risk
Single-site / single-region / single-supply concentration
Headquarters, data centers, or manufacturing concentrated in one region, single power feed or network path with no redundancy, and no failover — so one catastrophe or outage disables the whole service. Includes backup-facility loss destroying backups.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- business_continuity
- domain
- Business Continuity & Disaster Recovery
- Network & Communications Security
- taxonomy
- enterprise-risk
- iso-27005-vulnerability
- nist-800-30-threat-event
- inherent_rating
- high
Details
- risk_id
- bcdr-single-point-concentration
- category
- business_continuity
- likelihood
- medium
- impact
- high
- inherent_rating
- high
- treatment
- mitigate
- taxonomies
- enterprise-risk
- iso-27005-vulnerability
- nist-800-30-threat-event
Source
No record-specific source URL is provided.
Connections
- UC-NET-08 — Maintain communications availability under attack and failure mitigates Single-site / single-region / single-supply concentration
- strength
- related
- rationale
- Maintaining alternate communications paths and failing to a known state provides network-path redundancy against loss of a single path.
- UC-NET-07 — Secure name resolution and time services mitigates Single-site / single-region / single-supply concentration
- strength
- related
- rationale
- Architecting name-resolution services to be fault tolerant removes a name-service single point of failure.
- UC-NET-09 — Reduce attack surface through resilient architecture mitigates Single-site / single-region / single-supply concentration
- strength
- primary
- rationale
- Distributing processing and storage across multiple physical locations directly counters single-site/single-region concentration and single points of failure.
- UC-BCDR-03 — Back up data and verify restorability mitigates Single-site / single-region / single-supply concentration
- strength
- related
- rationale
- keeping copies separate from the primary environment mitigates backup-facility concentration
- UC-BCDR-01 — Maintain business continuity and disaster recovery plans mitigates Single-site / single-region / single-supply concentration
- strength
- related
- rationale
- the BIA-based plan identifies single points of failure and prescribes failover arrangements
- UC-BCDR-04 — Provide redundant and alternate processing, storage, and telecom mitigates Single-site / single-region / single-supply concentration
- strength
- primary
- rationale
- alternate sites, separated processing, and diverse telecom directly remove single points of failure