Modification Malicious Denial of P Software that damages a system such a virus, Trojan, or worm. or Software Service Destruction Adversary attempts to acquire sensitive information such as usernames, passwords, or SSNs, by pretending to be communications from a Modification legitimate/trustworthy source. Phishing Denial of P Disclosure or Attack Service Typical attacks occur via email, instant messaging, or comparable means; Destruction commonly directing users to Web sites that appear to be legitimate sites, while actually stealing the entered information. Power interruptions may be due to any number of reasons such as Power Denial of E electrical grid failures, generator failures, uninterruptable power supply Interruptions Service failures (e.g. spike, surge, brownout, or blackout). Modification Procedural Denial of U An error in procedures could result in unintended consequences. Disclosure or Error Service Destruction Modification Procedural Denial of P Violations of standard procedures. Disclosure or Violations Service Destruction Resource An errant (buggy) process may create a situation that exhausts critical Denial of U Exhaustion resources preventing access to services. Service Modification Denial of Sabotage P Underhand interference with work. or Service Destruction Searching through disposal containers (e.g. dumpsters) to acquire Scavenging P Disclosure unauthorized data.
Malicious Software P Software that damages a system such a virus, Trojan, or worm. Modification or Destruction Denial of Service Phishing Attack P Adversary attempts to acquire sensitive information such as usernames, passwords, or SSNs, by pretending to be communications from a legitimate/trustworthy source. Typical attacks occur via email, instant messaging, or comparable means; commonly directing users to Web sites that appear to be legitimate sites, while actually stealing the entered information. Disclosure Modification or Destruction Denial of Service Power Interruptions E Power interruptions may be due to any number of reasons such as electrical grid failures, generator failures, uninterruptable power supply failures (e.g. spike, surge, brownout, or blackout). Denial of Service Procedural Error U An error in procedures could result in unintended consequences. Disclosure Modification or Destruction Denial of Service Procedural Violations P Violations of standard procedures. Disclosure Modification or Destruction Denial of Service Resource Exhaustion U An errant (buggy) process may create a situation that exhausts critical resources preventing access to services. Denial of Service Sabotage P Underhand interference with work. Modification or Destruction Denial of Service Scavenging P Searching through disposal containers (e.g. dumpsters) to acquire unauthorized data. Disclosure
FedRAMP-Annual-SAR-Template-v1.11.docx