A category 1, 2, 3, 4, or 5 land falling hurricane impact the Destruction Denial of Hurricane E facilities that house the information systems. Service Malicious Software that damages a system such a virus, Trojan, or worm. Modification Denial of P Software or Destruction Service Adversary attempts to acquire sensitive information such as Disclosure Modification Denial of usernames, passwords, or SSNs, by pretending to be or Destruction Service communications from a legitimate/trustworthy source. Phishing Attack P Typical attacks occur via email, instant messaging, or comparable means; commonly directing users to Web sites that appear to be legitimate sites, while actually stealing the entered information. interruptions may be due to any number of reasons such Denial of Power as electrical grid failures, generator failures, uninterruptable Service E Interruptions power supply failures (e.g. spike, surge, brownout, or blackout). An in procedures could result in unintended consequences. Disclosure Modification Denial of Procedural Error U or Destruction Service Procedural Violations of standard procedures. Disclosure Modification Denial of P Violations or Destruction Service Resource An errant (buggy) process may create a situation that exhausts Denial of U Exhaustion critical resources preventing access to services. Service Underhand interference with work. Modification Denial of Sabotage P or Destruction Service Searching through disposal containers (e.g. dumpsters) to Disclosure Scavenging P acquire unauthorized data. Naturally occurring forces of nature could disrupt the operation Destruction Denial of Severe Weather E of an information system by freezing, sleet, hail, heat, Service lightning, thunderstorms, tornados, or snowfall.
Hurricane E A category 1, 2, 3, 4, or 5 land falling hurricane impact the facilities that house the information systems. Destruction Denial of Service Malicious Software P Software that damages a system such a virus, Trojan, or worm. Modification or Destruction Denial of Service Phishing Attack P Adversary attempts to acquire sensitive information such as usernames, passwords, or SSNs, by pretending to be communications from a legitimate/trustworthy source. Typical attacks occur via email, instant messaging, or comparable means; commonly directing users to Web sites that appear to be legitimate sites, while actually stealing the entered information. Disclosure Modification or Destruction Denial of Service Power Interruptions E interruptions may be due to any number of reasons such as electrical grid failures, generator failures, uninterruptable power supply failures (e.g. spike, surge, brownout, or blackout). Denial of Service Procedural Error U An in procedures could result in unintended consequences. Disclosure Modification or Destruction Denial of Service Procedural Violations P Violations of standard procedures. Disclosure Modification or Destruction Denial of Service Resource Exhaustion U An errant (buggy) process may create a situation that exhausts critical resources preventing access to services. Denial of Service Sabotage P Underhand interference with work. Modification or Destruction Denial of Service Scavenging P Searching through disposal containers (e.g. dumpsters) to acquire unauthorized data. Disclosure Severe Weather E Naturally occurring forces of nature could disrupt the operation of an information system by freezing, sleet, hail, heat, lightning, thunderstorms, tornados, or snowfall. Destruction Denial of Service
SAR_Template_05_10_2013_508.docx