{"text_format":"1","workbook":"xlsx","n_sheets":19,"sheets":["Home","User Guide","Assess","Scenarios","Saved Values","Sheet1","Summary Save","Vuln Class Report","Common Vuln Report","Mit Group Report","Common Mit Report","Likelihood","Source Data","Impact","Terms","Common Vuln","Common Mit","Summary Data2","Mitigations"],"not_rendered":{"charts":8,"images":0,"macros":1,"external_links":1,"defined_names":7,"comments":0,"pivot_tables":10},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Home","index":0,"n_rows":31,"n_cols":11,"rows_kept":31,"cut":false,"hidden":false,"merged":[[8,1,8,2]]}
[]
["Failure Scenario Evaluation",null,"2014-06-01"]
[]
[]
[null,"Failure Scenario Based Risk Assessment Toolkit for the Electricity Subsector"]
[null,"Version 0.3"]
[]
[null,"Objective of Toolkit: "]
[null,"This is a toolkit to support evaluation of the failure scenarios in the document.  It allows utilities to take notes on utility-specific state of vulnerabilities, mitigations, and perceptions of threat and impact.  "]
[null,"Contents of this toolkit are based on:"]
[null,"NESCOR failure scenarios"]
[null,"NISTIR 7628"]
[null,"DOE Risk Management Process (RMP)"]
[null,"NIST Cyber Security Framework"]
[null,"Integrating Failures Scenarios into Risk Assessment Methodology (RAM)"]
[]
[null,"Worksheet","Tab",null,null,null,"Utility Specific Concerns"]
[null,"Failure Scenario Exploration and Data Entry",null,null,null,"ami","Advanced Metering Infrastructure (ami)",true,32,1,18]
[null,"Failure Scenarios Assessment Summary Tool","Assess",null,null,"der","Distributed Energy Resources (der)",true,26,1]
[null,"Failure Scenarios Detail Analysis Tool","Detailed",null,null,"wampac","Wide Area Monitoring, Protection, and Control (wampac)",true,12,1]
[null,"Vulnerability Summary Views",null,null,null,"et","Electronic Transportation (et)",true,16,1]
[null,"Vulnerability Class Report Tool","Vuln Class Report",null,null,"dr","Demand Response (dr)",true,7,1]
[null,"Common Vulnerability Report Tool","Common Vuln Report",null,null,"dgm","Distribution Grid Management (dgm)",true,16,1]
[null,"Mitigation Group Report Tool","Mit Group Report",null,null,"gen","Generation (gen)",true,16,1]
[null,"Common Mitigation Report Tool","Common Mit Report",null,null,"generic","Generic",true,4,1]
[null,"Background Information from NESCOR and other reference documents",null,null,null,null,null,null,{"$f":"SUM(I18:I25)","v":129},{"$f":"SUM(J18:J25)","v":8}]
[null,"Threat Opportunity","Likelihood"]
[null,"Impact","Impact"]
[null,"Terms","Terms"]
[null,"Common Vulnerabilities","Common Vuln"]
[null,"Common Mitigations","Common Mit"]

{"sheet":"User Guide","index":1,"n_rows":116,"n_cols":2,"rows_kept":116,"cut":false,"hidden":false,"merged":[]}
["Failure Scenario Based Risk Assessment Toolkit for the Electricity Subsector"]
[null,"This toolkit requires Microsoft Excel 2010 or later on Windows, with macros enabled, for full functionality."]
[null,"The Purpose of this Toolkit is to support a utility's analysis of the NESCOR Failure Scenarios and how they relate to the utility's needs."]
["Overview "]
[null,"A utility may use this toolkit to:"]
[null,"•  Record their risk rating, notes and identified mitigation gaps for each NESCOR failure scenario in domains of interest. A risk rating is a pair of scores (Impact, Likelihood). The scores may have values H, M, or L. (Assess tab or Detailed tab)"]
[null,"•  View the full text of each NESCOR failure scenario (Individual scenario worksheet on Detail tab, also linked off the Assess tab"]
[null,"•  For each scenario, analyze in detail the utility status of vulnerabilities and potential mitigations for that scenario, and record that analysis. (Individual scenario worksheet, Detailed tab)"]
[null,"•  For each scenario, analyze in detail the factors that determine impact and likelihood, and record that analysis. (Individual scenario worksheet, Detailed tab)"]
[null,"•  View explanatory information regarding how to \"score\" the factors that determine impact and likelihood. (Impact and Likelilhood tabs)"]
[null,"•  To assist in prioritizing vulnerabilities, generate reports that show the contribution of a single vulnerability, or of a class of vulnerabilities, to each failure scenario of interest to the utility, and to the full set of such scenarios. (Common Vuln Report and Vuln Class Report tabs)"]
[null,"•  To assist in prioritizing mitigations, generate reports that show the contribution of a single mitigation, or of a mitigation action group, to each failure scenario of interest to the utility, and to the full set of such scenarios. (Common Mit Report and Mit Group Report tabs)"]
[null,"The tabs contained in this Failure Scenario Toolkit are described below, with their detailed directions for use."]
[]
["Home tab"]
["The Purpose of this tab is to provide the background information to set the context  for this toolkit and a Table of Contents to define the tabs."]
[null,"1. The Objective is defined, and the Contents contains links to the source documents that were used to create this toolkit and its process."]
[null,"2. The Worksheet list is a Table of Contents documenting the tabs in this toolkit, with links to each tab.  Each tab is listed with a longer, more explanatory name, while the link itself uses the shorter tab name."]
[null,"   2.a The tabs are grouped into data entry tabs (green), the report generation tabs (blue) and the supporting information tabs (red). "]
[null,"   2.b The data entry tabs do not require data to be entered to use this toolkit. In particular, it is not required to partially or fully fill in an individual scenario worksheet (Detaileds tab) in order to fill in ratings for that scenario on the Assess tab. The user may fill in risk ratings directly in the Assess tab for some or all scenarios. As much information as desired (or none) may be filled in on the individual scenario worksheets (Detailed tab). Notes, Impact and Likelihood ratings will be automatically filled in on the Assess worksheet if filled in on an individual scenario worksheet."]
[null,"3. The Utility Specific Concerns filter allows the complete list of NESCOR failure scenarios contained in the Assess tab to be filered by the domains that the utility is interested in.  Choosing a subset of the check boxes and running this filter will cause the following process to focus on the chosen domains  The others will be hidden, and can be recovered by simply checking all the options.  "]
[]
[]
["User Guide tab"]
["The Purpose of this tab is to provide detailed navigation through the toolkit."]
[null,"This set of instructions on how to use the Failure Scenario Toolkit"]
[]
[]
["Failure Scenario Exploration and Data Entry"]
[null,"Assess tab"]
[null,"Impact and Likelihood can be done either qualitatively (H, M, L) or quantitatively (0, 1, 3, 9). Risk is only High, Moderate, or Low. This tab also can be used to record key results from the analysis, in particular utility mitigation gaps and user-defined notes."]
[null,"1. Each of the columns have an Excel filter that supports any sorting that the utility prefers as this toolkit is used."]
[null,"2. The first column, Domain, shows the NESCOR domains."]
[null,"3. The second column, Number, is the scenario number from the Failure Scenario document (see document reference on the Home tab)."]
[null,"4. The third column, Title, is the scenario title, also from the Failure Scenario document.  Each title is a link to the Detailed tab, which includes the complete text from the Failure Scenario document as well as fields for recording a utility's analysis of that specific scenario."]
[null,"5. Columns E and F, Likelihood and Impact Scores (0, 1, 3, 9), are populated from the Detailed tab if filled in there, and cannot be changed on the Assess tab.  "]
[null,"6. Columns G, H, and I are available for a utility to rate their own Impact, Likelihood, and Risk as H, M, or L. The Risk value is not automatically calculated based upon Impact and Likelihood. The Overview section on the Detailed tab provides one method to perform ratings of Impact, Likelihood and Risk, see guidance. The user of the tool may customize this method or use other criteria to assign these values."]
[null,"7. Column J is an option to enter Notes. The contents of this field are defined by the user to support their process. For example, this may record utility specific technical information that supports the utility ratings, status of the analysis of this scenario, an assignee, or action items."]
[null,"8. The Utility Gap column, K, is provided to record additional mitigations that may be considered by the utility based upon the toolkit analysis of the scenario. "]
[]
[]
[null,"Scenarios tab"]
[null,"This tab presents all information on the scenario from the Failure Scenario document:  Description, Relevant Vulnerabilities, Potential Mitigations, and Impacts are pre-populated.  The utility can choose to document details of utility-specific ratings and any notes."]
[null,"Overview"]
[null,"• All entries on this sheet define a thought process  to assist filling in the summary risk rating values."]
[null,"• All entries on the sheet are manual, and optional, and there are no automated calculations, other than the Totals which are also used to populate the Summary table and the Assess tab. The tool user may employ their own rules for assigning higher level values (such as Risk) based upon lower level values (such as Impact and Likelihood). "]
[null,"• In particular, examination of the Relevant Vulnerabilities Analysis and Potential Mitigations Analysis tables provides input to assigning a rating for Residual Vulnerability below the Threat Likelihood and Opportunity Scoring table. "]
[null,"• An examination of the Threat Likelihood and Opportunity Scoring table provides input to assigning a Likelihood Estimate. "]
[null,"• An examination of the Impact Analysis table provides input to assigning a Impact Estimate. "]
[null,"1. This is a detailed view of a failure scenario.  The utility can use this page, if desired, for capturing notes and observations about utility-specific vulnerabilties, state of mitigations, and perceptions of threat and impact.  The SUMMARY cells at right contains utility-specific rating or likelihood and impact, which are then copied up to the high level Assessment Tool tab, along with the notes.  Select SAVE to store the notes and observations.  All entries are optional.       "]
[null,"2. Navigation between scenarios is via the buttons at the top of the page, where the specific scenario's category, number, title, and description, are shown.  Transition to another scenario (without going back to the Assess tab) via the \"<<\" (i.e. first scenario in list),\"<\" (i.e. previous), \">\" (i.e. next), and \">>\" (i.e. last) buttons.  Any data entered can be saved or discarded.  "]
[null,"3. For the Threat Likelihood and Opportunity Scoring table, click on the column header \"Score\" to access the Likelihood tab which explains the factors in this table and the scale NESCOR used to score them. The user may customize this scale. "]
[null,"4. For the Impact Scoring table, click on the column header \"Utility specific perception of severity\" to access the Impact tab which explains the factors in this table and NESCOR's scale to score them. The user may customize this scale."]
[]
[]
["Vulnerability Summary Views"]
[null,"Vuln Class Report tab"]
[null,"This tab provides an optional capability to show how the vulnerability classes contribute to the failure scenarios, again with the ability to use filters to select specifics to explore details."]
[null,"1. If a utility has entered a rating for Risk on any of the scenarios, either via the Assess or Scenarios tabs, the Generate Reports button will re-run these charts and fill them in with the utility-specific data.  "]
[null,"2. The filter provides a choice of the vulnerabilities for which the report is created."]
[null,"3. Some users may wish to prioritize specific vulnerabilities or types of vulnerabilities across all failure scenarios, as part of their risk assessment process. The Vuln Class Report tab provides a tool to assist with this prioritization. These tools provide input to determine the priority of a specific vulnerability by:"]
[null,"• Showing the subset of failure scenarios to which a vulnerability contributes, and calculating a metric for the contribution to each scenario that takes into consideration the risk rating of the scenario (Detailed View of Failure Scenario Severities sorted by Vulnerability Class)"]
[null,"• Showing which vulnerabilities have the highest overall contribution to the total set of failure scenarios of interest to the utility, where the metric calculated for this total contribution takes into consideration the risk rating of the scenarios to which the  vulnerability contributes (Global View of Vulnerability Class Severities)"]
[null,"The calculations done to obtain these metrics, shown as \"severity values\" in the reports, are detailed on the report worksheet.  These reports serve as a helpful indicator, and are not proposed as the sole basis for vulnerability prioritization."]
[]
[]
[null,"Common Vulnerabilty Report tab"]
[null,"This tab provides an optional capability to show both Detailed and Global Views of Common Vulnerabilities, with the ability to use filters to select specifics to explore details."]
[null,"1. If a utility has entered a rating for Risk on any of the scenarios, either via the Assess or Detailed tabs, the Generate Reports button will re-run these charts and fill them in with the utility-specific data.  "]
[null,"2. The filter provides a choice of the vulnerabilities for which the report is created."]
[null,"3. Some users may wish to prioritize specific vulnerabilities or types of vulnerabilities across all failure scenarios, as part of their risk assessment process. The Common Vulnerability Report tab provides a tool to assist with this prioritization. These tools provide input to determine the priority of a specific vulnerability by:"]
[null,"• Showing the subset of failure scenarios to which a vulnerability contributes, and calculating a metric for the contribution to each scenario that takes into consideration the risk rating of the scenario (Detailed View of Common Vulnerability Severities)"]
[null,"• Showing which vulnerabilities have the highest overall contribution to the total set of failure scenarios of interest to the utility, where the metric calculated for this total contribution takes into consideration the risk rating of the scenarios to which the  vulnerability contributes (Global View of Common Vulnerability Severities)"]
[null,"The calculations done to obtain these metrics, shown as \"severity values\" in the reports, are detailed on the report worksheet.  These reports serve as a helpful indicator, and are not proposed as the sole basis for vulnerability prioritization."]
[]
[]
[null,"Mit Group Report tab"]
[null,"This tab provides an optional capability to show how the mitigation action groups contribute to the failure scenarios, again with the ability to use filters to select specifics to explore details."]
[null,"1. If a utility has entered a rating for Risk on any of the scenarios, either via the Assess or Detailed tabs, the Generate Reports button will re-run these charts and fill them in with the utility-specific data.  "]
[null,"2. The filter provides a choice of the vulnerabilities for which the report is created."]
[null,"3. Some users may wish to prioritize specific vulnerabilities or types of vulnerabilities across all failure scenarios, as part of their risk assessment process. The Mit Group Report tab provides a tool to assist with this prioritization. These tools provide input to determine the priority of a specific vulnerability by:"]
[null,"• Showing the subset of failure scenarios to which a mitigation belongs and calculating a metric for the contribution to each scenario that takes into consideration the risk rating of the scenario (Detailed View of Failure Scenario Severities sorted by Mitigation Group)"]
[null,"• Showing which mitigations have the highest overall contribution to the total set of failure scenarios of interest to the utility, where the metric calculated for this total contribution takes into consideration the risk rating of the scenarios to which the  mitigation contributes (Global View of Mitigation Group Severities)"]
[null,"The calculations done to obtain these metrics, shown as \"severity values\" in the reports, are detailed on the report worksheet.  These reports serve as a helpful indicator, and are not proposed as the sole basis for mitigation prioritization."]
[]
[]
[null,"Common Mitigations Report tab"]
[null,"This tab provides an optional capability to show both Detailed and Global Views of Common Mitigations with the ability to use filters to select specifics to explore details."]
[null,"1. If a utility has entered a rating for Risk on any of the scenarios, either via the Assess or Detailed tabs, the Generate Reports button will re-run these charts and fill them in with the utility-specific data.  "]
[null,"2. The filter provides a choice of the mitigations for which the report is created."]
[null,"3. Some users may wish to prioritize specific mitigations or types of mitigations across all failure scenarios, as part of their risk assessment process. The Common Mitigation Report tab provides a tool to assist with this prioritization. These tools provide input to determine the priority of a specific mitigation by:"]
[null,"• Showing the subset of failure scenarios to which a mitigation contributes, and calculating a metric for the contribution to each scenario that takes into consideration the risk rating of the scenario (Detailed View of Common Mitigation Severities)"]
[null,"• Showing which vulnerabilities have the highest overall contribution to the total set of failure scenarios of interest to the utility, where the metric calculated for this total contribution takes into consideration the risk rating of the scenarios to which the  vulnerability contributes (Global View of Common Mitigation Severities)"]
[null,"The calculations done to obtain these metrics, shown as \"severity values\" in the reports, are detailed on the report worksheet.  These reports serve as a helpful indicator, and are not proposed as the sole basis for vulnerability prioritization."]
[]
[]
["Background Information from NESCOR and other reference documents"]
[null,"Impact tab"]
[null,"Tthis tab provides the Impact Criteria from the Failure Scenario document."]
[null,"This table explains the NESCOR criteria used to assess scenario impact and NESCOR's scale to score them. These are the factors in the Impact table on the Detail tab. The user may customize this scale."]
[]
[null,"Likelihood tab"]
[null,"This tab defines the criteria and NESCOR scoring guidance for assessing Threat Likelihood and Opportunity, as found in the Failure Scenario document."]
[null,"These are the factors in the Threat Likelihood and Opportunities table on the Detail tab. The user may customize this scale.  "]
[]
[null,"Terms tab"]
[null,"This tab provides definitions of basic Terms used in the Failure Scenario document and this toolkit."]
[]
[]
[null,"Common Vuln tab"]
[null,"This tab provides the list of Common Vulnerabilities, as well as a mapping to which scenarios list them as relevant vulnerabilities."]
[null,"This is useful as a base vulnerability list for users that prioritize vulnerabilities as part of their risk assessment process, as well as the mapping of which Common Vulnerabilities fall into each NISTIR 7628 Vulnerability Class."]
[]
[null,"Common Mit tab"]
[null,"This tab provides the list of Common Mitigations as well as a mapping to which scenarios list them as relevant mitigations"]
[null,"This is useful as a base mitigation list for users that prioritize mitigations as part of their risk assessment process, as well as the mapping of which Common Mitigations fall into each of the NESCOR Action Groups."]

