Distributed An adversary uses multiple compromised information systems to attack a Denial of Denial of P single target and could cause denial of service for users of the targeted Service Service Attack information systems. Seismic activity can damage the information system or its facility. Refer Denial of Earthquake E Destruction to the following document for earthquake probability maps . Service Disruption of electronic and wire transmissions could be caused by high Denial of E, P frequency (HF), very high frequency (VHF), and ultra-high frequency Interference Service (UHF) communications devices (jamming) or sun spots. The illegal covert act of copying, reproducing, recording, photographing Espionage P Disclosure Modification or intercepting to obtain sensitive information. Fire can be caused by arson, electrical problems, lightning, chemical Denial of Fire E, P Destruction agents, or other unrelated proximity fires. Service Water damage caused by flood hazards can be caused by proximity to Denial of Floods E local flood plains. Flood maps and base flood elevation must be Destruction Service considered. Intentional deception regarding data or information about an information Modification Denial of Fraud P system could compromise the confidentiality, integrity, or availability of Disclosure or Service an information system. Destruction Hardware or Denial of Equipment E Hardware or equipment may fail due to a variety of reasons. Service Failure An unauthorized modification to hardware that alters the proper Hardware Denial of P functioning of equipment in a manner that degrades the security Modification Tampering Service functionality the asset provides. A category 1, 2, 3, 4, or 5 land falling hurricane could impact the facilities Denial of Hurricane E Destruction that house the information systems. Service
Distributed Denial of Service Attack P An adversary uses multiple compromised information systems to attack a single target and could cause denial of service for users of the targeted information systems. Denial of Service Earthquake E Seismic activity can damage the information system or its facility. Refer to the following document for earthquake probability maps . Destruction Denial of Service Interference E, P Disruption of electronic and wire transmissions could be caused by high frequency (HF), very high frequency (VHF), and ultra-high frequency (UHF) communications devices (jamming) or sun spots. Denial of Service Espionage P The illegal covert act of copying, reproducing, recording, photographing or intercepting to obtain sensitive information. Disclosure Modification Fire E, P Fire can be caused by arson, electrical problems, lightning, chemical agents, or other unrelated proximity fires. Destruction Denial of Service Floods E Water damage caused by flood hazards can be caused by proximity to local flood plains. Flood maps and base flood elevation must be considered. Destruction Denial of Service Fraud P Intentional deception regarding data or information about an information system could compromise the confidentiality, integrity, or availability of an information system. Disclosure Modification or Destruction Denial of Service Hardware or Equipment Failure E Hardware or equipment may fail due to a variety of reasons. Denial of Service Hardware Tampering P An unauthorized modification to hardware that alters the proper functioning of equipment in a manner that degrades the security functionality the asset provides. Modification Denial of Service Hurricane E A category 1, 2, 3, 4, or 5 land falling hurricane could impact the facilities that house the information systems. Destruction Denial of Service
FedRAMP-Annual-SAR-Template-FINAL-1.docx