Cause Deliberate The intrusion has been deliberate, because it has led to website defacement. Origin External The intrusion has occurred from outside the agency network. Severity type C. High: Significant The network intrusion has caused embarrassment, damage to the agency’s reputation loss of public (as a result of the subsequent website confidence and/or defacement) limited long term damage. D. Moderate: The agency has been inconvenienced Moderate as a result of the efforts required to inconvenience respond to the attack. J. High: Agency The agency’s business operations business operations have been impacted on following the impaired in any way intrusion of their network. N. Minor: Small The incident affected a small number areas within a of areas within the agency. single agency P. Moderate: In the affected area had to work Requires additional extra hours to resolve the incident. resources (e.g. overtime, engagement of third parties or purchase of tools) Severity High The highest severity rating is recorded Incident 2 Website Defacement – Category type Selection Rationale Definition Incident The agency website was defaced. Category Defacement of The website contained publicly public information accessible information, which was modified without authorisation. Compromises Integrity; Availability The integrity and availability of the website content was compromised, as it was altered and/or removed from
Cause Deliberate The intrusion has been deliberate, because it has led to website defacement. Origin External The intrusion has occurred from outside the agency network. Severity type C. High: Significant embarrassment, loss of public confidence and/or limited long term damage. The network intrusion has caused damage to the agency’s reputation (as a result of the subsequent website defacement) D. Moderate: Moderate inconvenience The agency has been inconvenienced as a result of the efforts required to respond to the attack. J. High: Agency business operations impaired in any way The agency’s business operations have been impacted on following the intrusion of their network. N. Minor: Small areas within a single agency The incident affected a small number of areas within the agency. P. Moderate: Requires additional resources (e.g. overtime, engagement of third parties or purchase of tools) In the affected area had to work extra hours to resolve the incident. Severity High The highest severity rating is recorded Incident 2 – Website Defacement Category type Selection Rationale Definition Incident The agency website was defaced. Category Defacement of public information The website contained publicly accessible information, which was modified without authorisation. Compromises Integrity; Availability The integrity and availability of the website content was compromised, as it was altered and/or removed from
Incident-category-guideline-v2-0-0.docx