risk
Physical and cyber-physical attacks on facilities and infrastructure
Adversary conducts physical attacks on facilities (arson) or supporting infrastructure (cuts power/water), or cyber-physical attacks (remotely altering HVAC), damaging systems and supporting utilities.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- cyber_security
- domain
- Physical & Environmental Security
- Business Continuity & Disaster Recovery
- taxonomy
- nist-800-30-threat-event
- inherent_rating
- medium
Details
- risk_id
- phys-cyber-physical-facility-attack
- category
- cyber_security
- likelihood
- low
- impact
- high
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- nist-800-30-threat-event
Source
No record-specific source URL is provided.
Connections
- UC-PHYS-05 — Provide emergency power, lighting, and resilient utilities mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Backup power and generators sustain operation when an adversary cuts power/utilities, mitigating attack impact.
- UC-ACCESS-19 — Restrict physical access and maintain environmental safeguards mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Access authorization plus review of physical/environmental events deters and detects an adversary physically reaching and sabotaging infrastructure.
- UC-PHYS-01 — Restrict physical access to facilities and secure areas mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Restricting entry to facilities and secure areas keeps intruders from reaching interior systems/infrastructure to commit arson or sabotage.
- UC-PHYS-06 — Protect power and communications cabling from damage and taps mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Protected conduits and inspection for tampering/rogue devices defend power and comms infrastructure against physical sabotage.
- UC-BCDR-11 — Sustain operations via safe modes and alternate mechanisms mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- safe mode on detected conditions and alternative security mechanisms sustain safe operation during a facility/cyber-physical attack
- UC-PHYS-03 — Protect facilities against fire, water, and environmental hazards mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Fire detection and suppression mitigate fire damage from arson, an attack vector this risk names.
- UC-PHYS-02 — Monitor physical access and retain visitor and entry records mitigates Physical and cyber-physical attacks on facilities and infrastructure
- strength
- related
- rationale
- Monitoring and intrusion detection surface an adversary physically breaching or attacking the facility and its infrastructure.