{"sheet":"Assess","index":2,"n_rows":130,"n_cols":12,"rows_kept":130,"cut":false,"hidden":false,"merged":[]}
["ID","Domain","Number","Title","Likelihood Score\nTotal","Impact Score\nTotal"," Likelihood Rating\n(H,M,L)","Impact Rating\n(H,M,L)","Risk Rating\n(H,M,L)","Notes","Utility Gap","Column1"]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B2&\".\"&C2)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.237788},{"$f":"Sheet1!C2","v":"ami"},{"$f":"Sheet1!D2","v":1},{"$f":"INDEX(Saves[Value],MATCH(A2,Saves[ID],0))","v":"Authorized Employee Issues Unauthorized Mass Remote Disconnect"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.1"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B3&\".\"&C3)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.89318799999999998},{"$f":"Sheet1!C3","v":"ami"},{"$f":"Sheet1!D3","v":2},{"$f":"INDEX(Saves[Value],MATCH(A3,Saves[ID],0))","v":"Authorized Employee Manipulates MDMS Data to Over/Under Charge"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.2"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B4&\".\"&C4)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.72029200000000004},{"$f":"Sheet1!C4","v":"ami"},{"$f":"Sheet1!D4","v":3},{"$f":"INDEX(Saves[Value],MATCH(A4,Saves[ID],0))","v":"Invalid Access Used to Install Malware Enabling Remote Internet Control"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.3"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B5&\".\"&C5)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":7.8233700000000003E-2},{"$f":"Sheet1!C5","v":"ami"},{"$f":"Sheet1!D5","v":4},{"$f":"INDEX(Saves[Value],MATCH(A5,Saves[ID],0))","v":"Overused Key Captured on Meter Bus Enables Usage Data Manipulation"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.4"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B6&\".\"&C6)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.68889800000000001},{"$f":"Sheet1!C6","v":"ami"},{"$f":"Sheet1!D6","v":5},{"$f":"INDEX(Saves[Value],MATCH(A6,Saves[ID],0))","v":"Mass Meter Rekeying Required when Common Key Compromised"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.5"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B7&\".\"&C7)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.94562500000000005},{"$f":"Sheet1!C7","v":"ami"},{"$f":"Sheet1!D7","v":6},{"$f":"INDEX(Saves[Value],MATCH(A7,Saves[ID],0))","v":"One Compromised Meter in a Mesh Wireless Network Blocks Others"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.6"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B8&\".\"&C8)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.37693399999999999},{"$f":"Sheet1!C8","v":"ami"},{"$f":"Sheet1!D8","v":7},{"$f":"INDEX(Saves[Value],MATCH(A8,Saves[ID],0))","v":"Deployed Meters Containing Undesirable Functionality Need Repair"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.7"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B9&\".\"&C9)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.21212900000000001},{"$f":"Sheet1!C9","v":"ami"},{"$f":"Sheet1!D9","v":8},{"$f":"INDEX(Saves[Value],MATCH(A9,Saves[ID],0))","v":"False Meter Alarms Overwhelm AMI and Mask Real Alarms"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.8"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B10&\".\"&C10)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.74736499999999995},{"$f":"Sheet1!C10","v":"ami"},{"$f":"Sheet1!D10","v":9},{"$f":"INDEX(Saves[Value],MATCH(A10,Saves[ID],0))","v":"Invalid Disconnect Messages to Meters Impact Customers and Utility"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.9"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B11&\".\"&C11)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.39968599999999999},{"$f":"Sheet1!C11","v":"ami"},{"$f":"Sheet1!D11","v":10},{"$f":"INDEX(Saves[Value],MATCH(A11,Saves[ID],0))","v":"Unauthorized Pricing Information Impacts Utility Revenue"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.10"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B12&\".\"&C12)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.25281500000000001},{"$f":"Sheet1!C12","v":"ami"},{"$f":"Sheet1!D12","v":11},{"$f":"INDEX(Saves[Value],MATCH(A12,Saves[ID],0))","v":"Spoofed Meter \"Last Gasp\" Messages Cause Fake Outage"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.11"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B13&\".\"&C13)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.20329800000000001},{"$f":"Sheet1!C13","v":"ami"},{"$f":"Sheet1!D13","v":12},{"$f":"INDEX(Saves[Value],MATCH(A13,Saves[ID],0))","v":"Improper Firewall Configuration Exposes Customer Data"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.12"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B14&\".\"&C14)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.55224499999999999},{"$f":"Sheet1!C14","v":"ami"},{"$f":"Sheet1!D14","v":13},{"$f":"INDEX(Saves[Value],MATCH(A14,Saves[ID],0))","v":"Authorized User uses Unattended Console to Disconnect Customer"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.13"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B15&\".\"&C15)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.79520999999999997},{"$f":"Sheet1!C15","v":"ami"},{"$f":"Sheet1!D15","v":14},{"$f":"INDEX(Saves[Value],MATCH(A15,Saves[ID],0))","v":"Breach of Cellular Provider's Network Exposes AMI Access"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.14"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B16&\".\"&C16)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.34544399999999997},{"$f":"Sheet1!C16","v":"ami"},{"$f":"Sheet1!D16","v":15},{"$f":"INDEX(Saves[Value],MATCH(A16,Saves[ID],0))","v":"Inadequate Security for Backup AMI Enables Malicious Activity"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.15"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B17&\".\"&C17)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.35594100000000001},{"$f":"Sheet1!C17","v":"ami"},{"$f":"Sheet1!D17","v":16},{"$f":"INDEX(Saves[Value],MATCH(A17,Saves[ID],0))","v":"Compromised Headend Allows Impersonation of CA"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.16"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B18&\".\"&C18)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":1.7573499999999999E-2},{"$f":"Sheet1!C18","v":"ami"},{"$f":"Sheet1!D18","v":17},{"$f":"INDEX(Saves[Value],MATCH(A18,Saves[ID],0))","v":"Malicious Creation of Duplicate APN Prevents Valid AMI Messages"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.17"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B19&\".\"&C19)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.80232499999999995},{"$f":"Sheet1!C19","v":"ami"},{"$f":"Sheet1!D19","v":18},{"$f":"INDEX(Saves[Value],MATCH(A19,Saves[ID],0))","v":"Unauthorized Devices Create DoS and Prevent Valid DR Messages"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.18"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B20&\".\"&C20)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.54442000000000002},{"$f":"Sheet1!C20","v":"ami"},{"$f":"Sheet1!D20","v":19},{"$f":"INDEX(Saves[Value],MATCH(A20,Saves[ID],0))","v":"Out of Sync Time-stamping Causes Discard of Legitimate Commands"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.19"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B21&\".\"&C21)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.66386000000000001},{"$f":"Sheet1!C21","v":"ami"},{"$f":"Sheet1!D21","v":20},{"$f":"INDEX(Saves[Value],MATCH(A21,Saves[ID],0))","v":"Independent Energy Generator Causes Lower TOU Pricing"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.20"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B22&\".\"&C22)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.53182799999999997},{"$f":"Sheet1!C22","v":"ami"},{"$f":"Sheet1!D22","v":21},{"$f":"INDEX(Saves[Value],MATCH(A22,Saves[ID],0))","v":"Stolen Field Service Tools Expose AMI Infrastructure"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.21"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B23&\".\"&C23)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.19144600000000001},{"$f":"Sheet1!C23","v":"ami"},{"$f":"Sheet1!D23","v":22},{"$f":"INDEX(Saves[Value],MATCH(A23,Saves[ID],0))","v":"Wireless Access to AMI Administration Causes Invalid Disconnect"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.22"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B24&\".\"&C24)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.226574},{"$f":"Sheet1!C24","v":"ami"},{"$f":"Sheet1!D24","v":23},{"$f":"INDEX(Saves[Value],MATCH(A24,Saves[ID],0))","v":"Meter Authentication Credentials are Compromised and Posted on Internet"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.23"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B25&\".\"&C25)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.53527000000000002},{"$f":"Sheet1!C25","v":"ami"},{"$f":"Sheet1!D25","v":24},{"$f":"INDEX(Saves[Value],MATCH(A25,Saves[ID],0))","v":"Weak Cryptography Exposes AMI Device Communication"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.24"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B26&\".\"&C26)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.85010699999999995},{"$f":"Sheet1!C26","v":"ami"},{"$f":"Sheet1!D26","v":25},{"$f":"INDEX(Saves[Value],MATCH(A26,Saves[ID],0))","v":"Known but Unpatched Vulnerability Exposes AMI Infrastructure"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.25"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B27&\".\"&C27)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.56832400000000005},{"$f":"Sheet1!C27","v":"ami"},{"$f":"Sheet1!D27","v":26},{"$f":"INDEX(Saves[Value],MATCH(A27,Saves[ID],0))","v":"AMI Billing Cards are Compromised Incurring Loss of Revenu"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.26"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B28&\".\"&C28)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.12592500000000001},{"$f":"Sheet1!C28","v":"ami"},{"$f":"Sheet1!D28","v":27},{"$f":"INDEX(Saves[Value],MATCH(A28,Saves[ID],0))","v":"Reverse Engineering of AMI Equipment Allows Unauthorized Mass Control"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.27"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B29&\".\"&C29)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.197576},{"$f":"Sheet1!C29","v":"ami"},{"$f":"Sheet1!D29","v":28},{"$f":"INDEX(Saves[Value],MATCH(A29,Saves[ID],0))","v":"Failed Patching Causes AMI Devices to Stop Operating"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.28"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B30&\".\"&C30)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.186555},{"$f":"Sheet1!C30","v":"ami"},{"$f":"Sheet1!D30","v":29},{"$f":"INDEX(Saves[Value],MATCH(A30,Saves[ID],0))","v":"Unauthorized Device Acquires HAN Access and Steals Private Information"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.29"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B31&\".\"&C31)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.417771},{"$f":"Sheet1!C31","v":"ami"},{"$f":"Sheet1!D31","v":30},{"$f":"INDEX(Saves[Value],MATCH(A31,Saves[ID],0))","v":"Threat Agent Performs Unauthorized Firmware Alteration"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.30"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B32&\".\"&C32)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.48572500000000002},{"$f":"Sheet1!C32","v":"ami"},{"$f":"Sheet1!D32","v":31},{"$f":"INDEX(Saves[Value],MATCH(A32,Saves[ID],0))","v":"Rogue Firmware Enables Unauthorized Mass Remote Disconnect"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.31"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B33&\".\"&C33)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.24684200000000001},{"$f":"Sheet1!C33","v":"ami"},{"$f":"Sheet1!D33","v":32},{"$f":"INDEX(Saves[Value],MATCH(A33,Saves[ID],0))","v":"Power Stolen by Reconfiguring Meter via Optical Port"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"ami.32"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B34&\".\"&C34)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":9.6893900000000005E-2},{"$f":"Sheet1!C34","v":"der"},{"$f":"Sheet1!D34","v":1},{"$f":"INDEX(Saves[Value],MATCH(A34,Saves[ID],0))","v":"Inadequate Access Control of DER Systems Causes Electrocution"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.1"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B35&\".\"&C35)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.99953899999999996},{"$f":"Sheet1!C35","v":"der"},{"$f":"Sheet1!D35","v":2},{"$f":"INDEX(Saves[Value],MATCH(A35,Saves[ID],0))","v":"DER's Rogue Wireless Connection Exposes the DER System to Threat Agents via the Internet"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.2"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B36&\".\"&C36)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.88433399999999995},{"$f":"Sheet1!C36","v":"der"},{"$f":"Sheet1!D36","v":3},{"$f":"INDEX(Saves[Value],MATCH(A36,Saves[ID],0))","v":"Malware Introduced in DER System During Deployment"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.3"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B37&\".\"&C37)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.63606600000000002},{"$f":"Sheet1!C37","v":"der"},{"$f":"Sheet1!D37","v":4},{"$f":"INDEX(Saves[Value],MATCH(A37,Saves[ID],0))","v":"Confidential DER Generation Information Stolen to Harm Customer"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.4"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B38&\".\"&C38)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.76008200000000004},{"$f":"Sheet1!C38","v":"der"},{"$f":"Sheet1!D38","v":5},{"$f":"INDEX(Saves[Value],MATCH(A38,Saves[ID],0))","v":"Trojan Horse Attack Captures Confidential DER Generation Information"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.5"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B39&\".\"&C39)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.72423899999999997},{"$f":"Sheet1!C39","v":"der"},{"$f":"Sheet1!D39","v":6},{"$f":"INDEX(Saves[Value],MATCH(A39,Saves[ID],0))","v":"Compromised DER Sequence of Commands Causes Power Outage"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.6"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B40&\".\"&C40)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.301012},{"$f":"Sheet1!C40","v":"der"},{"$f":"Sheet1!D40","v":7},{"$f":"INDEX(Saves[Value],MATCH(A40,Saves[ID],0))","v":"Incorrect Clock Causes Substation DER System Shut Down During Critical Peak"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.7"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B41&\".\"&C41)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.73446299999999998},{"$f":"Sheet1!C41","v":"der"},{"$f":"Sheet1!D41","v":8},{"$f":"INDEX(Saves[Value],MATCH(A41,Saves[ID],0))","v":"EV Charging Station Ignores Utility Command to Limit Fast-Charging"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.8"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B42&\".\"&C42)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.484433},{"$f":"Sheet1!C42","v":"der"},{"$f":"Sheet1!D42","v":9},{"$f":"INDEX(Saves[Value],MATCH(A42,Saves[ID],0))","v":"Loss of DER Control Occurs due to Invalid or Missing Messages"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.9"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B43&\".\"&C43)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.48461599999999999},{"$f":"Sheet1!C43","v":"der"},{"$f":"Sheet1!D43","v":10},{"$f":"INDEX(Saves[Value],MATCH(A43,Saves[ID],0))","v":"Threat Agent Modifies FDEMS Efficiency Settings"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.10"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B44&\".\"&C44)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.37368400000000002},{"$f":"Sheet1!C44","v":"der"},{"$f":"Sheet1!D44","v":11},{"$f":"INDEX(Saves[Value],MATCH(A44,Saves[ID],0))","v":"Threat Agent Shuts Down Commercial/Industrial FDEMS"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.11"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B45&\".\"&C45)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.69616299999999998},{"$f":"Sheet1!C45","v":"der"},{"$f":"Sheet1!D45","v":12},{"$f":"INDEX(Saves[Value],MATCH(A45,Saves[ID],0))","v":"Modified Management Settings for Substation FDEMS Impact Power Quality"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.12"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B46&\".\"&C46)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.20522399999999999},{"$f":"Sheet1!C46","v":"der"},{"$f":"Sheet1!D46","v":13},{"$f":"INDEX(Saves[Value],MATCH(A46,Saves[ID],0))","v":"Custom Malware Gives Threat Agent Control of FDEMS"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.13"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B47&\".\"&C47)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.70377900000000004},{"$f":"Sheet1!C47","v":"der"},{"$f":"Sheet1!D47","v":14},{"$f":"INDEX(Saves[Value],MATCH(A47,Saves[ID],0))","v":"DER Systems Shut Down by Spoofed SCADA Control Command"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.14"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B48&\".\"&C48)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.918763},{"$f":"Sheet1!C48","v":"der"},{"$f":"Sheet1!D48","v":15},{"$f":"INDEX(Saves[Value],MATCH(A48,Saves[ID],0))","v":"Threat Agent Spoofs DER Data Monitored by DER SCADA Systems"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.15"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B49&\".\"&C49)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.29375499999999999},{"$f":"Sheet1!C49","v":"der"},{"$f":"Sheet1!D49","v":16},{"$f":"INDEX(Saves[Value],MATCH(A49,Saves[ID],0))","v":"DER SCADA System Issues Invalid Commands"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.16"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B50&\".\"&C50)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.158607},{"$f":"Sheet1!C50","v":"der"},{"$f":"Sheet1!D50","v":17},{"$f":"INDEX(Saves[Value],MATCH(A50,Saves[ID],0))","v":"Utility DERMS Miscalculates DER Energy/Service Requests"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.17"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B51&\".\"&C51)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":4.0426900000000002E-2},{"$f":"Sheet1!C51","v":"der"},{"$f":"Sheet1!D51","v":18},{"$f":"INDEX(Saves[Value],MATCH(A51,Saves[ID],0))","v":"Microgrid Disconnect Process Compromised via DERMS"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.18"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B52&\".\"&C52)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.26954400000000001},{"$f":"Sheet1!C52","v":"der"},{"$f":"Sheet1!D52","v":19},{"$f":"INDEX(Saves[Value],MATCH(A52,Saves[ID],0))","v":"Threat Agent Gains Access to Utility DERMS via FDEMS"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.19"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B53&\".\"&C53)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.51216600000000001},{"$f":"Sheet1!C53","v":"der"},{"$f":"Sheet1!D53","v":20},{"$f":"INDEX(Saves[Value],MATCH(A53,Saves[ID],0))","v":"Compromised DERMS Weather Data Modifies DER Output Forecasts"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.20"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B54&\".\"&C54)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.22281000000000001},{"$f":"Sheet1!C54","v":"der"},{"$f":"Sheet1!D54","v":21},{"$f":"INDEX(Saves[Value],MATCH(A54,Saves[ID],0))","v":"DER System Registration Information Stolen from DERMS"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.21"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B55&\".\"&C55)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":9.8194000000000007E-3},{"$f":"Sheet1!C55","v":"der"},{"$f":"Sheet1!D55","v":22},{"$f":"INDEX(Saves[Value],MATCH(A55,Saves[ID],0))","v":"DELETED"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.22"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B56&\".\"&C56)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.73768},{"$f":"Sheet1!C56","v":"der"},{"$f":"Sheet1!D56","v":23},{"$f":"INDEX(Saves[Value],MATCH(A56,Saves[ID],0))","v":"Utility Makes Incorrect Decisions Based on Invalid DER Information"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.23"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B57&\".\"&C57)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.68696400000000002},{"$f":"Sheet1!C57","v":"der"},{"$f":"Sheet1!D57","v":24},{"$f":"INDEX(Saves[Value],MATCH(A57,Saves[ID],0))","v":"Retail Energy Provider Misuses Confidential/Private Information from DERMS"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.24"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B58&\".\"&C58)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.92805000000000004},{"$f":"Sheet1!C58","v":"der"},{"$f":"Sheet1!D58","v":25},{"$f":"INDEX(Saves[Value],MATCH(A58,Saves[ID],0))","v":"Threat Agent Unexpectedly Reduces Retail Energy Provider Output"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.25"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B59&\".\"&C59)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.99263100000000004},{"$f":"Sheet1!C59","v":"der"},{"$f":"Sheet1!D59","v":26},{"$f":"INDEX(Saves[Value],MATCH(A59,Saves[ID],0))","v":"Spoofed Microgrid Status Messages Cause Disconnect from Grid"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"der.26"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B60&\".\"&C60)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.58077699999999999},{"$f":"Sheet1!C60","v":"wampac"},{"$f":"Sheet1!D60","v":1},{"$f":"INDEX(Saves[Value],MATCH(A60,Saves[ID],0))","v":"Denial of Service Attack Impairs PTP Service"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.1"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B61&\".\"&C61)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":3.34582E-2},{"$f":"Sheet1!C61","v":"wampac"},{"$f":"Sheet1!D61","v":2},{"$f":"INDEX(Saves[Value],MATCH(A61,Saves[ID],0))","v":"Network Equipment used to Spoof WAMPAC Messages"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.2"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B62&\".\"&C62)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":2.0425599999999999E-2},{"$f":"Sheet1!C62","v":"wampac"},{"$f":"Sheet1!D62","v":3},{"$f":"INDEX(Saves[Value],MATCH(A62,Saves[ID],0))","v":"Improper PDC Configuration Interferes with Transmission of Measurement Data"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.3"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B63&\".\"&C63)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.57004500000000002},{"$f":"Sheet1!C63","v":"wampac"},{"$f":"Sheet1!D63","v":4},{"$f":"INDEX(Saves[Value],MATCH(A63,Saves[ID],0))","v":"Measurement Data Compromised due to PDC Authentication Compromise"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.4"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B64&\".\"&C64)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.82208999999999999},{"$f":"Sheet1!C64","v":"wampac"},{"$f":"Sheet1!D64","v":5},{"$f":"INDEX(Saves[Value],MATCH(A64,Saves[ID],0))","v":"Improper Phasor Gateway Configuration Obscures Cascading Failures"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.5"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B65&\".\"&C65)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.35440700000000003},{"$f":"Sheet1!C65","v":"wampac"},{"$f":"Sheet1!D65","v":6},{"$f":"INDEX(Saves[Value],MATCH(A65,Saves[ID],0))","v":"Compromised Communications between PMUs and Control Center"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.6"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B66&\".\"&C66)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":8.0934900000000004E-2},{"$f":"Sheet1!C66","v":"wampac"},{"$f":"Sheet1!D66","v":7},{"$f":"INDEX(Saves[Value],MATCH(A66,Saves[ID],0))","v":"Compromised WAMPAC Historical Data Impacts Grid Stability"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.7"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B67&\".\"&C67)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.46553699999999998},{"$f":"Sheet1!C67","v":"wampac"},{"$f":"Sheet1!D67","v":8},{"$f":"INDEX(Saves[Value],MATCH(A67,Saves[ID],0))","v":"Malware in PMU/PDC Firmware Compromises Data Collection"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.8"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B68&\".\"&C68)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.61197999999999997},{"$f":"Sheet1!C68","v":"wampac"},{"$f":"Sheet1!D68","v":9},{"$f":"INDEX(Saves[Value],MATCH(A68,Saves[ID],0))","v":"DELETED"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.9"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B69&\".\"&C69)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":5.33623E-3},{"$f":"Sheet1!C69","v":"wampac"},{"$f":"Sheet1!D69","v":10},{"$f":"INDEX(Saves[Value],MATCH(A69,Saves[ID],0))","v":"Compromised PMU/PDC/Phasor Gateway Metadata"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.10"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B70&\".\"&C70)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.77071000000000001},{"$f":"Sheet1!C70","v":"wampac"},{"$f":"Sheet1!D70","v":11},{"$f":"INDEX(Saves[Value],MATCH(A70,Saves[ID],0))","v":"Compromised Communications between Substations"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.11"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B71&\".