{ "total": 45, "threats": [ { "threat_id": "NT-1", "grouping": "Natural Threat", "name": "Drought & Water Shortage", "description": "Insufficient precipitation or water availability that restricts municipal, industrial or facility water supplies and can impair cooling, fire suppression, sanitation, facility operations or dependent utility services." }, { "threat_id": "NT-2", "grouping": "Natural Threat", "name": "Earthquakes", "description": "Sudden ground movement caused by seismic activity that can damage facilities, technology, utilities and transportation infrastructure, disrupt personnel access and impair the operation or recovery of controls." }, { "threat_id": "NT-3", "grouping": "Natural Threat", "name": "Fire & Wildfires", "description": "Fire affecting a facility or surrounding area that can injure personnel, destroy or damage technology and records, interrupt utilities and facility access and impair primary or recovery control capabilities." }, { "threat_id": "NT-4", "grouping": "Natural Threat", "name": "Floods", "description": "Water intrusion or inundation caused by rainfall, surface water, storm surge, infrastructure failure or other sources that can damage facilities and technology, interrupt utilities and make control-supporting locations inaccessible." }, { "threat_id": "NT-5", "grouping": "Natural Threat", "name": "Hurricanes & Tropical Storms", "description": "A hurricane, tropical storm or other tropical cyclone that can produce destructive winds, flooding, storm surge, utility outages, transportation disruption and facility damage that impair control execution or recovery." }, { "threat_id": "NT-6", "grouping": "Natural Threat", "name": "Landslides & Debris Flow", "description": "Movement of soil, rock or debris that can damage or isolate facilities, transportation routes, utilities and communications needed to execute or recover controls." }, { "threat_id": "NT-7", "grouping": "Natural Threat", "name": "Pandemic (Disease) Outbreaks", "description": "A widespread infectious disease event that can reduce workforce availability, disrupt suppliers and essential services, restrict facility access and degrade the organization's ability to operate, monitor or recover controls." }, { "threat_id": "NT-8", "grouping": "Natural Threat", "name": "Severe Weather", "description": "Severe meteorological conditions, including high winds, hail, extreme heat, heavy precipitation or similar events, that can damage facilities or technology, disrupt utilities and transportation, or otherwise degrade control execution." }, { "threat_id": "NT-9", "grouping": "Natural Threat", "name": "Space Weather", "description": "Solar or geomagnetic activity that can disrupt satellites, radio communications, navigation, timing services, electrical grids or other technologies on which control execution depends." }, { "threat_id": "NT-10", "grouping": "Natural Threat", "name": "Thunderstorms & Lightning", "description": "Thunderstorms or lightning that can cause electrical surges, fires, utility outages, communications disruption or equipment damage that impairs control execution." }, { "threat_id": "NT-11", "grouping": "Natural Threat", "name": "Tornadoes", "description": "A tornado or associated severe wind event that can damage facilities, equipment, utilities and transportation infrastructure, endanger personnel and interrupt the operation or recovery of controls." }, { "threat_id": "NT-12", "grouping": "Natural Threat", "name": "Tsunamis", "description": "A tsunami or related coastal inundation event that can cause rapid flooding, structural damage, utility disruption, loss of access and widespread damage to control-supporting facilities and infrastructure." }, { "threat_id": "NT-13", "grouping": "Natural Threat", "name": "Volcanoes", "description": "Volcanic activity, including eruption, ashfall, lava, gases or related seismic effects, that can damage or contaminate facilities and equipment, disrupt transportation and utilities and impair control execution." }, { "threat_id": "NT-14", "grouping": "Natural Threat", "name": "Winter Storms & Extreme Cold", "description": "Snow, ice, freezing temperatures or other severe winter conditions that can interrupt utilities and transportation, damage equipment, restrict personnel access and degrade control execution or recovery." }, { "threat_id": "MT-1", "grouping": "Man-Made Threat", "name": "Civil or Political Unrest", "description": "Civil disturbance, protest activity, political instability or related violence that can restrict personnel or facility access, disrupt transportation and utilities, damage assets, interrupt suppliers or otherwise impair control execution." }, { "threat_id": "MT-2", "grouping": "Man-Made Threat", "name": "Malicious Cyber Activity", "description": "Deliberate malicious cyber activity, including exploitation, malware, credential abuse, denial-of-service, social engineering or other attack techniques, that can disable, bypass, manipulate or otherwise impair controls and their supporting technologies." }, { "threat_id": "MT-3", "grouping": "Man-Made