourceId":"uc:UC-BCDR-11","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:41f4501007127a713bc512eef1174d4829eac7c7fb3b07954ee623ef48a82fe4","properties":{"rationale":"Current secure-configuration and maintenance documentation reduces misconfiguration- and mishandling-driven failures.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-08-29ce69df.json","sourceId":"uc:UC-SDLC-08","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4b3eb5deef67095d7cae33c228548ceb31e70bb3887a30e5968ce7c3536d3230","properties":{"rationale":"Allowing only approved, integrity-tracked changes reduces failed releases and configuration-induced failures.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-06-c1afc713.json","sourceId":"uc:UC-SDLC-06","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:57495f1180a44e6d4e45da3f120b4578e39bcadb4c4fdad1aaf6c2b466d3f926","properties":{"rationale":"capacity monitoring forestalls the resource-depletion class of system failures","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-05-f73361f2.json","sourceId":"uc:UC-BCDR-05","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6b710d6a56e7a4b07aefe80567fefddc69ff19c8c060fa0f70b307e36aa1b835","properties":{"rationale":"monitoring batch/scheduled processing and resolving logged failures directly limits system-failure impact","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-17-c9ecd00d.json","sourceId":"uc:UC-ACCESS-17","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6c9b13ebed733557d4962f7db76cf2d10680e0b19ddb381353bcb0347ac6c38a","properties":{"rationale":"monitoring system processing and resolving failures via incident/problem management cuts the impact and duration of software/processing failures","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-12-32fbbd73.json","sourceId":"uc:UC-ASSET-12","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7424483991072df36e59cd4612f8fd1b705a42b41bd7c4eb5e452b390e2d9672","properties":{"rationale":"logging, escalating, and root-causing incidents directly resolves and prevents recurring software failures","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-06-c505e5bd.json","sourceId":"uc:UC-BCDR-06","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8332f5f06e3b5be66e450cab1e8aa764df11c627752367b18944c7026c3f1be2","properties":{"rationale":"Limiting testers to read-only/isolated copies and scheduling tests to minimize disruption prevents audit testing from degrading production availability.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","sourceId":"uc:UC-SDLC-14","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9e5ccd2fce59e7dd47ded1692b638f6cd7b28c19ceca80ee419086ec87313261","properties":{"rationale":"Availability and capacity management against forecast demand directly mitigates resource-depletion and availability system failures.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-13-ae800997.json","sourceId":"uc:UC-SDLC-13","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ba3a88f977224d9bc9a55cfdbe6d103c11f30caa933170686fc45f42ac8caa3e","properties":{"rationale":"monitoring operations against expected outcomes and correcting deviations catches and fixes software processing faults","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-12-0d9cc358.json","sourceId":"uc:UC-BCDR-12","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c288b5fa59af264e81367eb93f76842e6cb8849271e703a0f26e6f15a9c30406","properties":{"rationale":"Acceptance testing in a production-representative environment plus fallback plans prevent failed releases and release-induced outages.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-07-22470d8b.json","sourceId":"uc:UC-SDLC-07","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"}],"schemaVersion":1}