\"&C71)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.55264100000000005},{"$f":"Sheet1!C71","v":"wampac"},{"$f":"Sheet1!D71","v":12},{"$f":"INDEX(Saves[Value],MATCH(A71,Saves[ID],0))","v":"GPS Time Signal Compromise"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"wampac.12"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B72&\".\"&C72)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.128665},{"$f":"Sheet1!C72","v":"et"},{"$f":"Sheet1!D72","v":1},{"$f":"INDEX(Saves[Value],MATCH(A72,Saves[ID],0))","v":"Custom Malware causes EV Overcharge and Explosion"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.1"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B73&\".\"&C73)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.75131400000000004},{"$f":"Sheet1!C73","v":"et"},{"$f":"Sheet1!D73","v":2},{"$f":"INDEX(Saves[Value],MATCH(A73,Saves[ID],0))","v":"Simultaneous Fast Charges cause Transformer Overload"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.2"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B74&\".\"&C74)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.96336200000000005},{"$f":"Sheet1!C74","v":"et"},{"$f":"Sheet1!D74","v":3},{"$f":"INDEX(Saves[Value],MATCH(A74,Saves[ID],0))","v":"Virus Propagated between EVs and EV Service Equipment (EVSE)"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.3"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B75&\".\"&C75)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.27484399999999998},{"$f":"Sheet1!C75","v":"et"},{"$f":"Sheet1!D75","v":4},{"$f":"INDEX(Saves[Value],MATCH(A75,Saves[ID],0))","v":"EV Charging Locations Disclosed via Utility Database"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.4"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B76&\".\"&C76)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.73133300000000001},{"$f":"Sheet1!C76","v":"et"},{"$f":"Sheet1!D76","v":5},{"$f":"INDEX(Saves[Value],MATCH(A76,Saves[ID],0))","v":"Compromised Protocol Translation Module Enables Control of EVs"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.5"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B77&\".\"&C77)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.53701500000000002},{"$f":"Sheet1!C77","v":"et"},{"$f":"Sheet1!D77","v":6},{"$f":"INDEX(Saves[Value],MATCH(A77,Saves[ID],0))","v":"EVSE Connects Wirelessly to Wrong Meter and Compromises Billing"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.6"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B78&\".\"&C78)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.459426},{"$f":"Sheet1!C78","v":"et"},{"$f":"Sheet1!D78","v":7},{"$f":"INDEX(Saves[Value],MATCH(A78,Saves[ID],0))","v":"Private Information Disclosed in Transit between EV and EVSE"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.7"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B79&\".\"&C79)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.123586},{"$f":"Sheet1!C79","v":"et"},{"$f":"Sheet1!D79","v":8},{"$f":"INDEX(Saves[Value],MATCH(A79,Saves[ID],0))","v":"Customer Misuses their EV Registration ID to Obtain Preferential Rate"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.8"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B80&\".\"&C80)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.297072},{"$f":"Sheet1!C80","v":"et"},{"$f":"Sheet1!D80","v":9},{"$f":"INDEX(Saves[Value],MATCH(A80,Saves[ID],0))","v":"EV Registration ID Stolen or Purchased to Obtain Preferential Rate"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.9"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B81&\".\"&C81)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.57546399999999998},{"$f":"Sheet1!C81","v":"et"},{"$f":"Sheet1!D81","v":10},{"$f":"INDEX(Saves[Value],MATCH(A81,Saves[ID],0))","v":"High Priority EV Registration Identity Misused to Obtain Faster Charging"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.10"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B82&\".\"&C82)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.55254400000000004},{"$f":"Sheet1!C82","v":"et"},{"$f":"Sheet1!D82","v":11},{"$f":"INDEX(Saves[Value],MATCH(A82,Saves[ID],0))","v":"All EV Registration IDs Stolen from Utility"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.11"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B83&\".\"&C83)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.961839},{"$f":"Sheet1!C83","v":"et"},{"$f":"Sheet1!D83","v":12},{"$f":"INDEX(Saves[Value],MATCH(A83,Saves[ID],0))","v":"Unavailable Communication Blocks Customer Use of EV Preferential Rate"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.12"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B84&\".\"&C84)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.57384800000000002},{"$f":"Sheet1!C84","v":"et"},{"$f":"Sheet1!D84","v":13},{"$f":"INDEX(Saves[Value],MATCH(A84,Saves[ID],0))","v":"Invalidated EV Registration ID Blocks Customer use of Preferential Rate"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.13"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B85&\".\"&C85)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.61115299999999995},{"$f":"Sheet1!C85","v":"et"},{"$f":"Sheet1!D85","v":14},{"$f":"INDEX(Saves[Value],MATCH(A85,Saves[ID],0))","v":"EV Charging Process Slowed by Validation Delay of EV Registration ID"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.14"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B86&\".\"&C86)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.76615200000000006},{"$f":"Sheet1!C86","v":"et"},{"$f":"Sheet1!D86","v":15},{"$f":"INDEX(Saves[Value],MATCH(A86,Saves[ID],0))","v":"Malware Causes Discharge of EV to the Grid"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.15"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B87&\".\"&C87)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.77788000000000002},{"$f":"Sheet1!C87","v":"et"},{"$f":"Sheet1!D87","v":16},{"$f":"INDEX(Saves[Value],MATCH(A87,Saves[ID],0))","v":"An EV is Exploited to Threaten Transformer or Substation"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"et.16"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B88&\".\"&C88)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.62171699999999996},{"$f":"Sheet1!C88","v":"dr"},{"$f":"Sheet1!D88","v":1},{"$f":"INDEX(Saves[Value],MATCH(A88,Saves[ID],0))","v":"Blocked DR Messages Result in Increased Prices or Outages"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dr.1"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B89&\".\"&C89)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.20699100000000001},{"$f":"Sheet1!C89","v":"dr"},{"$f":"Sheet1!D89","v":2},{"$f":"INDEX(Saves[Value],MATCH(A89,Saves[ID],0))","v":"Private Information is Publicly Disclosed on DRAS Communications Channel"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dr.2"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B90&\".\"&C90)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":8.5001499999999997E-3},{"$f":"Sheet1!C90","v":"dr"},{"$f":"Sheet1!D90","v":3},{"$f":"INDEX(Saves[Value],MATCH(A90,Saves[ID],0))","v":"Messages are Modified or Spoofed on DRAS Communications Channel"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dr.3"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B91&\".\"&C91)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.49691600000000002},{"$f":"Sheet1!C91","v":"dr"},{"$f":"Sheet1!D91","v":4},{"$f":"INDEX(Saves[Value],MATCH(A91,Saves[ID],0))","v":"Improper DRAS Configuration Causes Inappropriate DR Messages"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dr.4"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B92&\".\"&C92)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.14532900000000001},{"$f":"Sheet1!C92","v":"dr"},{"$f":"Sheet1!D92","v":5},{"$f":"INDEX(Saves[Value],MATCH(A92,Saves[ID],0))","v":"Non-specific Malware Compromises DRAS or Customer DR System"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dr.5"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B93&\".\"&C93)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.37654700000000002},{"$f":"Sheet1!C93","v":"dr"},{"$f":"Sheet1!D93","v":6},{"$f":"INDEX(Saves[Value],MATCH(A93,Saves[ID],0))","v":"Custom Malware Compromises DRAS"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dr.6"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B94&\".\"&C94)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.34283599999999997},{"$f":"Sheet1!C94","v":"dr"},{"$f":"Sheet1!D94","v":7},{"$f":"INDEX(Saves[Value],MATCH(A94,Saves[ID],0))","v":"Custom Malware Compromises Customer DR System"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dr.7"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B95&\".\"&C95)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.16287399999999999},{"$f":"Sheet1!C95","v":"dgm"},{"$f":"Sheet1!D95","v":1},{"$f":"INDEX(Saves[Value],MATCH(A95,Saves[ID],0))","v":"Wireless Signals are Jammed to Disrupt Monitoring and Control"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.1"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B96&\".\"&C96)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.41417599999999999},{"$f":"Sheet1!C96","v":"dgm"},{"$f":"Sheet1!D96","v":2},{"$f":"INDEX(Saves[Value],MATCH(A96,Saves[ID],0))","v":"Shared Communications Leveraged to Disrupt DMS Communications"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.2"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B97&\".\"&C97)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.35069800000000001},{"$f":"Sheet1!C97","v":"dgm"},{"$f":"Sheet1!D97","v":3},{"$f":"INDEX(Saves[Value],MATCH(A97,Saves[ID],0))","v":"Malicious Code Injected into Substation Equipment via Physical Access"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.3"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B98&\".\"&C98)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.51855899999999999},{"$f":"Sheet1!C98","v":"dgm"},{"$f":"Sheet1!D98","v":4},{"$f":"INDEX(Saves[Value],MATCH(A98,Saves[ID],0))","v":"Malicious Code Injected into Substation Equipment via Remote Access"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.4"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B99&\".\"&C99)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.78934499999999996},{"$f":"Sheet1!C99","v":"dgm"},{"$f":"Sheet1!D99","v":5},{"$f":"INDEX(Saves[Value],MATCH(A99,Saves[ID],0))","v":"Remote Access Used to Compromise DMS"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.5"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B100&\".\"&C100)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.66791},{"$f":"Sheet1!C100","v":"dgm"},{"$f":"Sheet1!D100","v":6},{"$f":"INDEX(Saves[Value],MATCH(A100,Saves[ID],0))","v":"Spoofed Substation Field Devices Influence Automated Responses"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.6"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B101&\".\"&C101)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":3.5641600000000002E-2},{"$f":"Sheet1!C101","v":"dgm"},{"$f":"Sheet1!D101","v":7},{"$f":"INDEX(Saves[Value],MATCH(A101,Saves[ID],0))","v":"QoS Spoofed to Create Denial of Service for DGM Communications"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.7"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B102&\".\"&C102)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.87504800000000005},{"$f":"Sheet1!C102","v":"dgm"},{"$f":"Sheet1!D102","v":8},{"$f":"INDEX(Saves[Value],MATCH(A102,Saves[ID],0))","v":"Supply Chain Vulnerabilities Used to Compromise DGM Equipment"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.8"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B103&\".\"&C103)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.188694},{"$f":"Sheet1!C103","v":"dgm"},{"$f":"Sheet1!D103","v":9},{"$f":"INDEX(Saves[Value],MATCH(A103,Saves[ID],0))","v":"Weakened Security during Disaster enables DGM Compromise"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.9"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B104&\".\"&C104)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.122403},{"$f":"Sheet1!C104","v":"dgm"},{"$f":"Sheet1!D104","v":10},{"$f":"INDEX(Saves[Value],MATCH(A104,Saves[ID],0))","v":"Switched Capacitor Banks are Manipulated to Degrade Power Quality"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.10"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B105&\".\"&C105)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.613313},{"$f":"Sheet1!C105","v":"dgm"},{"$f":"Sheet1!D105","v":11},{"$f":"INDEX(Saves[Value],MATCH(A105,Saves[ID],0))","v":"Threat Agent Triggers Blackout via Remote Access to Distribution System"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.11"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B106&\".\"&C106)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.62339599999999995},{"$f":"Sheet1!C106","v":"dgm"},{"$f":"Sheet1!D106","v":12},{"$f":"INDEX(Saves[Value],MATCH(A106,Saves[ID],0))","v":"Hijacked Substation Wireless Damages Substation Equipment"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.12"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B107&\".\"&C107)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.51028200000000001},{"$f":"Sheet1!C107","v":"dgm"},{"$f":"Sheet1!D107","v":13},{"$f":"INDEX(Saves[Value],MATCH(A107,Saves[ID],0))","v":"Poor Account Management Compromises DMS and Causes Power Loss"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.13"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B108&\".\"&C108)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.74770099999999995},{"$f":"Sheet1!C108","v":"dgm"},{"$f":"Sheet1!D108","v":14},{"$f":"INDEX(Saves[Value],MATCH(A108,Saves[ID],0))","v":"Power loss due to lack of serial communication authentication"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.14"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B109&\".\"&C109)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.430176},{"$f":"Sheet1!C109","v":"dgm"},{"$f":"Sheet1!D109","v":15},{"$f":"INDEX(Saves[Value],MATCH(A109,Saves[ID],0))","v":"Threat Agent Causes Worker Electrocution via Remote Access to Distribution System"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.15"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B110&\".\"&C110)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.251307},{"$f":"Sheet1!C110","v":"dgm"},{"$f":"Sheet1!D110","v":16},{"$f":"INDEX(Saves[Value],MATCH(A110,Saves[ID],0))","v":"Threat agent compromises serial control link to substation"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"dgm.16"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B111&\".\"&C111)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":9.4897800000000004E-2},{"$f":"Sheet1!C111","v":"generic"},{"$f":"Sheet1!D111","v":1},{"$f":"INDEX(Saves[Value],MATCH(A111,Saves[ID],0))","v":"Malicious and Non-malicious Insiders Pose Range of Threats"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"generic.1"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B112&\".\"&C112)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.35458200000000001},{"$f":"Sheet1!C112","v":"generic"},{"$f":"Sheet1!D112","v":2},{"$f":"INDEX(Saves[Value],MATCH(A112,Saves[ID],0))","v":"Inadequate Network Segregation Enables Access for Threat Agents"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"generic.2"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B113&\".\"&C113)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.57678099999999999},{"$f":"Sheet1!C113","v":"generic"},{"$f":"Sheet1!D113","v":3},{"$f":"INDEX(Saves[Value],MATCH(A113,Saves[ID],0))","v":"Portable Media Enables Access Despite Network Controls"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"generic.3"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B114&\".\"&C114)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":8.2825999999999997E-2},{"$f":"Sheet1!C114","v":"generic"},{"$f":"Sheet1!D114","v":4},{"$f":"INDEX(Saves[Value],MATCH(A114,Saves[ID],0))","v":"Supply Chain Attacks Weaken Trust in Equipment"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"generic.4"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B115&\".\"&C115)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.18282699999999999},{"$f":"Sheet1!C115","v":"gen"},{"$f":"Sheet1!D115","v":1},{"$f":"INDEX(Saves[Value],MATCH(A115,Saves[ID],0))","v":"Threat agent adds spurious trip parameters on remotely located plant support equipment and trips unit offline."},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.1"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B116&\".\"&C116)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.18282799999999999},{"$f":"Sheet1!C116","v":"gen"},{"$f":"Sheet1!D116","v":2},{"$f":"INDEX(Saves[Value],MATCH(A116,Saves[ID],0))","v":"Fuel handling system inoperable after incorrect programmable logic controller motor start parameters are loaded from corrupted reference configuration"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.2"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B117&\".\"&C117)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.28282800000000002},{"$f":"Sheet1!C117","v":"gen"},{"$f":"Sheet1!D117","v":3},{"$f":"INDEX(Saves[Value],MATCH(A117,Saves[ID],0))","v":"Threat actor causes chemical spill using vendor remote access"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.3"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B118&\".\"&C118)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.12828290000000001},{"$f":"Sheet1!C118","v":"gen"},{"$f":"Sheet1!D118","v":4},{"$f":"INDEX(Saves[Value],MATCH(A118,Saves[ID],0))","v":"Protective disconnect relays disabled on switchgear damaging generator"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.4"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B119&\".\"&C119)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.22828280000000001},{"$f":"Sheet1!C119","v":"gen"},{"$f":"Sheet1!D119","v":5},{"$f":"INDEX(Saves[Value],MATCH(A119,Saves[ID],0))","v":"Main transformer is out-of-service after being damaged through deluge system being remotely activated"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.5"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B120&\".\"&C120)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.32828279999999999},{"$f":"Sheet1!C120","v":"gen"},{"$f":"Sheet1!D120","v":6},{"$f":"INDEX(Saves[Value],MATCH(A120,Saves[ID],0))","v":"Precipitator HMI interface disabled through malware introduced through update."},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.6"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B121&\".\"&C121)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.42828280000000002},{"$f":"Sheet1!C121","v":"gen"},{"$f":"Sheet1!D121","v":7},{"$f":"INDEX(Saves[Value],MATCH(A121,Saves[ID],0))","v":"Hijacked Selective Catalytic Reduction System (SCR) is disabled leading to shutdown of power plant"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.7"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B122&\".\"&C122)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.52828280000000005},{"$f":"Sheet1!C122","v":"gen"},{"$f":"Sheet1!D122","v":8},{"$f":"INDEX(Saves[Value],MATCH(A122,Saves[ID],0))","v":"Plant tripped off-line through access gained through improperly configured diagnostic device on vendor maintained equipment"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.8"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B123&\".\"&C123)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.62828280000000003},{"$f":"Sheet1!C123","v":"gen"},{"$f":"Sheet1!D123","v":9},{"$f":"INDEX(Saves[Value],MATCH(A123,Saves[ID],0))","v":"Failure of continuous emission monitoring systems (CEMS) leads to violation"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.9"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B124&\".\"&C124)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.72828280000000001},{"$f":"Sheet1!C124","v":"gen"},{"$f":"Sheet1!D124","v":10},{"$f":"INDEX(Saves[Value],MATCH(A124,Saves[ID],0))","v":"Threat agent causes grid instability through control of dedicated data and voice lines between system operating center and plant"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.10"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B125&\".\"&C125)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.82828279999999999},{"$f":"Sheet1!C125","v":"gen"},{"$f":"Sheet1!D125","v":11},{"$f":"INDEX(Saves[Value],MATCH(A125,Saves[ID],0))","v":"Outage extended due to DCS HMI being disabled from malware exploiting a known, unpatched vulnerability"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.11"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B126&\".\"&C126)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.92828279999999996},{"$f":"Sheet1!C126","v":"gen"},{"$f":"Sheet1!D126","v":12},{"$f":"INDEX(Saves[Value],MATCH(A126,Saves[ID],0))","v":"Chemical inventory process control system not properly patched leading to compromised inventory controls of hazardous chemicals"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.12"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B127&\".\"&C127)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.93828279999999997},{"$f":"Sheet1!C127","v":"gen"},{"$f":"Sheet1!D127","v":13},{"$f":"INDEX(Saves[Value],MATCH(A127,Saves[ID],0))","v":"Utility competitor gains advantage using Monitoring & Diagnostic (M&D) center to gain sensitive information on upcoming generation availability"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.13"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B128&\".\"&C128)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.94828279999999998},{"$f":"Sheet1!C128","v":"gen"},{"$f":"Sheet1!D128","v":14},{"$f":"INDEX(Saves[Value],MATCH(A128,Saves[ID],0))","v":"Generation assets taken off line by disrupted microwave communications"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.14"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B129&\".\"&C129)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.94838279999999997},{"$f":"Sheet1!C129","v":"gen"},{"$f":"Sheet1!D129","v":15},{"$f":"INDEX(Saves[Value],MATCH(A129,Saves[ID],0))","v":"Plant tripped off-line through access gained through a compromised vendor remote connection"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.15"}]
[{"$f":"INDEX(Saves[ID],MATCH(1,((B130&\".\"&C130)=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.94828279999999998},{"$f":"Sheet1!C130","v":"gen"},{"$f":"Sheet1!D130","v":16},{"$f":"INDEX(Saves[Value],MATCH(A130,Saves[ID],0))","v":"Generation assets taken off line by disrupted microwave communications"},null,null,null,null,null,null,null,{"$f":"Table2[[#This Row],[Domain]]&\".\"&Table2[[#This Row],[Number]]","v":"gen.16"}]

{"sheet":"Scenarios","index":3,"n_rows":27,"n_cols":23,"rows_kept":27,"cut":false,"hidden":false,"merged":[[2,3,2,7],[3,2,3,9],[4,2,4,9],[0,2,0,9]]}
[null,null,"This is a detailed view of a failure scenario.  The utility can use this page, if desired, for capturing notes and observations about utility-specific vulnerabilties, state of mitigations, and perceptions of threat and impact.  The SUMMARY cells at right contains utility-specific scores for likelihood and impact, and/or ratings, which are then copied up to the high level Assess tab, along with the notes.  all information in the Failure Scenario document for the scenario is on this worksheet. Select SAVE to store the notes and observations.  All entries are optional.",null,null,null,null,null,null,null,null,null,{"$f":"Sheet1!B3","v":"ami.2"},{"$f":"Sheet1!B125","v":"gen.11"}]
[null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"Sheet1!B4","v":"ami.3"},{"$f":"Sheet1!B126","v":"gen.12"}]
[null,null,{"$f":"Sheet1!B12","v":"ami.11"},null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"Sheet1!B3","v":"ami.2"},{"$f":"Sheet1!B24","v":"ami.23"}]
[null,null,{"$f":"INDEX(Saves[Value],MATCH(1,(Scenarios!C3=Saves[Category])*(\"t\"=Saves[Type]),0))","v":"Spoofed Meter \"Last Gasp\" Messages Cause Fake Outage"},null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"Sheet1!B4","v":"ami.3"},{"$f":"Sheet1!B25","v":"ami.24"}]
[null,null,{"$f":"INDEX(Saves[Value],MATCH(1,(Scenarios!C3=Saves[Category])*(\"d\"=Saves[Type]),0))","v":"A threat agent is able to send many spoofed meter \"last gasp\" messages to the AMI MDMS, indicating a power outage. As more spoofed messages are sent, the grid operator tries to reconfigure the grid to compensate, causing utilities to roll trucks to determine why meters continue to be unresponsive. (Note: This is a special case of failure scenarios AMI.14 and DR.3.)"},null,null,null,null,null,null,null,null,"SUMMARY:","Score\nTotals","Rating\n(H,M,L)"]
[null,null,null,null,null,null,null,null,null,null,null,"Likelihood Total",{"$f":"J12+J13+J14+J15+J16","v":0}]
[null,null,"Utility Notes",null,null,null,null,null,null,null,null,"Impact Total",{"$f":"P12+P13+P14+P15+P16+P17+P18+P19+P20+P21+P22+P23+P24+P25+P26","v":0}]
[null,null,null,null,null,null,null,null,null,null,null,"Risk Rating"]
[]
[]
[null,null,"Relevant Vulnerabilities Analysis","Utility-specific Current Severity of Vulnerability",null,"Potential Mitigations Analysis","Utility-specific Current Level of Implementation",null,"Threat Likelihood and Opportunity Criterion","Score\n(0,1,3,9)",null,"Impact Analysis","Notes",null,"Impact Scoring\nCriterion","Score\n(0,1,3,9)",null,null,null,null,{"$f":"MATCH(C3,'Summary Save'!A2:A130,0)","v":11}]