Threat", "name": "Hazardous Materials Emergencies", "description": "An accidental release, spill, leak, fire, explosion or other hazardous-materials event that can endanger personnel, require evacuation, damage facilities or interrupt operations and control-supporting infrastructure." }, { "threat_id": "MT-4", "grouping": "Man-Made Threat", "name": "Nuclear, Biological and Chemical (NBC) Weapons", "description": "Intentional use or release of chemical, biological, radiological or nuclear agents that can cause casualties, contamination, evacuation, infrastructure disruption and prolonged loss of access to facilities or resources needed for control execution." }, { "threat_id": "MT-5", "grouping": "Man-Made Threat", "name": "Physical Crime", "description": "Physical criminal activity that results in unauthorized entry, theft, vandalism, sabotage or damage to facilities, equipment, records or other assets needed for control execution." }, { "threat_id": "MT-6", "grouping": "Man-Made Threat", "name": "Terrorism & Armed Attacks", "description": "Terrorist activity, active-assailant events or other armed attacks that can cause casualties, facility damage, evacuation, loss of access, infrastructure disruption or interruption of control-supporting operations." }, { "threat_id": "MT-7", "grouping": "Man-Made Threat", "name": "Utility Service Disruption", "description": "Sustained or material loss or degradation of electricity, water, natural gas, telecommunications, internet connectivity or other utility services required to operate facilities, technologies or controls." }, { "threat_id": "MT-8", "grouping": "Man-Made Threat", "name": "Dysfunctional Management Practices", "description": "Management interference, direction, override or other intentional circumventions that prevents established controls from being performed, enforced, monitored or escalated as designed." }, { "threat_id": "MT-9", "grouping": "Man-Made Threat", "name": "Human Error", "description": "Unintentional action or omission by personnel, contractors or other authorized users that misconfigures, disables, bypasses, damages or otherwise impairs a control or its supporting technology, process or data." }, { "threat_id": "MT-10", "grouping": "Man-Made Threat", "name": "Technical / Mechanical Failure", "description": "Non-malicious failure, degradation or malfunction of hardware, software, communications, mechanical equipment or supporting infrastructure that causes a control to become unavailable, unreliable or ineffective." }, { "threat_id": "MT-11", "grouping": "Man-Made Threat", "name": "Statutory / Regulatory / Contractual Change", "description": "A change in applicable laws, regulations, government directives or contractual obligations that invalidates existing assumptions, requires different safeguards, restricts technologies or suppliers, or otherwise causes established controls to become insufficient or inoperable." }, { "threat_id": "MT-12", "grouping": "Man-Made Threat", "name": "Data Quality Degradation / Data Poisoning", "description": "Use or introduction of inaccurate, stale, corrupted, incomplete, manipulated or otherwise untrustworthy data that causes controls, analytics or automated decisions to operate incorrectly or ineffectively." }, { "threat_id": "MT-13", "grouping": "Man-Made Threat", "name": "Artificial Intelligence & Autonomous Technologies (AAT) System Failure or Unintended Behavior", "description": "Non-malicious failure, malfunction, hallucination, unsafe output, goal misalignment, unintended autonomous action or other erroneous behavior by Artificial Intelligence & Autonomous Technologies that impairs a control or dependent business process." }, { "threat_id": "MT-14", "grouping": "Man-Made Threat", "name": "Fraud, Corruption and/or Intentional Criminal Conduct", "description": "Intentional criminal or corrupt conduct by an insider, third party or other actor that can bypass, manipulate or disable controls (e.g., fraud, bribery, theft, embezzlement, extortion or deliberate policy circumvention)." }, { "threat_id": "MT-15", "grouping": "Man-Made Threat", "name": "Conflict of Interest (COI) / Undue Influence / Insider Misconduct", "description": "A Conflict of Interest (COI) or improper influence that causes a person with authority or access to make biased decisions, circumvent safeguards, conceal issues or otherwise impair objective control execution." }, { "threat_id": "MT-16", "grouping": "Man-Made Threat", "name": "Economic Shock / Market Disruption", "description": "Material economic instability, recession, inflation, interest-rate or exchange-rate shocks, commodity volatility or similar macroeconomic conditions that disrupt staffing, suppliers, investment or resources needed to sustain control execution." }, { "threat_id": "MT-17", "grouping": "Man-Made Threat", "name": "Foreign Ownership, Control, or Influence (FOCI)", "description": "Foreign Ownership, Control or Influence (FOCI) that is used to shape decisions, compel access, redirect operations or obtain sensitive