RiskRegister_ControlsLibrary_TEMPLATE.csv

Unnamed: 0,RISK INDEX,Unnamed: 2,Unnamed: 3,Unnamed: 4,Unnamed: 5,Unnamed: 6,Unnamed: 7,Unnamed: 8
,Category,Threat ID,Threat Action,TOTAL Risks,HIGH Risks,MED Risks,LOW Risks,Unaddressed Risks
,Physical,PHY-001,Loss of Property,,,,,
,Physical,PHY-002,Theft of Property,,,,,
,Physical,PHY-003,Accidental Destruction of Property,,,,,
,Physical,PHY-004,Natural Destruction of Property,,,,,
,Physical,PHY-005,Intentional Destruction of Property,,,,,
,Physical,PHY-006,Intentional Sabotage of Property,,,,,
,Physical,PHY-007,Intentional Vandalism of Property,,,,,
,Physical,PHY-008,Electrical System Failure,,,,,
,Physical,PHY-009,HVAC Failure,,,,,
,Physical,PHY-010,Structural Facility Failure,,,,,
,Physical,PHY-011,Water Distribution System Failure,,,,,
,Physical,PHY-012,Sanitation System Failure,,,,,
,Physical,PHY-013,Natural Gas Distribution of Failure,,,,,
,Physical,PHY-014,Electronic Media Failure,,,,,
,Resource,RES-001,Disruption of Water Resources,,,,,
,Resource,RES-002,Disruption of Fuel Resources,,,,,
,Resource,RES-003,Disruption of Materials Resources,,,,,
,Resource,RES-004,Disruption of Electrical Resources,,,,,
,Resource,RES-005,Disruption of Transportation Services,,,,,
,Resource,RES-006,Disruption of Communications Services,,,,,
,Resource,RES-007,Disruption of Emergency Services,,,,,
,Resource,RES-008,Disruption of Governmental Services,,,,,
,Resource,RES-009,Supplier Viability,,,,,
,Resource,RES-010,Supplier Supply Chain Failures,,,,,
,Resource,RES-011,Logisitics Provider Failures,,,,,
,Resource,RES-012,Logistics Route Disruptions,,,,,
,Resource,RES-013,Technology Services Manipulation,,,,,
,Personnel,PER-001,Personnel Labor / Skills Shortage,,,,,
,Personnel,PER-002,Loss of Personnel Resources,,,,,
,Personnel,PER-003,Disruption of Personnnel Resources,,,,,
,Personnel,PER-004,Social Engieneering of Personnel Resources,,,,,
,Personnel,PER-005,Negligent Personnel Resources,,,,,
,Personnel,PER-006,Personnel Mistakes / Errors,,,,,
,Personnel,PER-007,Personnel Inaction,,,,,
,Technical,TEC-001,Organization Fingerprinting via Open Sources,,,,,
,Technical,TEC-002,System Fingerprinting via Open Sources,,,,,
,Technical,TEC-003,System Fingerprinting via Scanning,,,,,
,Technical,TEC-004,System Fingerprinting via Sniffing,,,,,
,Technical,TEC-005,Credential Discovery via Open Sources,,,,,
,Technical,TEC-006,Credential Discovery via Scanning,,,,,
,Technical,TEC-007,Credential Discovery via Sniffing,,,,,
,Technical,TEC-008,Credential Discovery via Brute Force,,,,,
,Technical,TEC-009,Credential Discovery via Cracking,,,,,
,Technical,TEC-010,Credential Discovery via Guessing,,,,,
,Technical,TEC-011,Credential Discovery vis Pre-Computational Attacks,,,,,
,Technical,TEC-012,Misuse of System Credentials,,,,,
,Technical,TEC-013,Escalation of Privelege,,,,,
,Technical,TEC-014,Abuse of System Priveleges,,,,,
,Technical,TEC-015,Memory Manipulation,,,,,
,Technical,TEC-016,Cache Poisoning,,,,,
,Technical,TEC-017,Physical Manipulation of Technical Device,,,,,
,Technical,TEC-018,Manipulation of Trusted System,,,,,
,Technical,TEC-019,Cyrptanalysis,,,,,
,Technical,TEC-020,Data Leakage / Theft,,,,,
,Technical,TEC-021,Denial of Service,,,,,
,Technical,TEC-022,Maintaining System Persistence,,,,,
,Technical,TEC-023,Manipulation of Data in Transit / Use,,,,,
,Technical,TEC-024,Capture of Data in Transit / Use via Sniffing,,,,,
,Technical,TEC-025,Capture of Data in Transit / Use via Debugging,,,,,
,Technical,TEC-026,Capture of Data in Transit / Use via Keystroke Logging,,,,,
,Technical,TEC-027,Replay of Data in Transit / Use,,,,,
,Technical,TEC-028,Misdelivery of Data,,,,,
,Technical,TEC-029,Capture of Stored Data,,,,,
,Technical,TEC-030,Manipulation of Stored Data,,,,,
,Technical,TEC-031,Application Exploitation via Input Manipulation,,,,,
,Technical,TEC-032,Application Exploitation via Parameter Injection,,,,,
,Technical,TEC-033,Application Exploitation via Code Injection,,,,,
,Technical,TEC-034,Application Exploitation via Command Injection,,,,,
,Technical,TEC-035,Application Exploitation via Path Traversal,,,,,
,Technical,TEC-036,Application Exploitation via API Abuse,,,,,
,Technical,TEC-037,Application Exploitation via Fuzzing,,,,,
,Technical,TEC-038,Application Exploitation via Reverse Engineering,,,,,
,Technical,TEC-039,Application Exploitation via Resource Location Guessing,,,,,
,Technical,TEC-040,Application Exploitation via Source Code Manipulation,,,,,
,Technical,TEC-041,Application Exploitation via Authentication Bypass,,,,,