[null,null,{"$f":"Test(ROW(A1),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A1),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,"Skills Required",0,null,{"$f":"Test(ROW(A1),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"System scale",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C12=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F12=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L12=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R12,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S12,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T12,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A2),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A2),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,"Accessibility (physical)",0,null,{"$f":"Test(ROW(A2),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Public safety concern",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C13=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F13=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L13=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R13,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S13,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T13,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A3),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A3),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,"Accessibility (logical)",0,null,{"$f":"Test(ROW(A3),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Workforce safety concern",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C14=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F14=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L14=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R14,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S14,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T14,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A4),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A4),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,"Attack Vector",0,null,{"$f":"Test(ROW(A4),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Ecological concern",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C15=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F15=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L15=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R15,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S15,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T15,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A5),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A5),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,"Common Vulnerability among others",0,null,{"$f":"Test(ROW(A5),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Financial impact of compromise on utility",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C16=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F16=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L16=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R16,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S16,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T16,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A6),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A6),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,"Likelihood Total",{"$f":"J16+J15+J14+J13+J12","v":0},null,{"$f":"Test(ROW(A6),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Restoration costs - cost to return to normal operations, not including any ancillary costs",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C17=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F17=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L17=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R17,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S17,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T17,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A7),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A7),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,null,null,null,{"$f":"Test(ROW(A7),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Negative impact on generation capacity",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C18=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F18=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L18=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R18,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S18,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T18,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A8),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A8),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,"Residual Vulnerability",0,null,{"$f":"Test(ROW(A8),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Negative impact on the energy market",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C19=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F19=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L19=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R19,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S19,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T19,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A9),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A9),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,null,null,null,{"$f":"Test(ROW(A9),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Negative impact on the bulk transmission system",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C20=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F20=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L20=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R20,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S20,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T20,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A10),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A10),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,null,null,null,{"$f":"Test(ROW(A10),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Negative impact on customer service",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C21=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F21=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L21=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R21,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S21,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T21,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A11),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A11),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,null,null,null,{"$f":"Test(ROW(A11),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Negative impact on billing functions",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C22=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F22=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L22=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R22,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S22,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T22,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A12),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A12),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,null,null,null,{"$f":"Test(ROW(A12),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Destroys goodwill toward utility",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C23=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F23=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L23=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R23,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S23,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T23,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A13),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A13),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,null,null,null,{"$f":"Test(ROW(A13),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Immediate economic damage - refers to functioning of society as a whole",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C24=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F24=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L24=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R24,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S24,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T24,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A14),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A14),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,null,null,null,{"$f":"Test(ROW(A14),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Long term economic damage",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C25=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F25=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L25=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R25,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S25,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T25,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,{"$f":"Test(ROW(A15),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"v\")","v":{"$error":"#NAME?"}},null,null,{"$f":"Test(ROW(A15),Saves[Concat],Saves[Category],$C$3,Saves[Type],\"m\")","v":{"$error":"#NAME?"}},null,null,null,null,null,{"$f":"Test(ROW(A17),Saves[Value],Saves[Category],$C$3,Saves[Type],\"i\")","v":{"$error":"#NAME?"}},null,null,"Causes a loss of privacy for a significant number of stakeholders",0,null,{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(C26=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(F26=Saves[Concat]),0))","v":{"$error":"#N/A"}},{"$f":"INDEX(Saves[ID],MATCH(1,(Scenarios!$C$3=Saves[Category])*(L26=Saves[Value]),0))","v":{"$error":"#N/A"}},{"$f":"MATCH(R26,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(S26,Saves[ID],0)","v":{"$error":"#N/A"}},{"$f":"MATCH(T26,Saves[ID],0)","v":{"$error":"#N/A"}}]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Impact Total",{"$f":"P26+P25+P24+P23+P22+P21+P20+P19+P18+P17+P16+P15+P14+P13+P12","v":0}]

{"sheet":"Saved Values","index":4,"n_rows":1779,"n_cols":8,"rows_kept":1779,"cut":false,"hidden":true,"merged":[]}
["Category","Type","ID","Value","Specific","Group","Concat","Inputs"]
[{"$f":"'Source Data'!A1","v":"ami.1"},{"$f":"'Source Data'!B1","v":"t"},{"$f":"'Source Data'!C1","v":0.237788},{"$f":"'Source Data'!D1","v":"Authorized Employee Issues Unauthorized Mass Remote Disconnect"},{"$f":"'Source Data'!E1","v":0},{"$f":"'Source Data'!F1","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authorized Employee Issues Unauthorized Mass Remote Disconnect0"}]
[{"$f":"'Source Data'!A2","v":"ami.1"},{"$f":"'Source Data'!B2","v":"d"},{"$f":"'Source Data'!C2","v":0.29106599999999999},{"$f":"'Source Data'!D2","v":"An employee within the utility having valid authorization, issues a \"remote disconnect\" command to a large number of meters. The employee may be bribed, disgruntled, or socially engineered."},{"$f":"'Source Data'!E2","v":0},{"$f":"'Source Data'!F2","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An employee within the utility having valid authorization, issues a \"remote disconnect\" command to a large number of meters. The employee may be bribed, disgruntled, or socially engineered.0"}]
[{"$f":"'Source Data'!A3","v":"ami.1"},{"$f":"'Source Data'!B3","v":"v"},{"$f":"'Source Data'!C3","v":0.84581399999999995},{"$f":"'Source Data'!D3","v":"system permits potentially harmful command sequences"},{"$f":"'Source Data'!E3","v":" such as a sufficiently large number of disconnects that may threaten system balance."},{"$f":"'Source Data'!F3","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits potentially harmful command sequences such as a sufficiently large number of disconnects that may threaten system balance."}]
[{"$f":"'Source Data'!A4","v":"ami.1"},{"$f":"'Source Data'!B4","v":"i"},{"$f":"'Source Data'!C4","v":0.15220800000000001},{"$f":"'Source Data'!D4","v":"An instantaneous mass disconnect/reconnect over multiple feeders, if permitted by the system, could cause temporary blackouts due to circuit breaker trips until power on the grid can be rebalanced"},{"$f":"'Source Data'!E4","v":0},{"$f":"'Source Data'!F4","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An instantaneous mass disconnect/reconnect over multiple feeders, if permitted by the system, could cause temporary blackouts due to circuit breaker trips until power on the grid can be rebalanced0"}]
[{"$f":"'Source Data'!A5","v":"ami.1"},{"$f":"'Source Data'!B5","v":"i"},{"$f":"'Source Data'!C5","v":0.58553699999999997},{"$f":"'Source Data'!D5","v":"A small number of disconnects could subvert the Smart Grid deployment and make the utility lose consumer confidence"},{"$f":"'Source Data'!E5","v":0},{"$f":"'Source Data'!F5","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A small number of disconnects could subvert the Smart Grid deployment and make the utility lose consumer confidence0"}]
[{"$f":"'Source Data'!A6","v":"ami.1"},{"$f":"'Source Data'!B6","v":"m"},{"$f":"'Source Data'!C6","v":0.19347500000000001},{"$f":"'Source Data'!D6","v":"detect anomalous commands"},{"$f":"'Source Data'!E6","v":" (anomalous disconnect and reconnect commands) not stemming from the normal Customer Information System (CIS) system"},{"$f":"'Source Data'!F6","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect anomalous commands (anomalous disconnect and reconnect commands) not stemming from the normal Customer Information System (CIS) system"}]
[{"$f":"'Source Data'!A7","v":"ami.1"},{"$f":"'Source Data'!B7","v":"m"},{"$f":"'Source Data'!C7","v":0.81062299999999998},{"$f":"'Source Data'!D7","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E7","v":" to limit who has access to sensitive functions"},{"$f":"'Source Data'!F7","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit who has access to sensitive functions"}]
[{"$f":"'Source Data'!A8","v":"ami.1"},{"$f":"'Source Data'!B8","v":"m"},{"$f":"'Source Data'!C8","v":0.17353099999999999},{"$f":"'Source Data'!D8","v":"validate data"},{"$f":"'Source Data'!E8","v":" to ensure reasonableness of changes"},{"$f":"'Source Data'!F8","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate data to ensure reasonableness of changes"}]
[{"$f":"'Source Data'!A9","v":"ami.1"},{"$f":"'Source Data'!B9","v":"m"},{"$f":"'Source Data'!C9","v":0.484983},{"$f":"'Source Data'!D9","v":"generate alarms"},{"$f":"'Source Data'!E9","v":" for changes to sensitive data"},{"$f":"'Source Data'!F9","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for changes to sensitive data"}]
[{"$f":"'Source Data'!A10","v":"ami.1"},{"$f":"'Source Data'!B10","v":"m"},{"$f":"'Source Data'!C10","v":0.151863},{"$f":"'Source Data'!D10","v":"create audit logs"},{"$f":"'Source Data'!E10","v":" to track who has made system configuration, software, or database additions or modifications"},{"$f":"'Source Data'!F10","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs to track who has made system configuration, software, or database additions or modifications"}]
[{"$f":"'Source Data'!A11","v":"ami.1"},{"$f":"'Source Data'!B11","v":"m"},{"$f":"'Source Data'!C11","v":0.36695699999999998},{"$f":"'Source Data'!D11","v":"require two-person rule"},{"$f":"'Source Data'!E11","v":" for single transactions that initiate mass disconnects (e.g., substation feeder, all meters listening to a given aggregation point, geographic region, etc.)"},{"$f":"'Source Data'!F11","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require two-person rule for single transactions that initiate mass disconnects (e.g., substation feeder, all meters listening to a given aggregation point, geographic region, etc.)"}]
[{"$f":"'Source Data'!A12","v":"ami.1"},{"$f":"'Source Data'!B12","v":"m"},{"$f":"'Source Data'!C12","v":0.49173600000000001},{"$f":"'Source Data'!D12","v":"limit events"},{"$f":"'Source Data'!E12","v":" to no more than (n) number of disconnects (using any number of transactions) within a specified time period"},{"$f":"'Source Data'!F12","v":"enforce limits"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"limit events to no more than (n) number of disconnects (using any number of transactions) within a specified time period"}]
[{"$f":"'Source Data'!A13","v":"ami.1"},{"$f":"'Source Data'!B13","v":"m"},{"$f":"'Source Data'!C13","v":0.91009399999999996},{"$f":"'Source Data'!D13","v":"require two-person rule"},{"$f":"'Source Data'!E13","v":" for greater than (n) number of disconnects within a specified time period"},{"$f":"'Source Data'!F13","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require two-person rule for greater than (n) number of disconnects within a specified time period"}]
[{"$f":"'Source Data'!A14","v":"ami.1"},{"$f":"'Source Data'!B14","v":"m"},{"$f":"'Source Data'!C14","v":0.26525700000000002},{"$f":"'Source Data'!D14","v":"cross check"},{"$f":"'Source Data'!E14","v":" with the billing system to ensure the customer has the appropriate status before the disconnect command is issued"},{"$f":"'Source Data'!F14","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check with the billing system to ensure the customer has the appropriate status before the disconnect command is issued"}]
[{"$f":"'Source Data'!A15","v":"ami.2"},{"$f":"'Source Data'!B15","v":"t"},{"$f":"'Source Data'!C15","v":0.89318799999999998},{"$f":"'Source Data'!D15","v":"Authorized Employee Manipulates MDMS Data to Over/Under Charge"},{"$f":"'Source Data'!E15","v":0},{"$f":"'Source Data'!F15","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authorized Employee Manipulates MDMS Data to Over/Under Charge0"}]
[{"$f":"'Source Data'!A16","v":"ami.2"},{"$f":"'Source Data'!B16","v":"d"},{"$f":"'Source Data'!C16","v":0.22035099999999999},{"$f":"'Source Data'!D16","v":"The Meter Data Management System (MDMS) is accessed by an employee (coerced or disgruntled) who selects a few accounts to overcharge or undercharge. This could be done by altering usage or pricing data. It may also be accomplished using malware. When the bills are paid, either the utility receives more or less revenue. An audit uncovering this activity could cause embarrassment or financial burden to the utility."},{"$f":"'Source Data'!E16","v":0},{"$f":"'Source Data'!F16","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The Meter Data Management System (MDMS) is accessed by an employee (coerced or disgruntled) who selects a few accounts to overcharge or undercharge. This could be done by altering usage or pricing data. It may also be accomplished using malware. When the bills are paid, either the utility receives more or less revenue. An audit uncovering this activity could cause embarrassment or financial burden to the utility.0"}]
[{"$f":"'Source Data'!A17","v":"ami.2"},{"$f":"'Source Data'!B17","v":"v"},{"$f":"'Source Data'!C17","v":0.63179799999999997},{"$f":"'Source Data'!D17","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E17","v":" to Meter Data Management System (MDMS) user billing data,"},{"$f":"'Source Data'!F17","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to Meter Data Management System (MDMS) user billing data,"}]
[{"$f":"'Source Data'!A18","v":"ami.2"},{"$f":"'Source Data'!B18","v":"v"},{"$f":"'Source Data'!C18","v":0.57107699999999995},{"$f":"'Source Data'!D18","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Source Data'!E18","v":" for customer energy billing calculations in the Meter Data Management System (MDMS),"},{"$f":"'Source Data'!F18","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system assumes data inputs and resulting calculations are accurate for customer energy billing calculations in the Meter Data Management System (MDMS),"}]
[{"$f":"'Source Data'!A19","v":"ami.2"},{"$f":"'Source Data'!B19","v":"v"},{"$f":"'Source Data'!C19","v":0.10268099999999999},{"$f":"'Source Data'!D19","v":"system permits installation of malware"},{"$f":"'Source Data'!E19","v":" on the MDMS"},{"$f":"'Source Data'!F19","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware on the MDMS"}]
[{"$f":"'Source Data'!A20","v":"ami.2"},{"$f":"'Source Data'!B20","v":"i"},{"$f":"'Source Data'!C20","v":0.33215800000000001},{"$f":"'Source Data'!D20","v":"Utility may be liable for mischarging customers"},{"$f":"'Source Data'!E20","v":0},{"$f":"'Source Data'!F20","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility may be liable for mischarging customers0"}]
[{"$f":"'Source Data'!A21","v":"ami.2"},{"$f":"'Source Data'!B21","v":"i"},{"$f":"'Source Data'!C21","v":0.10445500000000001},{"$f":"'Source Data'!D21","v":"Utilities will have to correct billing errors"},{"$f":"'Source Data'!E21","v":0},{"$f":"'Source Data'!F21","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utilities will have to correct billing errors0"}]
[{"$f":"'Source Data'!A22","v":"ami.2"},{"$f":"'Source Data'!B22","v":"m"},{"$f":"'Source Data'!C22","v":0.50293100000000002},{"$f":"'Source Data'!D22","v":"detect unusual patterns"},{"$f":"'Source Data'!E22","v":" of energy usage (all utilities have some type of revenue protection scheme, but these may not be adequate)"},{"$f":"'Source Data'!F22","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of energy usage (all utilities have some type of revenue protection scheme, but these may not be adequate)"}]
[{"$f":"'Source Data'!A23","v":"ami.2"},{"$f":"'Source Data'!B23","v":"m"},{"$f":"'Source Data'!C23","v":0.56739399999999995},{"$f":"'Source Data'!D23","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E23","v":" to limit access to sensitive functions"},{"$f":"'Source Data'!F23","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit access to sensitive functions"}]
[{"$f":"'Source Data'!A24","v":"ami.2"},{"$f":"'Source Data'!B24","v":"m"},{"$f":"'Source Data'!C24","v":0.85416499999999995},{"$f":"'Source Data'!D24","v":"validate data"},{"$f":"'Source Data'!E24","v":" to ensure reasonableness for changes"},{"$f":"'Source Data'!F24","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate data to ensure reasonableness for changes"}]
[{"$f":"'Source Data'!A25","v":"ami.2"},{"$f":"'Source Data'!B25","v":"m"},{"$f":"'Source Data'!C25","v":4.01409E-2},{"$f":"'Source Data'!D25","v":"generate alarms"},{"$f":"'Source Data'!E25","v":" on changes to sensitive data"},{"$f":"'Source Data'!F25","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms on changes to sensitive data"}]
[{"$f":"'Source Data'!A26","v":"ami.2"},{"$f":"'Source Data'!B26","v":"m"},{"$f":"'Source Data'!C26","v":0.10802200000000001},{"$f":"'Source Data'!D26","v":"create audit logs"},{"$f":"'Source Data'!E26","v":" of who has made software or database modifications"},{"$f":"'Source Data'!F26","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of who has made software or database modifications"}]
[{"$f":"'Source Data'!A27","v":"ami.2"},{"$f":"'Source Data'!B27","v":"m"},{"$f":"'Source Data'!C27","v":0.63939599999999996},{"$f":"'Source Data'!D27","v":"check software execution integrity"},{"$f":"'Source Data'!E27","v":" since software may be compromised when loaded for execution,"},{"$f":"'Source Data'!F27","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity since software may be compromised when loaded for execution,"}]
[{"$f":"'Source Data'!A28","v":"ami.2"},{"$f":"'Source Data'!B28","v":"m"},{"$f":"'Source Data'!C28","v":1.3110999999999999E-2},{"$f":"'Source Data'!D28","v":"detect abnormal output"},{"$f":"'Source Data'!E28","v":" (unexpected data or destinations) in billing and AMI system network traffic"},{"$f":"'Source Data'!F28","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal output (unexpected data or destinations) in billing and AMI system network traffic"}]
[{"$f":"'Source Data'!A29","v":"ami.2"},{"$f":"'Source Data'!B29","v":"m"},{"$f":"'Source Data'!C29","v":0.72018400000000005},{"$f":"'Source Data'!D29","v":"perform financial audit"},{"$f":"'Source Data'!E29","v":" checking for unexpected results"},{"$f":"'Source Data'!F29","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"perform financial audit checking for unexpected results"}]
[{"$f":"'Source Data'!A30","v":"ami.2"},{"$f":"'Source Data'!B30","v":"m"},{"$f":"'Source Data'!C30","v":0.101814},{"$f":"'Source Data'!D30","v":"implement configuration management"},{"$f":"'Source Data'!E30","v":" "},{"$f":"'Source Data'!F30","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management "}]
[{"$f":"'Source Data'!A31","v":"ami.2"},{"$f":"'Source Data'!B31","v":"m"},{"$f":"'Source Data'!C31","v":0.48294500000000001},{"$f":"'Source Data'!D31","v":"restrict physical access"},{"$f":"'Source Data'!E31","v":" "},{"$f":"'Source Data'!F31","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access "}]
[{"$f":"'Source Data'!A32","v":"ami.2"},{"$f":"'Source Data'!B32","v":"m"},{"$f":"'Source Data'!C32","v":0.254355},{"$f":"'Source Data'!D32","v":"train personnel"},{"$f":"'Source Data'!E32","v":" regarding need to lock unattended workstations"},{"$f":"'Source Data'!F32","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel regarding need to lock unattended workstations"}]
[{"$f":"'Source Data'!A33","v":"ami.2"},{"$f":"'Source Data'!B33","v":"m"},{"$f":"'Source Data'!C33","v":0.67669699999999999},{"$f":"'Source Data'!D33","v":"detect physical intrusion"},{"$f":"'Source Data'!E33","v":" with the use of video surveillance"},{"$f":"'Source Data'!F33","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect physical intrusion with the use of video surveillance"}]