information in a manner that can bypass or undermine organizational or supply-chain controls." }, { "threat_id": "MT-18", "grouping": "Man-Made Threat", "name": "Geopolitical Conflict / Government Intervention", "description": "Political conflict, government intervention, war, civil instability, nationalization, export restriction or other geopolitical action that disrupts suppliers, infrastructure, communications, access or resources required for control execution." }, { "threat_id": "MT-19", "grouping": "Man-Made Threat", "name": "Sanctions / Trade Restriction Disruption", "description": "Imposition, expansion or enforcement of sanctions, export controls, exclusions or trade restrictions that removes or constrains access to suppliers, technologies, services, personnel or financial channels required for control execution." }, { "threat_id": "MT-20", "grouping": "Man-Made Threat", "name": "Counterfeit / Non-Conforming Products", "description": "Counterfeit, substituted, defective or non-conforming components, materials, software or services enter the supply chain and cause control-supporting products to perform unpredictably, fail prematurely or operate outside required specifications." }, { "threat_id": "MT-21", "grouping": "Man-Made Threat", "name": "Hazardous / Degraded Operational Environment", "description": "Environmental, physical or operating conditions at the place of performance that exceed design assumptions or safe operating limits and degrade personnel, equipment or processes needed for control execution." }, { "threat_id": "MT-22", "grouping": "Man-Made Threat", "name": "Manufacturing Capacity / Supply Disruption", "description": "Loss, reduction or delay of manufacturing capacity, materials, components or supplier output that prevents timely availability of products or services required for control execution (e.g., sole-source or concentration failures)." }, { "threat_id": "MT-23", "grouping": "Man-Made Threat", "name": "Product Defect / Design Failure", "description": "A design flaw, manufacturing defect, quality failure or specification deviation in a product or service that causes unsafe, unreliable or ineffective operation of a control or its supporting technology." }, { "threat_id": "MT-24", "grouping": "Man-Made Threat", "name": "Supplier Financial Distress / Insolvency", "description": "Financial distress, loss of liquidity, hostile acquisition, bankruptcy or insolvency of a critical supplier that interrupts contractual performance, support, maintenance or delivery of control-dependent products or services." }, { "threat_id": "MT-25", "grouping": "Man-Made Threat", "name": "Workforce Shortage / Loss of Critical Skills / Labor Disruption", "description": "Loss, shortage, unavailability or labor disruption of personnel with required knowledge, skills or authorization that prevents controls from being performed, maintained, monitored or recovered as intended." }, { "threat_id": "MT-26", "grouping": "Man-Made Threat", "name": "Transportation / Logistics Disruption", "description": "Accident, cargo loss, carrier failure, route closure, capacity shortage or other transportation or logistics disruption that delays or prevents delivery of products, equipment or services needed for control execution." }, { "threat_id": "MT-27", "grouping": "Man-Made Threat", "name": "Infrastructure Failure / Degradation", "description": "Failure, degradation or unavailability of transportation, communications, energy, facilities or other foundational infrastructure on which the organization or its supply chain depends for control execution." }, { "threat_id": "MT-28", "grouping": "Man-Made Threat", "name": "Harvest Now / Decrypt Later (HNDL)", "description": "A threat actor intercepts and retains currently encrypted sensitive information with the intent to decrypt it later when cryptanalytic or quantum capabilities make the deployed cryptography vulnerable." }, { "threat_id": "MT-29", "grouping": "Man-Made Threat", "name": "Adversarial Artificial Intelligence (AI) Attack", "description": "Deliberate manipulation or exploitation of an AI system through adversarial inputs, prompt injection, jailbreaking, data or model poisoning, model theft, inference attacks or related techniques that bypass, alter or impair controls or AI-dependent functions." }, { "threat_id": "MT-30", "grouping": "Man-Made Threat", "name": "Operational Technology (OT) / Industrial Control System (ICS) Attack", "description": "Deliberate cyberattack against Operational Technology (OT) or Industrial Control System (ICS) environments that manipulates, disrupts or disables industrial processes, safety functions, equipment or control-supporting operations." }, { "threat_id": "MT-31", "grouping": "Man-Made Threat", "name": "Cryptographic Compromise / Cryptanalytic Capability Advancement", "description": "Advances in computing, cryptanalysis or attack techniques reduce the effective security of deployed cryptographic algorithms or key sizes, causing cryptographic controls to provide less protection than intended." } ] }