Naturally occurring forces of nature could disrupt the operation of an Denial of Severe Weather E information system by freezing, sleet, hail, heat, lightning, thunderstorms, Destruction Service tornados, or snowfall. An attacker manipulates people into performing actions or divulging Social P confidential information, as well as possible access to computer systems Disclosure Engineering or facilities. Modification Software Unauthorized modification of software (e.g. files, programs, database P or Tampering records) that alters the proper operational functions. Destruction Modification An individual performing a deliberate violent act could use a variety of Denial of Terrorist P or agents to damage the information system, its facility, and/or its operations. Service Destruction Denial of Theft P An adversary could steal elements of the hardware. Service An attacker exploits weaknesses in timing or state of functions to perform Denial of Time and State P actions that would otherwise be prevented (e.g. race conditions, Disclosure Modification Service manipulation user state). Transportation accidents include train derailments, river barge accidents, trucking accidents, and airlines accidents. Local transportation accidents Transportation typically occur when airports, sea ports, railroad tracks, and major Denial of E Destruction Accidents trucking routes occur in close proximity to systems facilities. Likelihood Service of HAZMAT cargo must be determined when considering the probability of local transportation accidents. Modification Unauthorized An unauthorized individual accesses a facility which may result in Denial of P Disclosure or Facility Access comprises of confidentiality, integrity, or availability. Service Destruction
Severe Weather E Naturally occurring forces of nature could disrupt the operation of an information system by freezing, sleet, hail, heat, lightning, thunderstorms, tornados, or snowfall. Destruction Denial of Service Social Engineering P An attacker manipulates people into performing actions or divulging confidential information, as well as possible access to computer systems or facilities. Disclosure Software Tampering P Unauthorized modification of software (e.g. files, programs, database records) that alters the proper operational functions. Modification or Destruction Terrorist P An individual performing a deliberate violent act could use a variety of agents to damage the information system, its facility, and/or its operations. Modification or Destruction Denial of Service Theft P An adversary could steal elements of the hardware. Denial of Service Time and State P An attacker exploits weaknesses in timing or state of functions to perform actions that would otherwise be prevented (e.g. race conditions, manipulation user state). Disclosure Modification Denial of Service Transportation Accidents E Transportation accidents include train derailments, river barge accidents, trucking accidents, and airlines accidents. Local transportation accidents typically occur when airports, sea ports, railroad tracks, and major trucking routes occur in close proximity to systems facilities. Likelihood of HAZMAT cargo must be determined when considering the probability of local transportation accidents. Destruction Denial of Service Unauthorized Facility Access P An unauthorized individual accesses a facility which may result in comprises of confidentiality, integrity, or availability. Disclosure Modification or Destruction Denial of Service
FedRAMP-Annual-SAR-Template.docx