[{"$f":"'Source Data'!A34","v":"ami.2"},{"$f":"'Source Data'!B34","v":"m"},{"$f":"'Source Data'!C34","v":0.89678199999999997},{"$f":"'Source Data'!D34","v":"lock workstations"},{"$f":"'Source Data'!E34","v":" when workstations are unattended"},{"$f":"'Source Data'!F34","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"lock workstations when workstations are unattended"}]
[{"$f":"'Source Data'!A35","v":"ami.2"},{"$f":"'Source Data'!B35","v":"m"},{"$f":"'Source Data'!C35","v":0.75989600000000002},{"$f":"'Source Data'!D35","v":"harden platforms"},{"$f":"'Source Data'!E35","v":" "},{"$f":"'Source Data'!F35","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"harden platforms "}]
[{"$f":"'Source Data'!A36","v":"ami.2"},{"$f":"'Source Data'!B36","v":"m"},{"$f":"'Source Data'!C36","v":0.47811999999999999},{"$f":"'Source Data'!D36","v":"check software file integrity"},{"$f":"'Source Data'!E36","v":" (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation"},{"$f":"'Source Data'!F36","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation"}]
[{"$f":"'Source Data'!A37","v":"ami.3"},{"$f":"'Source Data'!B37","v":"t"},{"$f":"'Source Data'!C37","v":0.72029200000000004},{"$f":"'Source Data'!D37","v":"Invalid Access Used to Install Malware Enabling Remote Internet Control"},{"$f":"'Source Data'!E37","v":0},{"$f":"'Source Data'!F37","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Invalid Access Used to Install Malware Enabling Remote Internet Control0"}]
[{"$f":"'Source Data'!A38","v":"ami.3"},{"$f":"'Source Data'!B38","v":"d"},{"$f":"'Source Data'!C38","v":0.90762299999999996},{"$f":"'Source Data'!D38","v":"A threat agent acquires physical and logical access to the utility enterprise network. The threat agent installs remote accessible malware allowing remote command and control of the AMI system accessible from any available Internet connection. Physical access may be achieved via poor locks, unlocked doors, stolen credentials, or social engineering."},{"$f":"'Source Data'!E38","v":0},{"$f":"'Source Data'!F38","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent acquires physical and logical access to the utility enterprise network. The threat agent installs remote accessible malware allowing remote command and control of the AMI system accessible from any available Internet connection. Physical access may be achieved via poor locks, unlocked doors, stolen credentials, or social engineering.0"}]
[{"$f":"'Source Data'!A39","v":"ami.3"},{"$f":"'Source Data'!B39","v":"v"},{"$f":"'Source Data'!C39","v":0.92861099999999996},{"$f":"'Source Data'!D39","v":"system permits installation of malware"},{"$f":"'Source Data'!E39","v":" on the utility enterprise network or AMI implementation,"},{"$f":"'Source Data'!F39","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware on the utility enterprise network or AMI implementation,"}]
[{"$f":"'Source Data'!A40","v":"ami.3"},{"$f":"'Source Data'!B40","v":"v"},{"$f":"'Source Data'!C40","v":0.37766300000000003},{"$f":"'Source Data'!D40","v":"Internet connection may be misused by adversary"},{"$f":"'Source Data'!E40","v":" specifically the connection from the Internet to the utility enterprise network or AMI implementation can serve as a command channel for malware on the AMI system,"},{"$f":"'Source Data'!F40","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Internet connection may be misused by adversary specifically the connection from the Internet to the utility enterprise network or AMI implementation can serve as a command channel for malware on the AMI system,"}]
[{"$f":"'Source Data'!A41","v":"ami.3"},{"$f":"'Source Data'!B41","v":"v"},{"$f":"'Source Data'!C41","v":0.899756},{"$f":"'Source Data'!D41","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E41","v":" to the utility enterprise network or AMI implementation."},{"$f":"'Source Data'!F41","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to the utility enterprise network or AMI implementation."}]
[{"$f":"'Source Data'!A42","v":"ami.3"},{"$f":"'Source Data'!B42","v":"v"},{"$f":"'Source Data'!C42","v":0.77888000000000002},{"$f":"'Source Data'!D42","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E42","v":" to the utility enterprise network or AMI implementation."},{"$f":"'Source Data'!F42","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the utility enterprise network or AMI implementation."}]
[{"$f":"'Source Data'!A43","v":"ami.3"},{"$f":"'Source Data'!B43","v":"i"},{"$f":"'Source Data'!C43","v":0.32425500000000002},{"$f":"'Source Data'!D43","v":"Potential remote command and control capability by a threat agent"},{"$f":"'Source Data'!E43","v":0},{"$f":"'Source Data'!F43","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential remote command and control capability by a threat agent0"}]
[{"$f":"'Source Data'!A44","v":"ami.3"},{"$f":"'Source Data'!B44","v":"i"},{"$f":"'Source Data'!C44","v":0.19423099999999999},{"$f":"'Source Data'!D44","v":"Depending on the system's architecture and permissions, performance of meter disconnects"},{"$f":"'Source Data'!E44","v":0},{"$f":"'Source Data'!F44","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Depending on the system's architecture and permissions, performance of meter disconnects0"}]
[{"$f":"'Source Data'!A45","v":"ami.3"},{"$f":"'Source Data'!B45","v":"m"},{"$f":"'Source Data'!C45","v":0.99555300000000002},{"$f":"'Source Data'!D45","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E45","v":" to limit who has access to the AMI system and the enterprise network"},{"$f":"'Source Data'!F45","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit who has access to the AMI system and the enterprise network"}]
[{"$f":"'Source Data'!A46","v":"ami.3"},{"$f":"'Source Data'!B46","v":"m"},{"$f":"'Source Data'!C46","v":0.16129599999999999},{"$f":"'Source Data'!D46","v":"create audit logs"},{"$f":"'Source Data'!E46","v":" of who has made software additions or modifications"},{"$f":"'Source Data'!F46","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of who has made software additions or modifications"}]
[{"$f":"'Source Data'!A47","v":"ami.3"},{"$f":"'Source Data'!B47","v":"m"},{"$f":"'Source Data'!C47","v":0.70803400000000005},{"$f":"'Source Data'!D47","v":"generate alerts"},{"$f":"'Source Data'!E47","v":" when software additions or modifications have been made"},{"$f":"'Source Data'!F47","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts when software additions or modifications have been made"}]
[{"$f":"'Source Data'!A48","v":"ami.3"},{"$f":"'Source Data'!B48","v":"m"},{"$f":"'Source Data'!C48","v":0.50151900000000005},{"$f":"'Source Data'!D48","v":"check software execution integrity"},{"$f":"'Source Data'!E48","v":" since software may be compromised when loaded for execution,"},{"$f":"'Source Data'!F48","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity since software may be compromised when loaded for execution,"}]
[{"$f":"'Source Data'!A49","v":"ami.3"},{"$f":"'Source Data'!B49","v":"m"},{"$f":"'Source Data'!C49","v":0.93630100000000005},{"$f":"'Source Data'!D49","v":"authenticate users"},{"$f":"'Source Data'!E49","v":" so that physical access to the system(s) does not automatically grant logical access"},{"$f":"'Source Data'!F49","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users so that physical access to the system(s) does not automatically grant logical access"}]
[{"$f":"'Source Data'!A50","v":"ami.3"},{"$f":"'Source Data'!B50","v":"m"},{"$f":"'Source Data'!C50","v":0.71632300000000004},{"$f":"'Source Data'!D50","v":"require multi-factor authentication"},{"$f":"'Source Data'!E50","v":" to gain access to sensitive systems"},{"$f":"'Source Data'!F50","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication to gain access to sensitive systems"}]
[{"$f":"'Source Data'!A51","v":"ami.3"},{"$f":"'Source Data'!B51","v":"m"},{"$f":"'Source Data'!C51","v":0.10519000000000001},{"$f":"'Source Data'!D51","v":"isolate networks"},{"$f":"'Source Data'!E51","v":" serving critical functionality such as control systems from the Internet"},{"$f":"'Source Data'!F51","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate networks serving critical functionality such as control systems from the Internet"}]
[{"$f":"'Source Data'!A52","v":"ami.3"},{"$f":"'Source Data'!B52","v":"m"},{"$f":"'Source Data'!C52","v":0.209205},{"$f":"'Source Data'!D52","v":"restrict Internet access"},{"$f":"'Source Data'!E52","v":" to deny controls systems networks access to or from the Internet"},{"$f":"'Source Data'!F52","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict Internet access to deny controls systems networks access to or from the Internet"}]
[{"$f":"'Source Data'!A53","v":"ami.3"},{"$f":"'Source Data'!B53","v":"m"},{"$f":"'Source Data'!C53","v":0.55939700000000003},{"$f":"'Source Data'!D53","v":"require video surveillance"},{"$f":"'Source Data'!E53","v":" to document who enters the server room"},{"$f":"'Source Data'!F53","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require video surveillance to document who enters the server room"}]
[{"$f":"'Source Data'!A54","v":"ami.3"},{"$f":"'Source Data'!B54","v":"m"},{"$f":"'Source Data'!C54","v":0.70543199999999995},{"$f":"'Source Data'!D54","v":"restrict configuration access"},{"$f":"'Source Data'!E54","v":" to limit who has access and can make configuration changes"},{"$f":"'Source Data'!F54","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict configuration access to limit who has access and can make configuration changes"}]
[{"$f":"'Source Data'!A55","v":"ami.3"},{"$f":"'Source Data'!B55","v":"m"},{"$f":"'Source Data'!C55","v":0.139322},{"$f":"'Source Data'!D55","v":"check software file integrity"},{"$f":"'Source Data'!E55","v":" (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation"},{"$f":"'Source Data'!F55","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation"}]
[{"$f":"'Source Data'!A56","v":"ami.3"},{"$f":"'Source Data'!B56","v":"m"},{"$f":"'Source Data'!C56","v":2.6977299999999999E-2},{"$f":"'Source Data'!D56","v":"restrict physical access"},{"$f":"'Source Data'!E56","v":" to the utility enterprise network or AMI implementation"},{"$f":"'Source Data'!F56","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access to the utility enterprise network or AMI implementation"}]
[{"$f":"'Source Data'!A57","v":"ami.3"},{"$f":"'Source Data'!B57","v":"m"},{"$f":"'Source Data'!C57","v":0.13674800000000001},{"$f":"'Source Data'!D57","v":"protect credentials"},{"$f":"'Source Data'!E57","v":" for the enterprise network and/or AMI system"},{"$f":"'Source Data'!F57","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for the enterprise network and/or AMI system"}]
[{"$f":"'Source Data'!A58","v":"ami.3"},{"$f":"'Source Data'!B58","v":"m"},{"$f":"'Source Data'!C58","v":0.28537400000000002},{"$f":"'Source Data'!D58","v":"require strong passwords"},{"$f":"'Source Data'!E58","v":" for the enterprise network and/or AMI system"},{"$f":"'Source Data'!F58","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require strong passwords for the enterprise network and/or AMI system"}]
[{"$f":"'Source Data'!A59","v":"ami.4"},{"$f":"'Source Data'!B59","v":"t"},{"$f":"'Source Data'!C59","v":7.8233700000000003E-2},{"$f":"'Source Data'!D59","v":"Overused Key Captured on Meter Bus Enables Usage Data Manipulation"},{"$f":"'Source Data'!E59","v":0},{"$f":"'Source Data'!F59","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Overused Key Captured on Meter Bus Enables Usage Data Manipulation0"}]
[{"$f":"'Source Data'!A60","v":"ami.4"},{"$f":"'Source Data'!B60","v":"d"},{"$f":"'Source Data'!C60","v":0.51053000000000004},{"$f":"'Source Data'!D60","v":"Meters are deployed with the same symmetric cryptographic key on all meters in the AMI implementation. A threat agent is able to acquire the secret encryption key after monitoring communications on the internal bus of one of these meters. The secret key is passed in the clear on the bus. Usage data is then manipulated to overstate/understate energy usage or to under/overstate energy production from Distributed Energy Resources (DERs)."},{"$f":"'Source Data'!E60","v":0},{"$f":"'Source Data'!F60","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Meters are deployed with the same symmetric cryptographic key on all meters in the AMI implementation. A threat agent is able to acquire the secret encryption key after monitoring communications on the internal bus of one of these meters. The secret key is passed in the clear on the bus. Usage data is then manipulated to overstate/understate energy usage or to under/overstate energy production from Distributed Energy Resources (DERs).0"}]
[{"$f":"'Source Data'!A61","v":"ami.4"},{"$f":"'Source Data'!B61","v":"v"},{"$f":"'Source Data'!C61","v":0.19619700000000001},{"$f":"'Source Data'!D61","v":"secret key is stored or transmitted in the clear"},{"$f":"'Source Data'!E61","v":" while in transit on the internal bus of a meter,"},{"$f":"'Source Data'!F61","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"secret key is stored or transmitted in the clear while in transit on the internal bus of a meter,"}]
[{"$f":"'Source Data'!A62","v":"ami.4"},{"$f":"'Source Data'!B62","v":"v"},{"$f":"'Source Data'!C62","v":0.27421099999999998},{"$f":"'Source Data'!D62","v":"encryption keys are shared"},{"$f":"'Source Data'!E62","v":" by multiple meters in an AMI implementation."},{"$f":"'Source Data'!F62","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encryption keys are shared by multiple meters in an AMI implementation."}]
[{"$f":"'Source Data'!A63","v":"ami.4"},{"$f":"'Source Data'!B63","v":"i"},{"$f":"'Source Data'!C63","v":0.638602},{"$f":"'Source Data'!D63","v":"Continuous loss of revenue due to understated energy usage or overstated energy production"},{"$f":"'Source Data'!E63","v":0},{"$f":"'Source Data'!F63","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Continuous loss of revenue due to understated energy usage or overstated energy production0"}]
[{"$f":"'Source Data'!A64","v":"ami.4"},{"$f":"'Source Data'!B64","v":"i"},{"$f":"'Source Data'!C64","v":0.448208},{"$f":"'Source Data'!D64","v":"The utility may be liable for mischarging customers and may have to correct billing errors. If over-payments were received from customers, restitution would have to be paid to those customers"},{"$f":"'Source Data'!E64","v":0},{"$f":"'Source Data'!F64","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility may be liable for mischarging customers and may have to correct billing errors. If over-payments were received from customers, restitution would have to be paid to those customers0"}]
[{"$f":"'Source Data'!A65","v":"ami.4"},{"$f":"'Source Data'!B65","v":"i"},{"$f":"'Source Data'!C65","v":3.9871799999999999E-2},{"$f":"'Source Data'!D65","v":"Loss of customer trust in the utility billing (negative publicity)"},{"$f":"'Source Data'!E65","v":0},{"$f":"'Source Data'!F65","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of customer trust in the utility billing (negative publicity)0"}]
[{"$f":"'Source Data'!A66","v":"ami.4"},{"$f":"'Source Data'!B66","v":"m"},{"$f":"'Source Data'!C66","v":0.46725100000000003},{"$f":"'Source Data'!D66","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E66","v":" to protect the confidentiality of communications on the internal meter bus and the cryptographic keys"},{"$f":"'Source Data'!F66","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms to protect the confidentiality of communications on the internal meter bus and the cryptographic keys"}]
[{"$f":"'Source Data'!A67","v":"ami.4"},{"$f":"'Source Data'!B67","v":"m"},{"$f":"'Source Data'!C67","v":7.7756500000000006E-2},{"$f":"'Source Data'!D67","v":"require approved key management"},{"$f":"'Source Data'!E67","v":" to protect the cryptographic keys"},{"$f":"'Source Data'!F67","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved key management to protect the cryptographic keys"}]
[{"$f":"'Source Data'!A68","v":"ami.4"},{"$f":"'Source Data'!B68","v":"m"},{"$f":"'Source Data'!C68","v":3.81004E-2},{"$f":"'Source Data'!D68","v":"require unique keys"},{"$f":"'Source Data'!E68","v":" (symmetric keys) for each deployed meter"},{"$f":"'Source Data'!F68","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require unique keys (symmetric keys) for each deployed meter"}]
[{"$f":"'Source Data'!A69","v":"ami.4"},{"$f":"'Source Data'!B69","v":"m"},{"$f":"'Source Data'!C69","v":0.16004399999999999},{"$f":"'Source Data'!D69","v":"detect unusual patterns"},{"$f":"'Source Data'!E69","v":" of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be adequate)"},{"$f":"'Source Data'!F69","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be adequate)"}]
[{"$f":"'Source Data'!A70","v":"ami.4"},{"$f":"'Source Data'!B70","v":"m"},{"$f":"'Source Data'!C70","v":0.39783200000000002},{"$f":"'Source Data'!D70","v":"perform financial audit"},{"$f":"'Source Data'!E70","v":" to check for unexpected results"},{"$f":"'Source Data'!F70","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"perform financial audit to check for unexpected results"}]
[{"$f":"'Source Data'!A71","v":"ami.5"},{"$f":"'Source Data'!B71","v":"t"},{"$f":"'Source Data'!C71","v":0.68889800000000001},{"$f":"'Source Data'!D71","v":"Mass Meter Rekeying Required when Common Key Compromised"},{"$f":"'Source Data'!E71","v":0},{"$f":"'Source Data'!F71","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Mass Meter Rekeying Required when Common Key Compromised0"}]
[{"$f":"'Source Data'!A72","v":"ami.5"},{"$f":"'Source Data'!B72","v":"d"},{"$f":"'Source Data'!C72","v":0.53471199999999997},{"$f":"'Source Data'!D72","v":"Meters are deployed with the same symmetric cryptographic key on all meters in the AMI implementation. Key compromise occurs in the field due to the ability to extract the secret key when in physical possession of a meter, or during distribution of keys to meters. In this failure scenario, no known financial or energy usage information is actually compromised due to the compromised key, but all the meters still need to be rekeyed to mitigate the potential for future malicious activities"},{"$f":"'Source Data'!E72","v":0},{"$f":"'Source Data'!F72","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Meters are deployed with the same symmetric cryptographic key on all meters in the AMI implementation. Key compromise occurs in the field due to the ability to extract the secret key when in physical possession of a meter, or during distribution of keys to meters. In this failure scenario, no known financial or energy usage information is actually compromised due to the compromised key, but all the meters still need to be rekeyed to mitigate the potential for future malicious activities0"}]
[{"$f":"'Source Data'!A73","v":"ami.5"},{"$f":"'Source Data'!B73","v":"v"},{"$f":"'Source Data'!C73","v":0.68691999999999998},{"$f":"'Source Data'!D73","v":"encryption keys are shared"},{"$f":"'Source Data'!E73","v":" by multiple meters in an AMI implementation."},{"$f":"'Source Data'!F73","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encryption keys are shared by multiple meters in an AMI implementation."}]
[{"$f":"'Source Data'!A74","v":"ami.5"},{"$f":"'Source Data'!B74","v":"v"},{"$f":"'Source Data'!C74","v":0.272457},{"$f":"'Source Data'!D74","v":"secret key is stored or transmitted in the clear"},{"$f":"'Source Data'!E74","v":" on the meter."},{"$f":"'Source Data'!F74","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"secret key is stored or transmitted in the clear on the meter."}]
[{"$f":"'Source Data'!A75","v":"ami.5"},{"$f":"'Source Data'!B75","v":"v"},{"$f":"'Source Data'!C75","v":0.46593299999999999},{"$f":"'Source Data'!D75","v":"secret key is stored or transmitted in the clear"},{"$f":"'Source Data'!E75","v":" during transit to the meter during key distribution."},{"$f":"'Source Data'!F75","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"secret key is stored or transmitted in the clear during transit to the meter during key distribution."}]
[{"$f":"'Source Data'!A76","v":"ami.5"},{"$f":"'Source Data'!B76","v":"i"},{"$f":"'Source Data'!C76","v":0.276555},{"$f":"'Source Data'!D76","v":"Negative publicity"},{"$f":"'Source Data'!E76","v":0},{"$f":"'Source Data'!F76","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Negative publicity0"}]
[{"$f":"'Source Data'!A77","v":"ami.5"},{"$f":"'Source Data'!B77","v":"i"},{"$f":"'Source Data'!C77","v":0.45008599999999999},{"$f":"'Source Data'!D77","v":"Cost of rekeying meters"},{"$f":"'Source Data'!E77","v":0},{"$f":"'Source Data'!F77","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of rekeying meters0"}]
[{"$f":"'Source Data'!A78","v":"ami.5"},{"$f":"'Source Data'!B78","v":"m"},{"$f":"'Source Data'!C78","v":0.93506900000000004},{"$f":"'Source Data'!D78","v":"require unique keys"},{"$f":"'Source Data'!E78","v":" (symmetric key) for each meter"},{"$f":"'Source Data'!F78","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require unique keys (symmetric key) for each meter"}]
[{"$f":"'Source Data'!A79","v":"ami.5"},{"$f":"'Source Data'!B79","v":"m"},{"$f":"'Source Data'!C79","v":8.6931800000000004E-2},{"$f":"'Source Data'!D79","v":"require approved key management"},{"$f":"'Source Data'!E79","v":" "},{"$f":"'Source Data'!F79","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved key management "}]
[{"$f":"'Source Data'!A80","v":"ami.5"},{"$f":"'Source Data'!B80","v":"m"},{"$f":"'Source Data'!C80","v":0.45388899999999999},{"$f":"'Source Data'!D80","v":"require secure key storage"},{"$f":"'Source Data'!E80","v":" on meters"},{"$f":"'Source Data'!F80","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require secure key storage on meters"}]
[{"$f":"'Source Data'!A81","v":"ami.6"},{"$f":"'Source Data'!B81","v":"t"},{"$f":"'Source Data'!C81","v":0.94562500000000005},{"$f":"'Source Data'!D81","v":"One Compromised Meter in a Mesh Wireless Network Blocks Others"},{"$f":"'Source Data'!E81","v":0},{"$f":"'Source Data'!F81","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"One Compromised Meter in a Mesh Wireless Network Blocks Others0"}]
[{"$f":"'Source Data'!A82","v":"ami.6"},{"$f":"'Source Data'!B82","v":"d"},{"$f":"'Source Data'!C82","v":0.85571900000000001},{"$f":"'Source Data'!D82","v":"An unauthorized entity installs rogue firmware or software on a single smart meter. This might be via direct access to the meter or via interception/modification of a legitimate meter update. The compromised meter software could report an understatement of usage, or cause sporadic failure of the self-test process to impede discovery. If meters in the system implement a mesh wireless network, the compromised meter might misroute communications from other meters, blocking the path back to the AMI headend for those meters and making those meters effectively \"unresponsive.\""},{"$f":"'Source Data'!E82","v":0},{"$f":"'Source Data'!F82","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An unauthorized entity installs rogue firmware or software on a single smart meter. This might be via direct access to the meter or via interception/modification of a legitimate meter update. The compromised meter software could report an understatement of usage, or cause sporadic failure of the self-test process to impede discovery. If meters in the system implement a mesh wireless network, the compromised meter might misroute communications from other meters, blocking the path back to the AMI headend for those meters and making those meters effectively \"unresponsive.\"0"}]
[{"$f":"'Source Data'!A83","v":"ami.6"},{"$f":"'Source Data'!B83","v":"v"},{"$f":"'Source Data'!C83","v":0.120976},{"$f":"'Source Data'!D83","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E83","v":" for privileges to install firmware or software on a smart meter,"},{"$f":"'Source Data'!F83","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access for privileges to install firmware or software on a smart meter,"}]
[{"$f":"'Source Data'!A84","v":"ami.6"},{"$f":"'Source Data'!B84","v":"v"},{"$f":"'Source Data'!C84","v":1.41639E-2},{"$f":"'Source Data'!D84","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Source Data'!E84","v":" on a smart meter."},{"$f":"'Source Data'!F84","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized installation of software or firmware on a smart meter."}]
[{"$f":"'Source Data'!A85","v":"ami.6"},{"$f":"'Source Data'!B85","v":"i"},{"$f":"'Source Data'!C85","v":0.234515},{"$f":"'Source Data'!D85","v":"Continuous loss of revenue for utility if modified software/firmware understates usage (impact scales as more meters are affected)"},{"$f":"'Source Data'!E85","v":0},{"$f":"'Source Data'!F85","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Continuous loss of revenue for utility if modified software/firmware understates usage (impact scales as more meters are affected)0"}]
[{"$f":"'Source Data'!A86","v":"ami.6"},{"$f":"'Source Data'!B86","v":"i"},{"$f":"'Source Data'!C86","v":0.866313},{"$f":"'Source Data'!D86","v":"Truck rolls needed to investigate compromised meter failure or nonresponsive meters due to misrouting"},{"$f":"'Source Data'!E86","v":0},{"$f":"'Source Data'!F86","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Truck rolls needed to investigate compromised meter failure or nonresponsive meters due to misrouting0"}]
