Sat May 17 10:29:53 PDT 2014

Overarching: Content: What are the reasonably anticipated consequences of ICS information protection failures?


Options:

Fill in the table by identifying relevant content types with examples and removing or replacing consequences identified.

Decisions:

For identified ICS situations, associate content and failure modes that might produce identified consequences (and the consequence types) as a result of loss of integrity (I), availability (A), confidentiality (C), control over use (U), and loss of accountability (T) and supply details of the basis for this conclusion:

Situation in the ICS environment Relevant ICS content and failure mode(s) Identified LOW consequence type(s) and description(s) Identified MEDIUM consequence type(s) and description(s) Identified HIGH consequence type(s) and description(s)
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
[IACUT] [Waste / Insured] Details [IACUT] [PR / Gross / Loss / Injury / Environment / Society] Details [IACUT] [Death / Environment / Society / Collapse / Dire] Details
Reasonably anticipated consequences of security failures

The key for the above table is as follows:

Key Description
Waste Wasted time and effort (inefficiency)
Insured Losses reasonably covered by insurance (e.g., shrinkage, minor accidents and injuries).
PR Substantial negative publicity.
Gross Acts viewed as gross negligence.
Losses Substantial enterprise value reduction.
Injury Serious bodily harm.
Environment Limited environmental damage.
Society Limited societal harm.
Death Loss of (human) life
Environment Serious environmental damage.
Society Serious societal damage
Collapse Enterprise Collapse.
Dire Other dire consequences.
Key for protection failures

Basis: Describe the basis for each claim or refer to external documentation. Add rows as necessary. At least the following areas should be considered in your analysis, even if many of them may not be placed in the table:
Processing rate or output quality is reduced {within / outside} of defined tolerance ranges.
Processing is stopped and has to be restarted and {no / some} equipment damage results.
Processing is stopped and cannot be restarted until {equipment / facility} is {repaired / replaced} resulting in {delay / loss / shutdown / etc.}.
Hazardous conditions arise during processing, producing undesired {internal / near-equipment / facility-wide / outside-of facility / regional / global} effects. [define area and effects]
Competitive advantage is lost or reduced (e.g., from leaked status or process details, corrupted content, etc.).
Leaked status or process details leads to {internal / external} exploitation for {illegal activities / harm to plant or facility / harm to infrastructure / harm to enterprise}.
Limited loss of control.
Substantial loss of business or harm to brand results.
Conditions interfere with contracts or upset customers.
Confidential or proprietary data leaked.
Intellectual property like patent background and design data leaked.
Medical treatment, dose, or device controls that interact with humans fail (in various ways).
Decision support mechanisms fail to provide proper assistance.
Supervisory control and data acquisition (SCADA) systems fail to operate properly.
Programmable logic controllers (PLCs) fail to operate properly.
Distributed Control Systems (DCS) fail to {accurately depict sensory data / properly actuate}.
ICS {internal / external} communications mechanisms fail to operate properly.
Other ICS elements fail in other ways.
Critical infrastructure systems fail {causing ICS effects / as a result of ICS failures}.
Legally protected confidential medical, privacy, or other data inadequately protected in ICS environment.
{Internal/External} information asks ICS to operate in an {undesired/unsafe} mode.
Legal mandates inadequately carried out in the ICS environment.
Legal {retention / disposition / holds} impact ICS {operations / historians}.
Industry-specific regulations unable to be properly met or demonstrated.
Contractually mandated controls unable to be properly met or demonstrated.
Contractual limitations on {use / sharing / disposition} improperly fulfilled.
Contract performance data improperly {provided / applied}.
Government classified or restricted data improperly handled.
Controls with regard to {import / export / transport / some other requirement} not properly carried out.
Required {reporting / tracking / accountability} mechanisms not properly functioning.
Controlled {substances / devices / artifacts} inadequately controlled.
Personally identifying information not properly controlled.
Medical information (test results, fees, providers, etc.) not properly controlled.
Financial information about people or enterprises not properly controlled.


Basis:

Different ICS mechanisms have different implications in different situations in terms of the consequences of protection failures.

Typical consequences identified include:

For example, a temperature control system might have LOW consequences in a small automated photographic developing facility, a MEDIUM consequence in a food production facility (where redundant tests identify a "bad batch"), and HIGH consequences in a chemical plant where its failure causes a major explosion.

Typically, consequences resulting from information protection failures are associated with a loss of integrity (I), availability (A), confidentiality (C), control over use (U), or loss of accountability (T) in an information system, with the ultimate result leading to real-world effects through the impact of the failures on the control system.

Copyright(c) Fred Cohen, 1988-2012 - All Rights Reserved