[{"$f":"'Source Data'!A87","v":"ami.6"},{"$f":"'Source Data'!B87","v":"m"},{"$f":"'Source Data'!C87","v":0.43739},{"$f":"'Source Data'!D87","v":"detect unusual patterns"},{"$f":"'Source Data'!E87","v":" of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient)"},{"$f":"'Source Data'!F87","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient)"}]
[{"$f":"'Source Data'!A88","v":"ami.6"},{"$f":"'Source Data'!B88","v":"m"},{"$f":"'Source Data'!C88","v":0.76954800000000001},{"$f":"'Source Data'!D88","v":"require multi-factor authentication"},{"$f":"'Source Data'!E88","v":" for firmware or software updates"},{"$f":"'Source Data'!F88","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for firmware or software updates"}]
[{"$f":"'Source Data'!A89","v":"ami.6"},{"$f":"'Source Data'!B89","v":"m"},{"$f":"'Source Data'!C89","v":0.87400299999999997},{"$f":"'Source Data'!D89","v":"check software file integrity"},{"$f":"'Source Data'!E89","v":" (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation"},{"$f":"'Source Data'!F89","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation"}]
[{"$f":"'Source Data'!A90","v":"ami.6"},{"$f":"'Source Data'!B90","v":"m"},{"$f":"'Source Data'!C90","v":0.33770099999999997},{"$f":"'Source Data'!D90","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E90","v":" to limit privileges to install software"},{"$f":"'Source Data'!F90","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privileges to install software"}]
[{"$f":"'Source Data'!A91","v":"ami.7"},{"$f":"'Source Data'!B91","v":"t"},{"$f":"'Source Data'!C91","v":0.37693399999999999},{"$f":"'Source Data'!D91","v":"Deployed Meters Containing Undesirable Functionality Need Repair"},{"$f":"'Source Data'!E91","v":0},{"$f":"'Source Data'!F91","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Deployed Meters Containing Undesirable Functionality Need Repair0"}]
[{"$f":"'Source Data'!A92","v":"ami.7"},{"$f":"'Source Data'!B92","v":"d"},{"$f":"'Source Data'!C92","v":0.94432799999999995},{"$f":"'Source Data'!D92","v":"Undesirable capabilities and features are discovered in smart meters deployed by a utility. This discovery may happen as the result of focused security research or because the utility discovers it has deployed a product containing the same compromised chipset used in a common consumer product.For example, an additional communications channel could be available on the meter, which, if activated, permits offloading of personally identifiable information (PII) or interferes with the functioning of the devices. The compromised smart meters will need to be upgraded or replaced."},{"$f":"'Source Data'!E92","v":0},{"$f":"'Source Data'!F92","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Undesirable capabilities and features are discovered in smart meters deployed by a utility. This discovery may happen as the result of focused security research or because the utility discovers it has deployed a product containing the same compromised chipset used in a common consumer product.For example, an additional communications channel could be available on the meter, which, if activated, permits offloading of personally identifiable information (PII) or interferes with the functioning of the devices. The compromised smart meters will need to be upgraded or replaced.0"}]
[{"$f":"'Source Data'!A93","v":"ami.7"},{"$f":"'Source Data'!B93","v":"v"},{"$f":"'Source Data'!C93","v":0.79849300000000001},{"$f":"'Source Data'!D93","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E93","v":" via the smart meter interfaces which can permit modifying device functionality,"},{"$f":"'Source Data'!F93","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals via the smart meter interfaces which can permit modifying device functionality,"}]
[{"$f":"'Source Data'!A94","v":"ami.7"},{"$f":"'Source Data'!B94","v":"v"},{"$f":"'Source Data'!C94","v":0.83863399999999999},{"$f":"'Source Data'!D94","v":"presence of features or functions that may be misused by users"},{"$f":"'Source Data'!E94","v":" in a manner not intended by the designers of the smart meter."},{"$f":"'Source Data'!F94","v":"API Abuse (6.3.2.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"presence of features or functions that may be misused by users in a manner not intended by the designers of the smart meter."}]
[{"$f":"'Source Data'!A95","v":"ami.7"},{"$f":"'Source Data'!B95","v":"i"},{"$f":"'Source Data'!C95","v":0.94665600000000005},{"$f":"'Source Data'!D95","v":"Cost to upgrade or potentially replace meters"},{"$f":"'Source Data'!E95","v":0},{"$f":"'Source Data'!F95","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost to upgrade or potentially replace meters0"}]
[{"$f":"'Source Data'!A96","v":"ami.7"},{"$f":"'Source Data'!B96","v":"i"},{"$f":"'Source Data'!C96","v":0.58605200000000002},{"$f":"'Source Data'!D96","v":"If violations of consumer privacy are proven, the utility may be subject to legal actions"},{"$f":"'Source Data'!E96","v":0},{"$f":"'Source Data'!F96","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"If violations of consumer privacy are proven, the utility may be subject to legal actions0"}]
[{"$f":"'Source Data'!A97","v":"ami.7"},{"$f":"'Source Data'!B97","v":"i"},{"$f":"'Source Data'!C97","v":0.599163},{"$f":"'Source Data'!D97","v":"If meters go \"dead\" or misstate usage, the utility would lose revenue from impacted customers until the meters are fixed or replaced"},{"$f":"'Source Data'!E97","v":0},{"$f":"'Source Data'!F97","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"If meters go \"dead\" or misstate usage, the utility would lose revenue from impacted customers until the meters are fixed or replaced0"}]
[{"$f":"'Source Data'!A98","v":"ami.7"},{"$f":"'Source Data'!B98","v":"m"},{"$f":"'Source Data'!C98","v":0.31934699999999999},{"$f":"'Source Data'!D98","v":"conduct penetration testing"},{"$f":"'Source Data'!E98","v":" of devices which includes security analysis of all device interfaces, regardless of their respective impact on meter functionality (such as labeling and internal Joint Test Action Group (JTAG) interfaces)"},{"$f":"'Source Data'!F98","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"conduct penetration testing of devices which includes security analysis of all device interfaces, regardless of their respective impact on meter functionality (such as labeling and internal Joint Test Action Group (JTAG) interfaces)"}]
[{"$f":"'Source Data'!A99","v":"ami.7"},{"$f":"'Source Data'!B99","v":"m"},{"$f":"'Source Data'!C99","v":0.42116199999999998},{"$f":"'Source Data'!D99","v":"require secure remote firmware upgrade"},{"$f":"'Source Data'!E99","v":" on the meter"},{"$f":"'Source Data'!F99","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require secure remote firmware upgrade on the meter"}]
[{"$f":"'Source Data'!A100","v":"ami.7"},{"$f":"'Source Data'!B100","v":"m"},{"$f":"'Source Data'!C100","v":0.90410699999999999},{"$f":"'Source Data'!D100","v":"require secure boot loader"},{"$f":"'Source Data'!E100","v":" "},{"$f":"'Source Data'!F100","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require secure boot loader "}]
[{"$f":"'Source Data'!A101","v":"ami.7"},{"$f":"'Source Data'!B101","v":"m"},{"$f":"'Source Data'!C101","v":0.15846199999999999},{"$f":"'Source Data'!D101","v":"generate alarms"},{"$f":"'Source Data'!E101","v":" for unusual or unexpected meter operations"},{"$f":"'Source Data'!F101","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for unusual or unexpected meter operations"}]
[{"$f":"'Source Data'!A102","v":"ami.7"},{"$f":"'Source Data'!B102","v":"m"},{"$f":"'Source Data'!C102","v":0.83515899999999998},{"$f":"'Source Data'!D102","v":"detect abnormal functionality"},{"$f":"'Source Data'!E102","v":" to identify network ports and services in use and generate alerts"},{"$f":"'Source Data'!F102","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal functionality to identify network ports and services in use and generate alerts"}]
[{"$f":"'Source Data'!A103","v":"ami.7"},{"$f":"'Source Data'!B103","v":"m"},{"$f":"'Source Data'!C103","v":0.73194199999999998},{"$f":"'Source Data'!D103","v":"cross check"},{"$f":"'Source Data'!E103","v":" network ports and services against intended applications"},{"$f":"'Source Data'!F103","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check network ports and services against intended applications"}]
[{"$f":"'Source Data'!A104","v":"ami.7"},{"$f":"'Source Data'!B104","v":"m"},{"$f":"'Source Data'!C104","v":0.49183700000000002},{"$f":"'Source Data'!D104","v":"generate alerts"},{"$f":"'Source Data'!E104","v":" for unapproved traffic"},{"$f":"'Source Data'!F104","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts for unapproved traffic"}]
[{"$f":"'Source Data'!A105","v":"ami.8"},{"$f":"'Source Data'!B105","v":"t"},{"$f":"'Source Data'!C105","v":0.21212900000000001},{"$f":"'Source Data'!D105","v":"False Meter Alarms Overwhelm AMI and Mask Real Alarms"},{"$f":"'Source Data'!E105","v":0},{"$f":"'Source Data'!F105","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"False Meter Alarms Overwhelm AMI and Mask Real Alarms0"}]
[{"$f":"'Source Data'!A106","v":"ami.8"},{"$f":"'Source Data'!B106","v":"d"},{"$f":"'Source Data'!C106","v":0.119752},{"$f":"'Source Data'!D106","v":"Either due to spoofed tamper alarms or design/implementation problems with the legitimate alarm capability, false meter alarms overwhelm the AMI system and/or cause real meter alarms to be disabled or ignored."},{"$f":"'Source Data'!E106","v":0},{"$f":"'Source Data'!F106","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Either due to spoofed tamper alarms or design/implementation problems with the legitimate alarm capability, false meter alarms overwhelm the AMI system and/or cause real meter alarms to be disabled or ignored.0"}]
[{"$f":"'Source Data'!A107","v":"ami.8"},{"$f":"'Source Data'!B107","v":"v"},{"$f":"'Source Data'!C107","v":4.8363099999999999E-2},{"$f":"'Source Data'!D107","v":"a copy of a prior alarm is difficult or infeasible to distinguish from a new legitimate alarm"},{"$f":"'Source Data'!E107","v":" along the path used for receipt of tamper alarms,"},{"$f":"'Source Data'!F107","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"a copy of a prior alarm is difficult or infeasible to distinguish from a new legitimate alarm along the path used for receipt of tamper alarms,"}]
[{"$f":"'Source Data'!A108","v":"ami.8"},{"$f":"'Source Data'!B108","v":"v"},{"$f":"'Source Data'!C108","v":0.42602600000000002},{"$f":"'Source Data'!D108","v":"alarm management system does not support required processing for legitimate alarm conditions"},{"$f":"'Source Data'!E108","v":" in the AMI system,"},{"$f":"'Source Data'!F108","v":"General Logic Error (6.3.1.7)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"alarm management system does not support required processing for legitimate alarm conditions in the AMI system,"}]
[{"$f":"'Source Data'!A109","v":"ami.8"},{"$f":"'Source Data'!B109","v":"v"},{"$f":"'Source Data'!C109","v":0.32578200000000002},{"$f":"'Source Data'!D109","v":"alarm processing capability is overwhelmed by unnecessary alarms"},{"$f":"'Source Data'!E109","v":" in the alarm management component of the AMI system"},{"$f":"'Source Data'!F109","v":"General Logic Error (6.3.1.7)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"alarm processing capability is overwhelmed by unnecessary alarms in the alarm management component of the AMI system"}]
[{"$f":"'Source Data'!A110","v":"ami.8"},{"$f":"'Source Data'!B110","v":"v"},{"$f":"'Source Data'!C110","v":0.10466200000000001},{"$f":"'Source Data'!D110","v":"inadequate criteria for determining which alarms deserve priority"},{"$f":"'Source Data'!E110","v":" in the alarm management component of the AMI system"},{"$f":"'Source Data'!F110","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"inadequate criteria for determining which alarms deserve priority in the alarm management component of the AMI system"}]
[{"$f":"'Source Data'!A111","v":"ami.8"},{"$f":"'Source Data'!B111","v":"i"},{"$f":"'Source Data'!C111","v":0.42891600000000002},{"$f":"'Source Data'!D111","v":"Disabling or ignoring of alarms leads to loss of metering tamper awareness and increases the impact of those failure scenarios in which meter tampering occurs"},{"$f":"'Source Data'!E111","v":0},{"$f":"'Source Data'!F111","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Disabling or ignoring of alarms leads to loss of metering tamper awareness and increases the impact of those failure scenarios in which meter tampering occurs0"}]
[{"$f":"'Source Data'!A112","v":"ami.8"},{"$f":"'Source Data'!B112","v":"m"},{"$f":"'Source Data'!C112","v":0.62314800000000004},{"$f":"'Source Data'!D112","v":"prioritize alarms"},{"$f":"'Source Data'!E112","v":" by type, location, and other criteria so that high-profile alarms can be distinguished and highlighted"},{"$f":"'Source Data'!F112","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"prioritize alarms by type, location, and other criteria so that high-profile alarms can be distinguished and highlighted"}]
[{"$f":"'Source Data'!A113","v":"ami.8"},{"$f":"'Source Data'!B113","v":"m"},{"$f":"'Source Data'!C113","v":0.61870000000000003},{"$f":"'Source Data'!D113","v":"authenticate messages"},{"$f":"'Source Data'!E113","v":" for receipt of tamper alarms"},{"$f":"'Source Data'!F113","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages for receipt of tamper alarms"}]
[{"$f":"'Source Data'!A114","v":"ami.8"},{"$f":"'Source Data'!B114","v":"m"},{"$f":"'Source Data'!C114","v":0.77999700000000005},{"$f":"'Source Data'!D114","v":"encrypt communication paths"},{"$f":"'Source Data'!E114","v":" for receipt of tamper alarms"},{"$f":"'Source Data'!F114","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths for receipt of tamper alarms"}]
[{"$f":"'Source Data'!A115","v":"ami.8"},{"$f":"'Source Data'!B115","v":"m"},{"$f":"'Source Data'!C115","v":0.48803099999999999},{"$f":"'Source Data'!D115","v":"protect against replay"},{"$f":"'Source Data'!E115","v":" involving receipt of tamper alarms"},{"$f":"'Source Data'!F115","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect against replay involving receipt of tamper alarms"}]
[{"$f":"'Source Data'!A116","v":"ami.8"},{"$f":"'Source Data'!B116","v":"m"},{"$f":"'Source Data'!C116","v":0.98955000000000004},{"$f":"'Source Data'!D116","v":"cross check"},{"$f":"'Source Data'!E116","v":" that tamper alarm is for a real meter"},{"$f":"'Source Data'!F116","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check that tamper alarm is for a real meter"}]
[{"$f":"'Source Data'!A117","v":"ami.8"},{"$f":"'Source Data'!B117","v":"m"},{"$f":"'Source Data'!C117","v":0.92585099999999998},{"$f":"'Source Data'!D117","v":"perform hardware acceptance testing"},{"$f":"'Source Data'!E117","v":" including tamper alarms"},{"$f":"'Source Data'!F117","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"perform hardware acceptance testing including tamper alarms"}]
[{"$f":"'Source Data'!A118","v":"ami.8"},{"$f":"'Source Data'!B118","v":"m"},{"$f":"'Source Data'!C118","v":0.64217400000000002},{"$f":"'Source Data'!D118","v":"cross check"},{"$f":"'Source Data'!E118","v":" outage alerts with existing technology such as the customer service systems"},{"$f":"'Source Data'!F118","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check outage alerts with existing technology such as the customer service systems"}]
[{"$f":"'Source Data'!A119","v":"ami.8"},{"$f":"'Source Data'!B119","v":"m"},{"$f":"'Source Data'!C119","v":0.83242499999999997},{"$f":"'Source Data'!D119","v":"analyze anomalous events"},{"$f":"'Source Data'!E119","v":" that trigger alarms in order to aggregate alarms for reporting"},{"$f":"'Source Data'!F119","v":"analyze"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"analyze anomalous events that trigger alarms in order to aggregate alarms for reporting"}]
[{"$f":"'Source Data'!A120","v":"ami.9"},{"$f":"'Source Data'!B120","v":"t"},{"$f":"'Source Data'!C120","v":0.74736499999999995},{"$f":"'Source Data'!D120","v":"Invalid Disconnect Messages to Meters Impact Customers and Utility"},{"$f":"'Source Data'!E120","v":0},{"$f":"'Source Data'!F120","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Invalid Disconnect Messages to Meters Impact Customers and Utility0"}]
[{"$f":"'Source Data'!A121","v":"ami.9"},{"$f":"'Source Data'!B121","v":"d"},{"$f":"'Source Data'!C121","v":0.956569},{"$f":"'Source Data'!D121","v":"A threat agent obtains legitimate credentials to the AMI system via social engineering. The threat agent may already have access to the network on which this system resides or may succeed in reaching the network from another network. The threat agent issues a disconnect command for one or more target meters. Alternatively, a disconnect may be placed in a schedule and then occur automatically at a later time."},{"$f":"'Source Data'!E121","v":0},{"$f":"'Source Data'!F121","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent obtains legitimate credentials to the AMI system via social engineering. The threat agent may already have access to the network on which this system resides or may succeed in reaching the network from another network. The threat agent issues a disconnect command for one or more target meters. Alternatively, a disconnect may be placed in a schedule and then occur automatically at a later time.0"}]
[{"$f":"'Source Data'!A122","v":"ami.9"},{"$f":"'Source Data'!B122","v":"v"},{"$f":"'Source Data'!C122","v":0.51596600000000004},{"$f":"'Source Data'!D122","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E122","v":" (via social engineering) in the AMI system,"},{"$f":"'Source Data'!F122","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access (via social engineering) in the AMI system,"}]
[{"$f":"'Source Data'!A123","v":"ami.9"},{"$f":"'Source Data'!B123","v":"v"},{"$f":"'Source Data'!C123","v":0.22139800000000001},{"$f":"'Source Data'!D123","v":"workforce may be unaware of recommended precautions"},{"$f":"'Source Data'!E123","v":" to prevent social engineering attacks,"},{"$f":"'Source Data'!F123","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"workforce may be unaware of recommended precautions to prevent social engineering attacks,"}]
[{"$f":"'Source Data'!A124","v":"ami.9"},{"$f":"'Source Data'!B124","v":"v"},{"$f":"'Source Data'!C124","v":0.29963200000000001},{"$f":"'Source Data'!D124","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E124","v":" for a meter disconnect command (single-factor authentication),"},{"$f":"'Source Data'!F124","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access for a meter disconnect command (single-factor authentication),"}]
[{"$f":"'Source Data'!A125","v":"ami.9"},{"$f":"'Source Data'!B125","v":"v"},{"$f":"'Source Data'!C125","v":0.81016200000000005},{"$f":"'Source Data'!D125","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles"},{"$f":"'Source Data'!E125","v":" from remote networks to network containing the AMI system"},{"$f":"'Source Data'!F125","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles from remote networks to network containing the AMI system"}]
[{"$f":"'Source Data'!A126","v":"ami.9"},{"$f":"'Source Data'!B126","v":"i"},{"$f":"'Source Data'!C126","v":6.3590299999999999E-3},{"$f":"'Source Data'!D126","v":"Customers experience power outages"},{"$f":"'Source Data'!E126","v":0},{"$f":"'Source Data'!F126","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Customers experience power outages0"}]
[{"$f":"'Source Data'!A127","v":"ami.9"},{"$f":"'Source Data'!B127","v":"i"},{"$f":"'Source Data'!C127","v":0.28056999999999999},{"$f":"'Source Data'!D127","v":"Utility may need to roll a truck to identify the problem"},{"$f":"'Source Data'!E127","v":0},{"$f":"'Source Data'!F127","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility may need to roll a truck to identify the problem0"}]
[{"$f":"'Source Data'!A128","v":"ami.9"},{"$f":"'Source Data'!B128","v":"i"},{"$f":"'Source Data'!C128","v":0.91917199999999999},{"$f":"'Source Data'!D128","v":"Utility loses revenue (scales based on number of meters affected)"},{"$f":"'Source Data'!E128","v":0},{"$f":"'Source Data'!F128","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility loses revenue (scales based on number of meters affected)0"}]
[{"$f":"'Source Data'!A129","v":"ami.9"},{"$f":"'Source Data'!B129","v":"i"},{"$f":"'Source Data'!C129","v":0.36737999999999998},{"$f":"'Source Data'!D129","v":"Threat agent may use power outage to mask criminal activity at customer sites"},{"$f":"'Source Data'!E129","v":0},{"$f":"'Source Data'!F129","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat agent may use power outage to mask criminal activity at customer sites0"}]
[{"$f":"'Source Data'!A130","v":"ami.9"},{"$f":"'Source Data'!B130","v":"m"},{"$f":"'Source Data'!C130","v":0.407252},{"$f":"'Source Data'!D130","v":"detect unusual patterns"},{"$f":"'Source Data'!E130","v":" of disconnects on smart meters"},{"$f":"'Source Data'!F130","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of disconnects on smart meters"}]
[{"$f":"'Source Data'!A131","v":"ami.9"},{"$f":"'Source Data'!B131","v":"m"},{"$f":"'Source Data'!C131","v":0.87450300000000003},{"$f":"'Source Data'!D131","v":"re-evaluate scheduled disconnects"},{"$f":"'Source Data'!E131","v":" "},{"$f":"'Source Data'!F131","v":"analyze"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"re-evaluate scheduled disconnects "}]
[{"$f":"'Source Data'!A132","v":"ami.9"},{"$f":"'Source Data'!B132","v":"m"},{"$f":"'Source Data'!C132","v":0.95226},{"$f":"'Source Data'!D132","v":"define policy"},{"$f":"'Source Data'!E132","v":" for mass meter disconnect"},{"$f":"'Source Data'!F132","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define policy for mass meter disconnect"}]
[{"$f":"'Source Data'!A133","v":"ami.9"},{"$f":"'Source Data'!B133","v":"m"},{"$f":"'Source Data'!C133","v":0.99036000000000002},{"$f":"'Source Data'!D133","v":"define procedures"},{"$f":"'Source Data'!E133","v":" for mass meter disconnect"},{"$f":"'Source Data'!F133","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define procedures for mass meter disconnect"}]
[{"$f":"'Source Data'!A134","v":"ami.9"},{"$f":"'Source Data'!B134","v":"m"},{"$f":"'Source Data'!C134","v":0.15040400000000001},{"$f":"'Source Data'!D134","v":"require multi-factor authentication"},{"$f":"'Source Data'!E134","v":" for mass meter disconnect"},{"$f":"'Source Data'!F134","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for mass meter disconnect"}]
[{"$f":"'Source Data'!A135","v":"ami.9"},{"$f":"'Source Data'!B135","v":"m"},{"$f":"'Source Data'!C135","v":0.54823599999999995},{"$f":"'Source Data'!D135","v":"train personnel"},{"$f":"'Source Data'!E135","v":" regarding social engineering techniques"},{"$f":"'Source Data'!F135","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel regarding social engineering techniques"}]
[{"$f":"'Source Data'!A136","v":"ami.9"},{"$f":"'Source Data'!B136","v":"m"},{"$f":"'Source Data'!C136","v":0.23713400000000001},{"$f":"'Source Data'!D136","v":"restrict Internet access"},{"$f":"'Source Data'!E136","v":" using firewall rules"},{"$f":"'Source Data'!F136","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict Internet access using firewall rules"}]
[{"$f":"'Source Data'!A137","v":"ami.9"},{"$f":"'Source Data'!B137","v":"m"},{"$f":"'Source Data'!C137","v":0.77184600000000003},{"$f":"'Source Data'!D137","v":"require VPNs"},{"$f":"'Source Data'!E137","v":" for internal connections from the Internet"},{"$f":"'Source Data'!F137","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require VPNs for internal connections from the Internet"}]
[{"$f":"'Source Data'!A138","v":"ami.9"},{"$f":"'Source Data'!B138","v":"m"},{"$f":"'Source Data'!C138","v":0.45876600000000001},{"$f":"'Source Data'!D138","v":"detect unauthorized access"},{"$f":"'Source Data'!E138","v":" in network traffic between Internet and AMI headend"},{"$f":"'Source Data'!F138","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access in network traffic between Internet and AMI headend"}]
[{"$f":"'Source Data'!A139","v":"ami.9"},{"$f":"'Source Data'!B139","v":"m"},{"$f":"'Source Data'!C139","v":0.73122299999999996},{"$f":"'Source Data'!D139","v":"restrict network access"},{"$f":"'Source Data'!E139","v":" between Internet and AMI headend"},{"$f":"'Source Data'!F139","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access between Internet and AMI headend"}]
[{"$f":"'Source Data'!A140","v":"ami.9"},{"$f":"'Source Data'!B140","v":"m"},{"$f":"'Source Data'!C140","v":0.197155},{"$f":"'Source Data'!D140","v":"restrict Internet access"},{"$f":"'Source Data'!E140","v":" for the AMI headend system"},{"$f":"'Source Data'!F140","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict Internet access for the AMI headend system"}]
[{"$f":"'Source Data'!A141","v":"ami.9"},{"$f":"'Source Data'!B141","v":"m"},{"$f":"'Source Data'!C141","v":0.47371099999999999},{"$f":"'Source Data'!D141","v":"isolate networks"},{"$f":"'Source Data'!E141","v":" for the AMI headend system from the Internet"},{"$f":"'Source Data'!F141","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate networks for the AMI headend system from the Internet"}]
[{"$f":"'Source Data'!A142","v":"ami.9"},{"$f":"'Source Data'!B142","v":"m"},{"$f":"'Source Data'!C142","v":0.92379699999999998},{"$f":"'Source Data'!D142","v":"authenticate devices"},{"$f":"'Source Data'!E142","v":" connecting to the AMI headend system"},{"$f":"'Source Data'!F142","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate devices connecting to the AMI headend system"}]
[{"$f":"'Source Data'!A143","v":"ami.9"},{"$f":"'Source Data'!B143","v":"m"},{"$f":"'Source Data'!C143","v":0.85886600000000002},{"$f":"'Source Data'!D143","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E143","v":" for the AMI headend system"},{"$f":"'Source Data'!F143","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms for the AMI headend system"}]
[{"$f":"'Source Data'!A144","v":"ami.9"},{"$f":"'Source Data'!B144","v":"m"},{"$f":"'Source Data'!C144","v":0.94579800000000003},{"$f":"'Source Data'!D144","v":"enforce least privilege"},{"$f":"'Source Data'!E144","v":" to the minimum number of systems and/or individuals requiring MDMS access"},{"$f":"'Source Data'!F144","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege to the minimum number of systems and/or individuals requiring MDMS access"}]
[{"$f":"'Source Data'!A145","v":"ami.10"},{"$f":"'Source Data'!B145","v":"t"},{"$f":"'Source Data'!C145","v":0.39968599999999999},{"$f":"'Source Data'!D145","v":"Unauthorized Pricing Information Impacts Utility Revenue"},{"$f":"'Source Data'!E145","v":0},{"$f":"'Source Data'!F145","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unauthorized Pricing Information Impacts Utility Revenue0"}]
[{"$f":"'Source Data'!A146","v":"ami.10"},{"$f":"'Source Data'!B146","v":"d"},{"$f":"'Source Data'!C146","v":0.34531200000000001},{"$f":"'Source Data'!D146","v":"The threat agent sends out unauthorized pricing information, such as Time-of-Use (TOU) pricing. This may result in either a loss or increase in utility revenue until the invalid price is recognized. At that point law suits may occur."},{"$f":"'Source Data'!E146","v":0},{"$f":"'Source Data'!F146","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The threat agent sends out unauthorized pricing information, such as Time-of-Use (TOU) pricing. This may result in either a loss or increase in utility revenue until the invalid price is recognized. At that point law suits may occur.0"}]
[{"$f":"'Source Data'!A147","v":"ami.10"},{"$f":"'Source Data'!B147","v":"v"},{"$f":"'Source Data'!C147","v":0.20103099999999999},{"$f":"'Source Data'!D147","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles"},{"$f":"'Source Data'!E147","v":" at the enterprise boundary"},{"$f":"'Source Data'!F147","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles at the enterprise boundary"}]
[{"$f":"'Source Data'!A148","v":"ami.10"},{"$f":"'Source Data'!B148","v":"v"},{"$f":"'Source Data'!C148","v":0.32200800000000002},{"$f":"'Source Data'!D148","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E148","v":" to pricing change functions,"},{"$f":"'Source Data'!F148","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to pricing change functions,"}]
[{"$f":"'Source Data'!A149","v":"ami.10"},{"$f":"'Source Data'!B149","v":"v"},{"$f":"'Source Data'!C149","v":0.336171},{"$f":"'Source Data'!D149","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E149","v":" to accounts required to make TOU pricing changes,"},{"$f":"'Source Data'!F149","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to accounts required to make TOU pricing changes,"}]
[{"$f":"'Source Data'!A150","v":"ami.10"},{"$f":"'Source Data'!B150","v":"v"},{"$f":"'Source Data'!C150","v":0.57068600000000003},{"$f":"'Source Data'!D150","v":"configuration changes are not verified for correctness"},{"$f":"'Source Data'!E150","v":" in pricing data (e.g., TOU pricing)."},{"$f":"'Source Data'!F150","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configuration changes are not verified for correctness in pricing data (e.g., TOU pricing)."}]
[{"$f":"'Source Data'!A151","v":"ami.10"},{"$f":"'Source Data'!B151","v":"i"},{"$f":"'Source Data'!C151","v":0.437},{"$f":"'Source Data'!D151","v":"Potential for brownout or blackout depending upon the level of response from TOU participants"},{"$f":"'Source Data'!E151","v":0},{"$f":"'Source Data'!F151","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential for brownout or blackout depending upon the level of response from TOU participants0"}]
[{"$f":"'Source Data'!A152","v":"ami.10"},{"$f":"'Source Data'!B152","v":"i"},{"$f":"'Source Data'!C152","v":0.87439},{"$f":"'Source Data'!D152","v":"Utility will lose or gain revenue due to invalid prices"},{"$f":"'Source Data'!E152","v":0},{"$f":"'Source Data'!F152","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility will lose or gain revenue due to invalid prices0"}]
[{"$f":"'Source Data'!A153","v":"ami.10"},{"$f":"'Source Data'!B153","v":"i"},{"$f":"'Source Data'!C153","v":0.64393800000000001},{"$f":"'Source Data'!D153","v":"Lawsuits might be required to resolve the discrepancies"},{"$f":"'Source Data'!E153","v":0},{"$f":"'Source Data'!F153","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Lawsuits might be required to resolve the discrepancies0"}]
[{"$f":"'Source Data'!A154","v":"ami.10"},{"$f":"'Source Data'!B154","v":"m"},{"$f":"'Source Data'!C154","v":0.51794099999999998},{"$f":"'Source Data'!D154","v":"validate data"},{"$f":"'Source Data'!E154","v":" to detect a person overriding the calculated prices or entering inconsistent prices in the price calculation system"},{"$f":"'Source Data'!F154","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate data to detect a person overriding the calculated prices or entering inconsistent prices in the price calculation system"}]
[{"$f":"'Source Data'!A155","v":"ami.10"},{"$f":"'Source Data'!B155","v":"m"},{"$f":"'Source Data'!C155","v":0.89487399999999995},{"$f":"'Source Data'!D155","v":"create audit logs"},{"$f":"'Source Data'!E155","v":" when a person overrides the calculated prices or enters inconsistent prices in the price calculation system"},{"$f":"'Source Data'!F155","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs when a person overrides the calculated prices or enters inconsistent prices in the price calculation system"}]
[{"$f":"'Source Data'!A156","v":"ami.10"},{"$f":"'Source Data'!B156","v":"m"},{"$f":"'Source Data'!C156","v":0.839202},{"$f":"'Source Data'!D156","v":"generate alarms"},{"$f":"'Source Data'!E156","v":" when a person overrides the calculated prices or enters inconsistent prices in the price calculation system"},{"$f":"'Source Data'!F156","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms when a person overrides the calculated prices or enters inconsistent prices in the price calculation system"}]
[{"$f":"'Source Data'!A157","v":"ami.10"},{"$f":"'Source Data'!B157","v":"m"},{"$f":"'Source Data'!C157","v":0.63769500000000001},{"$f":"'Source Data'!D157","v":"restrict Internet access"},{"$f":"'Source Data'!E157","v":" using firewall rules"},{"$f":"'Source Data'!F157","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict Internet access using firewall rules"}]
[{"$f":"'Source Data'!A158","v":"ami.10"},{"$f":"'Source Data'!B158","v":"m"},{"$f":"'Source Data'!C158","v":0.476329},{"$f":"'Source Data'!D158","v":"require VPNs"},{"$f":"'Source Data'!E158","v":" for internal connections from the Internet"},{"$f":"'Source Data'!F158","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require VPNs for internal connections from the Internet"}]
[{"$f":"'Source Data'!A159","v":"ami.10"},{"$f":"'Source Data'!B159","v":"m"},{"$f":"'Source Data'!C159","v":0.422985},{"$f":"'Source Data'!D159","v":"detect unauthorized access"},{"$f":"'Source Data'!E159","v":" between the Internet and AMI"},{"$f":"'Source Data'!F159","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access between the Internet and AMI"}]
[{"$f":"'Source Data'!A160","v":"ami.10"},{"$f":"'Source Data'!B160","v":"m"},{"$f":"'Source Data'!C160","v":9.0364199999999999E-3},{"$f":"'Source Data'!D160","v":"restrict network access"},{"$f":"'Source Data'!E160","v":" between the Internet and AMI"},{"$f":"'Source Data'!F160","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access between the Internet and AMI"}]
[{"$f":"'Source Data'!A161","v":"ami.10"},{"$f":"'Source Data'!B161","v":"m"},{"$f":"'Source Data'!C161","v":0.60819900000000005},{"$f":"'Source Data'!D161","v":"require multi-factor authentication"},{"$f":"'Source Data'!E161","v":" for price changes"},{"$f":"'Source Data'!F161","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for price changes"}]
[{"$f":"'Source Data'!A162","v":"ami.10"},{"$f":"'Source Data'!B162","v":"m"},{"$f":"'Source Data'!C162","v":0.92754700000000001},{"$f":"'Source Data'!D162","v":"enforce least privilege"},{"$f":"'Source Data'!E162","v":" to minimize personnel with access to perform price changes"},{"$f":"'Source Data'!F162","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege to minimize personnel with access to perform price changes"}]
[{"$f":"'Source Data'!A163","v":"ami.10"},{"$f":"'Source Data'!B163","v":"m"},{"$f":"'Source Data'!C163","v":0.34870800000000002},{"$f":"'Source Data'!D163","v":"require two-person rule"},{"$f":"'Source Data'!E163","v":" for execution of price changes"},{"$f":"'Source Data'!F163","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require two-person rule for execution of price changes"}]
[{"$f":"'Source Data'!A164","v":"ami.10"},{"$f":"'Source Data'!B164","v":"m"},{"$f":"'Source Data'!C164","v":0.81632400000000005},{"$f":"'Source Data'!D164","v":"protect credentials"},{"$f":"'Source Data'!E164","v":" permitting price changes, in both user and administrative processes"},{"$f":"'Source Data'!F164","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials permitting price changes, in both user and administrative processes"}]
[{"$f":"'Source Data'!A165","v":"ami.11"},{"$f":"'Source Data'!B165","v":"t"},{"$f":"'Source Data'!C165","v":0.25281500000000001},{"$f":"'Source Data'!D165","v":"Spoofed Meter \"Last Gasp\" Messages Cause Fake Outage"},{"$f":"'Source Data'!E165","v":0},{"$f":"'Source Data'!F165","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Spoofed Meter \"Last Gasp\" Messages Cause Fake Outage0"}]
[{"$f":"'Source Data'!A166","v":"ami.11"},{"$f":"'Source Data'!B166","v":"d"},{"$f":"'Source Data'!C166","v":0.411277},{"$f":"'Source Data'!D166","v":"A threat agent is able to send many spoofed meter \"last gasp\" messages to the AMI MDMS, indicating a power outage. As more spoofed messages are sent, the grid operator tries to reconfigure the grid to compensate, causing utilities to roll trucks to determine why meters continue to be unresponsive. (Note: This is a special case of failure scenarios AMI.14 and DR.3.)"},{"$f":"'Source Data'!E166","v":0},{"$f":"'Source Data'!F166","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent is able to send many spoofed meter \"last gasp\" messages to the AMI MDMS, indicating a power outage. As more spoofed messages are sent, the grid operator tries to reconfigure the grid to compensate, causing utilities to roll trucks to determine why meters continue to be unresponsive. (Note: This is a special case of failure scenarios AMI.14 and DR.3.)0"}]
[{"$f":"'Source Data'!A167","v":"ami.11"},{"$f":"'Source Data'!B167","v":"v"},{"$f":"'Source Data'!C167","v":0.24643599999999999},{"$f":"'Source Data'!D167","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E167","v":" in the path used to receive last gasp messages"},{"$f":"'Source Data'!F167","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals in the path used to receive last gasp messages"}]
[{"$f":"'Source Data'!A168","v":"ami.11"},{"$f":"'Source Data'!B168","v":"v"},{"$f":"'Source Data'!C168","v":0.97837799999999997},{"$f":"'Source Data'!D168","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E168","v":" in the path used to receive last gasp messages"},{"$f":"'Source Data'!F168","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in the path used to receive last gasp messages"}]
[{"$f":"'Source Data'!A169","v":"ami.11"},{"$f":"'Source Data'!B169","v":"v"},{"$f":"'Source Data'!C169","v":0.80209699999999995},{"$f":"'Source Data'!D169","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Source Data'!E169","v":" in the path used to receive last gasp messages"},{"$f":"'Source Data'!F169","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command in the path used to receive last gasp messages"}]
[{"$f":"'Source Data'!A170","v":"ami.11"},{"$f":"'Source Data'!B170","v":"i"},{"$f":"'Source Data'!C170","v":0.85045999999999999},{"$f":"'Source Data'!D170","v":"Cost to roll trucks to investigate fake outages"},{"$f":"'Source Data'!E170","v":0},{"$f":"'Source Data'!F170","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost to roll trucks to investigate fake outages0"}]
[{"$f":"'Source Data'!A171","v":"ami.11"},{"$f":"'Source Data'!B171","v":"i"},{"$f":"'Source Data'!C171","v":0.27648600000000001},{"$f":"'Source Data'!D171","v":"Loss of revenue and creation of a customer service situation"},{"$f":"'Source Data'!E171","v":0},{"$f":"'Source Data'!F171","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of revenue and creation of a customer service situation0"}]
[{"$f":"'Source Data'!A172","v":"ami.11"},{"$f":"'Source Data'!B172","v":"i"},{"$f":"'Source Data'!C172","v":0.60226800000000003},{"$f":"'Source Data'!D172","v":"Loss of confidence by customers due to visible attempts to repair non-existent problems. This may lead to reduced customer acceptance of advanced programs such as DR"},{"$f":"'Source Data'!E172","v":0},{"$f":"'Source Data'!F172","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of confidence by customers due to visible attempts to repair non-existent problems. This may lead to reduced customer acceptance of advanced programs such as DR0"}]
[{"$f":"'Source Data'!A173","v":"ami.11"},{"$f":"'Source Data'!B173","v":"i"},{"$f":"'Source Data'!C173","v":0.70692999999999995},{"$f":"'Source Data'!D173","v":"Loss of true system state visibility"},{"$f":"'Source Data'!E173","v":0},{"$f":"'Source Data'!F173","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of true system state visibility0"}]
[{"$f":"'Source Data'!A174","v":"ami.11"},{"$f":"'Source Data'!B174","v":"m"},{"$f":"'Source Data'!C174","v":0.13584599999999999},{"$f":"'Source Data'!D174","v":"define procedures"},{"$f":"'Source Data'!E174","v":" to confirm an outage when receiving an AMI last gasp outage message"},{"$f":"'Source Data'!F174","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define procedures to confirm an outage when receiving an AMI last gasp outage message"}]
[{"$f":"'Source Data'!A175","v":"ami.11"},{"$f":"'Source Data'!B175","v":"m"},{"$f":"'Source Data'!C175","v":0.75899399999999995},{"$f":"'Source Data'!D175","v":"continue normal operations"},{"$f":"'Source Data'!E175","v":" rather than responding to AMI last gasp outage messages"},{"$f":"'Source Data'!F175","v":"user decision"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"continue normal operations rather than responding to AMI last gasp outage messages"}]
[{"$f":"'Source Data'!A176","v":"ami.11"},{"$f":"'Source Data'!B176","v":"m"},{"$f":"'Source Data'!C176","v":0.37769399999999997},{"$f":"'Source Data'!D176","v":"verify load"},{"$f":"'Source Data'!E176","v":" at substation and line level to verify reduced demand associated with meters reporting last gasp messages"},{"$f":"'Source Data'!F176","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify load at substation and line level to verify reduced demand associated with meters reporting last gasp messages"}]
[{"$f":"'Source Data'!A177","v":"ami.11"},{"$f":"'Source Data'!B177","v":"m"},{"$f":"'Source Data'!C177","v":0.157691},{"$f":"'Source Data'!D177","v":"authenticate messages"},{"$f":"'Source Data'!E177","v":" that report last gasp messages from a meter"},{"$f":"'Source Data'!F177","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages that report last gasp messages from a meter"}]
[{"$f":"'Source Data'!A178","v":"ami.11"},{"$f":"'Source Data'!B178","v":"m"},{"$f":"'Source Data'!C178","v":0.64572200000000002},{"$f":"'Source Data'!D178","v":"encrypt communication paths"},{"$f":"'Source Data'!E178","v":" for last gasp messages"},{"$f":"'Source Data'!F178","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths for last gasp messages"}]
[{"$f":"'Source Data'!A179","v":"ami.11"},{"$f":"'Source Data'!B179","v":"m"},{"$f":"'Source Data'!C179","v":0.63527299999999998},{"$f":"'Source Data'!D179","v":"confirm action"},{"$f":"'Source Data'!E179","v":" on receipt of last gasp messages by checking that a last gasp message is from a real meter"},{"$f":"'Source Data'!F179","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"confirm action on receipt of last gasp messages by checking that a last gasp message is from a real meter"}]
[{"$f":"'Source Data'!A180","v":"ami.11"},{"$f":"'Source Data'!B180","v":"m"},{"$f":"'Source Data'!C180","v":0.56112399999999996},{"$f":"'Source Data'!D180","v":"confirm action"},{"$f":"'Source Data'!E180","v":" after receiving last gasp message from a meter"},{"$f":"'Source Data'!F180","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"confirm action after receiving last gasp message from a meter"}]
[{"$f":"'Source Data'!A181","v":"ami.11"},{"$f":"'Source Data'!B181","v":"m"},{"$f":"'Source Data'!C181","v":0.58870500000000003},{"$f":"'Source Data'!D181","v":"protect against replay"},{"$f":"'Source Data'!E181","v":" of last gasp messages"},{"$f":"'Source Data'!F181","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect against replay of last gasp messages"}]
[{"$f":"'Source Data'!A182","v":"ami.12"},{"$f":"'Source Data'!B182","v":"t"},{"$f":"'Source Data'!C182","v":0.20329800000000001},{"$f":"'Source Data'!D182","v":"Improper Firewall Configuration Exposes Customer Data"},{"$f":"'Source Data'!E182","v":0},{"$f":"'Source Data'!F182","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Improper Firewall Configuration Exposes Customer Data0"}]
[{"$f":"'Source Data'!A183","v":"ami.12"},{"$f":"'Source Data'!B183","v":"d"},{"$f":"'Source Data'!C183","v":0.95066300000000004},{"$f":"'Source Data'!D183","v":"A firewall rule is intentionally or unintentionally created allowing direct access from another network. Taking advantage of this rule, a threat agent subsequently gains access to the database that receives data from the customer accounts database. This enables the threat agent to steal customer personally identifiable information, including electricity usage data."},{"$f":"'Source Data'!E183","v":0},{"$f":"'Source Data'!F183","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A firewall rule is intentionally or unintentionally created allowing direct access from another network. Taking advantage of this rule, a threat agent subsequently gains access to the database that receives data from the customer accounts database. This enables the threat agent to steal customer personally identifiable information, including electricity usage data.0"}]
[{"$f":"'Source Data'!A184","v":"ami.12"},{"$f":"'Source Data'!B184","v":"v"},{"$f":"'Source Data'!C184","v":0.90723200000000004},{"$f":"'Source Data'!D184","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E184","v":" to the firewall"},{"$f":"'Source Data'!F184","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the firewall"}]
[{"$f":"'Source Data'!A185","v":"ami.12"},{"$f":"'Source Data'!B185","v":"v"},{"$f":"'Source Data'!C185","v":0.42319800000000002},{"$f":"'Source Data'!D185","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E185","v":" to the database"},{"$f":"'Source Data'!F185","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the database"}]
[{"$f":"'Source Data'!A186","v":"ami.12"},{"$f":"'Source Data'!B186","v":"v"},{"$f":"'Source Data'!C186","v":0.64459599999999995},{"$f":"'Source Data'!D186","v":"default configuration allows access that is unnecessary after the system is operational"},{"$f":"'Source Data'!E186","v":" This allows unnecessary access to the database"},{"$f":"'Source Data'!F186","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"default configuration allows access that is unnecessary after the system is operational This allows unnecessary access to the database"}]
[{"$f":"'Source Data'!A187","v":"ami.12"},{"$f":"'Source Data'!B187","v":"v"},{"$f":"'Source Data'!C187","v":0.94422799999999996},{"$f":"'Source Data'!D187","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E187","v":" in the AMI system"},{"$f":"'Source Data'!F187","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity in the AMI system"}]
[{"$f":"'Source Data'!A188","v":"ami.12"},{"$f":"'Source Data'!B188","v":"i"},{"$f":"'Source Data'!C188","v":0.75439000000000001},{"$f":"'Source Data'!D188","v":"Potential for breach of customer privacy and loss of customer confidence"},{"$f":"'Source Data'!E188","v":0},{"$f":"'Source Data'!F188","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential for breach of customer privacy and loss of customer confidence0"}]
[{"$f":"'Source Data'!A189","v":"ami.12"},{"$f":"'Source Data'!B189","v":"m"},{"$f":"'Source Data'!C189","v":0.76074900000000001},{"$f":"'Source Data'!D189","v":"detect unauthorized access"},{"$f":"'Source Data'!E189","v":" between Internet and AMI consumer information"},{"$f":"'Source Data'!F189","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access between Internet and AMI consumer information"}]
[{"$f":"'Source Data'!A190","v":"ami.12"},{"$f":"'Source Data'!B190","v":"m"},{"$f":"'Source Data'!C190","v":0.96049099999999998},{"$f":"'Source Data'!D190","v":"implement configuration management"},{"$f":"'Source Data'!E190","v":" to reduce the likelihood that a threat agent can compromise an entire system"},{"$f":"'Source Data'!F190","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management to reduce the likelihood that a threat agent can compromise an entire system"}]
[{"$f":"'Source Data'!A191","v":"ami.12"},{"$f":"'Source Data'!B191","v":"m"},{"$f":"'Source Data'!C191","v":0.32787100000000002},{"$f":"'Source Data'!D191","v":"conduct penetration testing"},{"$f":"'Source Data'!E191","v":" for changes to Internet-facing resources or high value targets"},{"$f":"'Source Data'!F191","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"conduct penetration testing for changes to Internet-facing resources or high value targets"}]
[{"$f":"'Source Data'!A192","v":"ami.12"},{"$f":"'Source Data'!B192","v":"m"},{"$f":"'Source Data'!C192","v":0.609626},{"$f":"'Source Data'!D192","v":"enforce least privilege"},{"$f":"'Source Data'!E192","v":" to limit database access to authorized applications and/or locally authenticated users"},{"$f":"'Source Data'!F192","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege to limit database access to authorized applications and/or locally authenticated users"}]
[{"$f":"'Source Data'!A193","v":"ami.12"},{"$f":"'Source Data'!B193","v":"m"},{"$f":"'Source Data'!C193","v":0.56188499999999997},{"$f":"'Source Data'!D193","v":"protect credentials"},{"$f":"'Source Data'!E193","v":" for access to the customer information database"},{"$f":"'Source Data'!F193","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for access to the customer information database"}]
[{"$f":"'Source Data'!A194","v":"ami.12"},{"$f":"'Source Data'!B194","v":"m"},{"$f":"'Source Data'!C194","v":0.55976199999999998},{"$f":"'Source Data'!D194","v":"create audit logs"},{"$f":"'Source Data'!E194","v":" of firewall rule changes and customer database accesses"},{"$f":"'Source Data'!F194","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of firewall rule changes and customer database accesses"}]
[{"$f":"'Source Data'!A195","v":"ami.12"},{"$f":"'Source Data'!B195","v":"m"},{"$f":"'Source Data'!C195","v":0.23144999999999999},{"$f":"'Source Data'!D195","v":"detect unusual patterns"},{"$f":"'Source Data'!E195","v":" of database access"},{"$f":"'Source Data'!F195","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of database access"}]
[{"$f":"'Source Data'!A196","v":"ami.12"},{"$f":"'Source Data'!B196","v":"m"},{"$f":"'Source Data'!C196","v":0.528196},{"$f":"'Source Data'!D196","v":"detect unauthorized configuration changes"},{"$f":"'Source Data'!E196","v":" to the firewall"},{"$f":"'Source Data'!F196","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized configuration changes to the firewall"}]
[{"$f":"'Source Data'!A197","v":"ami.12"},{"$f":"'Source Data'!B197","v":"m"},{"$f":"'Source Data'!C197","v":0.49569299999999999},{"$f":"'Source Data'!D197","v":"require strong passwords"},{"$f":"'Source Data'!E197","v":" for access to the customer information database"},{"$f":"'Source Data'!F197","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require strong passwords for access to the customer information database"}]
[{"$f":"'Source Data'!A198","v":"ami.12"},{"$f":"'Source Data'!B198","v":"m"},{"$f":"'Source Data'!C198","v":0.16761499999999999},{"$f":"'Source Data'!D198","v":"require multi-factor authentication"},{"$f":"'Source Data'!E198","v":" for access to the customer information database"},{"$f":"'Source Data'!F198","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for access to the customer information database"}]
[{"$f":"'Source Data'!A199","v":"ami.13"},{"$f":"'Source Data'!B199","v":"t"},{"$f":"'Source Data'!C199","v":0.55224499999999999},{"$f":"'Source Data'!D199","v":"Authorized User uses Unattended Console to Disconnect Customer"},{"$f":"'Source Data'!E199","v":0},{"$f":"'Source Data'!F199","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authorized User uses Unattended Console to Disconnect Customer0"}]
[{"$f":"'Source Data'!A200","v":"ami.13"},{"$f":"'Source Data'!B200","v":"d"},{"$f":"'Source Data'!C200","v":0.70265},{"$f":"'Source Data'!D200","v":"An authorized user gains physical access to the operations room and subsequently an unattended console. The authorized user then disconnects service to a customer's house."},{"$f":"'Source Data'!E200","v":0},{"$f":"'Source Data'!F200","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An authorized user gains physical access to the operations room and subsequently an unattended console. The authorized user then disconnects service to a customer's house.0"}]
[{"$f":"'Source Data'!A201","v":"ami.13"},{"$f":"'Source Data'!B201","v":"v"},{"$f":"'Source Data'!C201","v":0.250886},{"$f":"'Source Data'!D201","v":"system permits bypass of access control mechanisms"},{"$f":"'Source Data'!E201","v":" when the user has physical access to the console"},{"$f":"'Source Data'!F201","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits bypass of access control mechanisms when the user has physical access to the console"}]
[{"$f":"'Source Data'!A202","v":"ami.13"},{"$f":"'Source Data'!B202","v":"v"},{"$f":"'Source Data'!C202","v":0.48802099999999998},{"$f":"'Source Data'!D202","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E202","v":" at an unattended user console"},{"$f":"'Source Data'!F202","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals at an unattended user console"}]
[{"$f":"'Source Data'!A203","v":"ami.13"},{"$f":"'Source Data'!B203","v":"v"},{"$f":"'Source Data'!C203","v":0.25986599999999999},{"$f":"'Source Data'!D203","v":"workforce may be unaware of recommended precautions"},{"$f":"'Source Data'!E203","v":" when leaving consoles unattended and unlocked"},{"$f":"'Source Data'!F203","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"workforce may be unaware of recommended precautions when leaving consoles unattended and unlocked"}]
[{"$f":"'Source Data'!A204","v":"ami.13"},{"$f":"'Source Data'!B204","v":"i"},{"$f":"'Source Data'!C204","v":0.71863200000000005},{"$f":"'Source Data'!D204","v":"Unexpected power outage for a single customer"},{"$f":"'Source Data'!E204","v":0},{"$f":"'Source Data'!F204","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unexpected power outage for a single customer0"}]
[{"$f":"'Source Data'!A205","v":"ami.13"},{"$f":"'Source Data'!B205","v":"m"},{"$f":"'Source Data'!C205","v":0.449855},{"$f":"'Source Data'!D205","v":"restrict physical access"},{"$f":"'Source Data'!E205","v":" to operations room with sensitive consoles"},{"$f":"'Source Data'!F205","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access to operations room with sensitive consoles"}]
[{"$f":"'Source Data'!A206","v":"ami.13"},{"$f":"'Source Data'!B206","v":"m"},{"$f":"'Source Data'!C206","v":0.64700999999999997},{"$f":"'Source Data'!D206","v":"train personnel"},{"$f":"'Source Data'!E206","v":" regarding need to lock unattended consoles"},{"$f":"'Source Data'!F206","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel regarding need to lock unattended consoles"}]
[{"$f":"'Source Data'!A207","v":"ami.13"},{"$f":"'Source Data'!B207","v":"m"},{"$f":"'Source Data'!C207","v":0.12072099999999999},{"$f":"'Source Data'!D207","v":"require video surveillance"},{"$f":"'Source Data'!E207","v":" for operations rooms containing sensitive user consoles"},{"$f":"'Source Data'!F207","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require video surveillance for operations rooms containing sensitive user consoles"}]
[{"$f":"'Source Data'!A208","v":"ami.13"},{"$f":"'Source Data'!B208","v":"m"},{"$f":"'Source Data'!C208","v":4.4517099999999997E-2},{"$f":"'Source Data'!D208","v":"lock workstations"},{"$f":"'Source Data'!E208","v":" when unattended"},{"$f":"'Source Data'!F208","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"lock workstations when unattended"}]
[{"$f":"'Source Data'!A209","v":"ami.13"},{"$f":"'Source Data'!B209","v":"m"},{"$f":"'Source Data'!C209","v":0.90338300000000005},{"$f":"'Source Data'!D209","v":"confirm action"},{"$f":"'Source Data'!E209","v":" by requiring approval for some actions in the user interface design"},{"$f":"'Source Data'!F209","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"confirm action by requiring approval for some actions in the user interface design"}]
[{"$f":"'Source Data'!A210","v":"ami.13"},{"$f":"'Source Data'!B210","v":"m"},{"$f":"'Source Data'!C210","v":0.84918000000000005},{"$f":"'Source Data'!D210","v":"lock workstations"},{"$f":"'Source Data'!E210","v":" for inactivity on non-safety-critical consoles"},{"$f":"'Source Data'!F210","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"lock workstations for inactivity on non-safety-critical consoles"}]
[{"$f":"'Source Data'!A211","v":"ami.13"},{"$f":"'Source Data'!B211","v":"m"},{"$f":"'Source Data'!C211","v":0.248867},{"$f":"'Source Data'!D211","v":"cross check"},{"$f":"'Source Data'!E211","v":" physical access identification with system identification to detect failure scenarios such as a threat agent using Person A's badge to access a physical console and subsequently logging into a system using Person B's credentials"},{"$f":"'Source Data'!F211","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check physical access identification with system identification to detect failure scenarios such as a threat agent using Person A's badge to access a physical console and subsequently logging into a system using Person B's credentials"}]
[{"$f":"'Source Data'!A212","v":"ami.13"},{"$f":"'Source Data'!B212","v":"m"},{"$f":"'Source Data'!C212","v":0.59417900000000001},{"$f":"'Source Data'!D212","v":"require second-level authentication"},{"$f":"'Source Data'!E212","v":" to the application interface to initiate customer disconnect"},{"$f":"'Source Data'!F212","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require second-level authentication to the application interface to initiate customer disconnect"}]
[{"$f":"'Source Data'!A213","v":"ami.14"},{"$f":"'Source Data'!B213","v":"t"},{"$f":"'Source Data'!C213","v":0.79520999999999997},{"$f":"'Source Data'!D213","v":"Breach of Cellular Provider's Network Exposes AMI Access"},{"$f":"'Source Data'!E213","v":0},{"$f":"'Source Data'!F213","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Breach of Cellular Provider's Network Exposes AMI Access0"}]
[{"$f":"'Source Data'!A214","v":"ami.14"},{"$f":"'Source Data'!B214","v":"d"},{"$f":"'Source Data'!C214","v":0.117217},{"$f":"'Source Data'!D214","v":"A cellular phone provider's network is breached, allowing access to a private network leased to a utility for AMI command and control. The AMI implementation is vulnerable to replay attacks and DR messages are replayed to a group of customers. (Note: This is a special case of failure scenario DR.3.)"},{"$f":"'Source Data'!E214","v":0},{"$f":"'Source Data'!F214","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A cellular phone provider's network is breached, allowing access to a private network leased to a utility for AMI command and control. The AMI implementation is vulnerable to replay attacks and DR messages are replayed to a group of customers. (Note: This is a special case of failure scenario DR.3.)0"}]
[{"$f":"'Source Data'!A215","v":"ami.14"},{"$f":"'Source Data'!B215","v":"v"},{"$f":"'Source Data'!C215","v":0.45338899999999999},{"$f":"'Source Data'!D215","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Source Data'!E215","v":" (e.g., commercial mobile, utility leased)"},{"$f":"'Source Data'!F215","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"publicly accessible and/or third party controlled links used (e.g., commercial mobile, utility leased)"}]
[{"$f":"'Source Data'!A216","v":"ami.14"},{"$f":"'Source Data'!B216","v":"v"},{"$f":"'Source Data'!C216","v":2.4075300000000001E-2},{"$f":"'Source Data'!D216","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"},{"$f":"'Source Data'!E216","v":" "},{"$f":"'Source Data'!F216","v":"Cryptographic Vulnerability (6.3.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary "}]
[{"$f":"'Source Data'!A217","v":"ami.14"},{"$f":"'Source Data'!B217","v":"v"},{"$f":"'Source Data'!C217","v":0.46107500000000001},{"$f":"'Source Data'!D217","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Source Data'!E217","v":" in the AMI system"},{"$f":"'Source Data'!F217","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command in the AMI system"}]
[{"$f":"'Source Data'!A218","v":"ami.14"},{"$f":"'Source Data'!B218","v":"i"},{"$f":"'Source Data'!C218","v":0.33546500000000001},{"$f":"'Source Data'!D218","v":"Costs of customer service for complaints and investigations"},{"$f":"'Source Data'!E218","v":0},{"$f":"'Source Data'!F218","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Costs of customer service for complaints and investigations0"}]
[{"$f":"'Source Data'!A219","v":"ami.14"},{"$f":"'Source Data'!B219","v":"i"},{"$f":"'Source Data'!C219","v":0.97940300000000002},{"$f":"'Source Data'!D219","v":"Loss of revenue (if DR messages decrease power draw) or temporary loss of power to more critical uses (if messages increase power draw)"},{"$f":"'Source Data'!E219","v":0},{"$f":"'Source Data'!F219","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of revenue (if DR messages decrease power draw) or temporary loss of power to more critical uses (if messages increase power draw)0"}]
[{"$f":"'Source Data'!A220","v":"ami.14"},{"$f":"'Source Data'!B220","v":"i"},{"$f":"'Source Data'!C220","v":0.49734400000000001},{"$f":"'Source Data'!D220","v":"Cost to re-secure the network"},{"$f":"'Source Data'!E220","v":0},{"$f":"'Source Data'!F220","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost to re-secure the network0"}]
[{"$f":"'Source Data'!A221","v":"ami.14"},{"$f":"'Source Data'!B221","v":"m"},{"$f":"'Source Data'!C221","v":0.39221800000000001},{"$f":"'Source Data'!D221","v":"isolate networks"},{"$f":"'Source Data'!E221","v":" using different encryption keys to prevent a breach in one network from affecting another network"},{"$f":"'Source Data'!F221","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate networks using different encryption keys to prevent a breach in one network from affecting another network"}]
[{"$f":"'Source Data'!A222","v":"ami.14"},{"$f":"'Source Data'!B222","v":"m"},{"$f":"'Source Data'!C222","v":0.23141999999999999},{"$f":"'Source Data'!D222","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E222","v":" at the link layer to prevent a threat agent from being able to affect the confidentiality and integrity on the AMI network if a breach should occur"},{"$f":"'Source Data'!F222","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms at the link layer to prevent a threat agent from being able to affect the confidentiality and integrity on the AMI network if a breach should occur"}]
[{"$f":"'Source Data'!A223","v":"ami.14"},{"$f":"'Source Data'!B223","v":"m"},{"$f":"'Source Data'!C223","v":0.86911499999999997},{"$f":"'Source Data'!D223","v":"protect against replay"},{"$f":"'Source Data'!E223","v":" using time-stamping or other methods"},{"$f":"'Source Data'!F223","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect against replay using time-stamping or other methods"}]
[{"$f":"'Source Data'!A224","v":"ami.15"},{"$f":"'Source Data'!B224","v":"t"},{"$f":"'Source Data'!C224","v":0.34544399999999997},{"$f":"'Source Data'!D224","v":"Inadequate Security for Backup AMI Enables Malicious Activity"},{"$f":"'Source Data'!E224","v":0},{"$f":"'Source Data'!F224","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inadequate Security for Backup AMI Enables Malicious Activity0"}]
[{"$f":"'Source Data'!A225","v":"ami.15"},{"$f":"'Source Data'!B225","v":"d"},{"$f":"'Source Data'!C225","v":0.768428},{"$f":"'Source Data'!D225","v":"Inadequate security implementation in the AMI monitoring and control backup system allows a threat agent to execute an attack on the AMI implementation during a business continuity or disaster recovery scenario. Access to these backup systems allows a threat agent to perform malicious activity such as mass disconnects of meters, stopping or modifying DR messages, or creating large numbers of problem meter reports."},{"$f":"'Source Data'!E225","v":0},{"$f":"'Source Data'!F225","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inadequate security implementation in the AMI monitoring and control backup system allows a threat agent to execute an attack on the AMI implementation during a business continuity or disaster recovery scenario. Access to these backup systems allows a threat agent to perform malicious activity such as mass disconnects of meters, stopping or modifying DR messages, or creating large numbers of problem meter reports.0"}]
[{"$f":"'Source Data'!A226","v":"ami.15"},{"$f":"'Source Data'!B226","v":"v"},{"$f":"'Source Data'!C226","v":0.77746499999999996},{"$f":"'Source Data'!D226","v":"weaker security architecture at backup sites"},{"$f":"'Source Data'!E226","v":" "},{"$f":"'Source Data'!F226","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"weaker security architecture at backup sites "}]
[{"$f":"'Source Data'!A227","v":"ami.15"},{"$f":"'Source Data'!B227","v":"v"},{"$f":"'Source Data'!C227","v":0.38566400000000001},{"$f":"'Source Data'!D227","v":"inadequate continuity and recovery security architecture"},{"$f":"'Source Data'!E227","v":" used in business continuity and disaster recovery planning and procedures."},{"$f":"'Source Data'!F227","v":"Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"inadequate continuity and recovery security architecture used in business continuity and disaster recovery planning and procedures."}]
[{"$f":"'Source Data'!A228","v":"ami.15"},{"$f":"'Source Data'!B228","v":"i"},{"$f":"'Source Data'!C228","v":0.31321100000000002},{"$f":"'Source Data'!D228","v":"Power and revenue loss for disconnected customers"},{"$f":"'Source Data'!E228","v":0},{"$f":"'Source Data'!F228","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Power and revenue loss for disconnected customers0"}]
[{"$f":"'Source Data'!A229","v":"ami.15"},{"$f":"'Source Data'!B229","v":"i"},{"$f":"'Source Data'!C229","v":0.66191900000000004},{"$f":"'Source Data'!D229","v":"Outages due to inadequate power available at peak times"},{"$f":"'Source Data'!E229","v":0},{"$f":"'Source Data'!F229","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Outages due to inadequate power available at peak times0"}]
[{"$f":"'Source Data'!A230","v":"ami.15"},{"$f":"'Source Data'!B230","v":"i"},{"$f":"'Source Data'!C230","v":0.91473400000000005},{"$f":"'Source Data'!D230","v":"Cost for rolling trucks to investigate problem meters"},{"$f":"'Source Data'!E230","v":0},{"$f":"'Source Data'!F230","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost for rolling trucks to investigate problem meters0"}]
[{"$f":"'Source Data'!A231","v":"ami.15"},{"$f":"'Source Data'!B231","v":"i"},{"$f":"'Source Data'!C231","v":0.326011},{"$f":"'Source Data'!D231","v":"Additional operational strain on the utility during a business continuity/disaster recovery situation"},{"$f":"'Source Data'!E231","v":0},{"$f":"'Source Data'!F231","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Additional operational strain on the utility during a business continuity/disaster recovery situation0"}]
[{"$f":"'Source Data'!A232","v":"ami.15"},{"$f":"'Source Data'!B232","v":"m"},{"$f":"'Source Data'!C232","v":0.57244700000000004},{"$f":"'Source Data'!D232","v":"restrict physical access"},{"$f":"'Source Data'!E232","v":" for backup sites comparable to normal operational sites"},{"$f":"'Source Data'!F232","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access for backup sites comparable to normal operational sites"}]
[{"$f":"'Source Data'!A233","v":"ami.15"},{"$f":"'Source Data'!B233","v":"m"},{"$f":"'Source Data'!C233","v":0.55082500000000001},{"$f":"'Source Data'!D233","v":"require video surveillance"},{"$f":"'Source Data'!E233","v":" for backup sites comparable to normal operational sites"},{"$f":"'Source Data'!F233","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require video surveillance for backup sites comparable to normal operational sites"}]
[{"$f":"'Source Data'!A234","v":"ami.15"},{"$f":"'Source Data'!B234","v":"m"},{"$f":"'Source Data'!C234","v":2.1039599999999999E-2},{"$f":"'Source Data'!D234","v":"detect physical intrusion"},{"$f":"'Source Data'!E234","v":" for backup sites comparable to normal operational sites"},{"$f":"'Source Data'!F234","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect physical intrusion for backup sites comparable to normal operational sites"}]
[{"$f":"'Source Data'!A235","v":"ami.15"},{"$f":"'Source Data'!B235","v":"m"},{"$f":"'Source Data'!C235","v":0.70338400000000001},{"$f":"'Source Data'!D235","v":"emphasize security management"},{"$f":"'Source Data'!E235","v":" in business continuity and disaster recovery planning, procedures and execution"},{"$f":"'Source Data'!F235","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"emphasize security management in business continuity and disaster recovery planning, procedures and execution"}]
[{"$f":"'Source Data'!A236","v":"ami.15"},{"$f":"'Source Data'!B236","v":"m"},{"$f":"'Source Data'!C236","v":0.50548099999999996},{"$f":"'Source Data'!D236","v":"define policy"},{"$f":"'Source Data'!E236","v":" to include risk and vulnerability assessments in business continuity and disaster recovery testing"},{"$f":"'Source Data'!F236","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define policy to include risk and vulnerability assessments in business continuity and disaster recovery testing"}]
[{"$f":"'Source Data'!A237","v":"ami.16"},{"$f":"'Source Data'!B237","v":"t"},{"$f":"'Source Data'!C237","v":0.35594100000000001},{"$f":"'Source Data'!D237","v":"Compromised Headend Allows Impersonation of CA"},{"$f":"'Source Data'!E237","v":0},{"$f":"'Source Data'!F237","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Compromised Headend Allows Impersonation of CA0"}]
[{"$f":"'Source Data'!A238","v":"ami.16"},{"$f":"'Source Data'!B238","v":"d"},{"$f":"'Source Data'!C238","v":0.63242699999999996},{"$f":"'Source Data'!D238","v":"The private key for the certificate authority (CA) used to set up a Public Key Infrastructure (PKI) at the headend is compromised, which allows a threat agent to impersonate the CA."},{"$f":"'Source Data'!E238","v":0},{"$f":"'Source Data'!F238","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The private key for the certificate authority (CA) used to set up a Public Key Infrastructure (PKI) at the headend is compromised, which allows a threat agent to impersonate the CA.0"}]
[{"$f":"'Source Data'!A239","v":"ami.16"},{"$f":"'Source Data'!B239","v":"v"},{"$f":"'Source Data'!C239","v":0.23469499999999999},{"$f":"'Source Data'!D239","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"},{"$f":"'Source Data'!E239","v":" for protection of the private CA key,"},{"$f":"'Source Data'!F239","v":"Cryptographic Vulnerability (6.3.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary for protection of the private CA key,"}]
[{"$f":"'Source Data'!A240","v":"ami.16"},{"$f":"'Source Data'!B240","v":"v"},{"$f":"'Source Data'!C240","v":0.94162500000000005},{"$f":"'Source Data'!D240","v":"security design does not consider the system lifecycle"},{"$f":"'Source Data'!E240","v":" in the headend."},{"$f":"'Source Data'!F240","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"security design does not consider the system lifecycle in the headend."}]
[{"$f":"'Source Data'!A241","v":"ami.16"},{"$f":"'Source Data'!B241","v":"i"},{"$f":"'Source Data'!C241","v":7.7471600000000002E-2},{"$f":"'Source Data'!D241","v":"Costs incurred for rekeying"},{"$f":"'Source Data'!E241","v":0},{"$f":"'Source Data'!F241","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Costs incurred for rekeying0"}]
[{"$f":"'Source Data'!A242","v":"ami.16"},{"$f":"'Source Data'!B242","v":"i"},{"$f":"'Source Data'!C242","v":0.83646600000000004},{"$f":"'Source Data'!D242","v":"Potential for power overload if the threat agent is able to introduce malicious nodes in the metering system"},{"$f":"'Source Data'!E242","v":0},{"$f":"'Source Data'!F242","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential for power overload if the threat agent is able to introduce malicious nodes in the metering system0"}]
[{"$f":"'Source Data'!A243","v":"ami.16"},{"$f":"'Source Data'!B243","v":"i"},{"$f":"'Source Data'!C243","v":0.21415999999999999},{"$f":"'Source Data'!D243","v":"Potential to perform security-relevant tasks such as firmware upgrades, configuration changes, etc. that are initiated from the CA"},{"$f":"'Source Data'!E243","v":0},{"$f":"'Source Data'!F243","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential to perform security-relevant tasks such as firmware upgrades, configuration changes, etc. that are initiated from the CA0"}]
[{"$f":"'Source Data'!A244","v":"ami.16"},{"$f":"'Source Data'!B244","v":"m"},{"$f":"'Source Data'!C244","v":0.37185099999999999},{"$f":"'Source Data'!D244","v":"require approved key management"},{"$f":"'Source Data'!E244","v":" including secure generation, distribution, storage, and update of cryptographic keys"},{"$f":"'Source Data'!F244","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved key management including secure generation, distribution, storage, and update of cryptographic keys"}]
[{"$f":"'Source Data'!A245","v":"ami.17"},{"$f":"'Source Data'!B245","v":"t"},{"$f":"'Source Data'!C245","v":1.7573499999999999E-2},{"$f":"'Source Data'!D245","v":"Malicious Creation of Duplicate APN Prevents Valid AMI Messages"},{"$f":"'Source Data'!E245","v":0},{"$f":"'Source Data'!F245","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Malicious Creation of Duplicate APN Prevents Valid AMI Messages0"}]
[{"$f":"'Source Data'!A246","v":"ami.17"},{"$f":"'Source Data'!B246","v":"d"},{"$f":"'Source Data'!C246","v":0.65284600000000004},{"$f":"'Source Data'!D246","v":"A malicious individual creates a duplicate Access Point Name (APN) for the Group Special Mobile (GSM)-based cellular communications on an AMI network. The meters that are within the range then associate with the fake APN and do not receive messages from the AMI network."},{"$f":"'Source Data'!E246","v":0},{"$f":"'Source Data'!F246","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A malicious individual creates a duplicate Access Point Name (APN) for the Group Special Mobile (GSM)-based cellular communications on an AMI network. The meters that are within the range then associate with the fake APN and do not receive messages from the AMI network.0"}]
[{"$f":"'Source Data'!A247","v":"ami.17"},{"$f":"'Source Data'!B247","v":"v"},{"$f":"'Source Data'!C247","v":0.21396999999999999},{"$f":"'Source Data'!D247","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E247","v":" in the routing mechanisms of the cellular network,"},{"$f":"'Source Data'!F247","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes in the routing mechanisms of the cellular network,"}]
[{"$f":"'Source Data'!A248","v":"ami.17"},{"$f":"'Source Data'!B248","v":"v"},{"$f":"'Source Data'!C248","v":0.41726799999999997},{"$f":"'Source Data'!D248","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E248","v":" for reconfiguration of the AMI network."},{"$f":"'Source Data'!F248","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access for reconfiguration of the AMI network."}]
[{"$f":"'Source Data'!A249","v":"ami.17"},{"$f":"'Source Data'!B249","v":"i"},{"$f":"'Source Data'!C249","v":0.36793100000000001},{"$f":"'Source Data'!D249","v":"Denial of Service for cellular-based functions within the AMI network"},{"$f":"'Source Data'!E249","v":0},{"$f":"'Source Data'!F249","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Denial of Service for cellular-based functions within the AMI network0"}]
[{"$f":"'Source Data'!A250","v":"ami.17"},{"$f":"'Source Data'!B250","v":"i"},{"$f":"'Source Data'!C250","v":0.27516400000000002},{"$f":"'Source Data'!D250","v":"Cost to roll a truck to investigate unresponsive meter and to read meter data"},{"$f":"'Source Data'!E250","v":0},{"$f":"'Source Data'!F250","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost to roll a truck to investigate unresponsive meter and to read meter data0"}]
[{"$f":"'Source Data'!A251","v":"ami.17"},{"$f":"'Source Data'!B251","v":"i"},{"$f":"'Source Data'!C251","v":0.69836200000000004},{"$f":"'Source Data'!D251","v":"Inability for meters to receive DR messages could cause customers to either pay more for power or experience a loss of power"},{"$f":"'Source Data'!E251","v":0},{"$f":"'Source Data'!F251","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inability for meters to receive DR messages could cause customers to either pay more for power or experience a loss of power0"}]
[{"$f":"'Source Data'!A252","v":"ami.17"},{"$f":"'Source Data'!B252","v":"i"},{"$f":"'Source Data'!C252","v":0.34295900000000001},{"$f":"'Source Data'!D252","v":"If exploited on a large scale, potential outages could occur due to a utility's inability to implement DR"},{"$f":"'Source Data'!E252","v":0},{"$f":"'Source Data'!F252","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"If exploited on a large scale, potential outages could occur due to a utility's inability to implement DR0"}]
[{"$f":"'Source Data'!A253","v":"ami.17"},{"$f":"'Source Data'!B253","v":"m"},{"$f":"'Source Data'!C253","v":0.28718700000000003},{"$f":"'Source Data'!D253","v":"verify mode"},{"$f":"'Source Data'!E253","v":" of GSM-based communications in the AMI to operate only in 3G mode"},{"$f":"'Source Data'!F253","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify mode of GSM-based communications in the AMI to operate only in 3G mode"}]
[{"$f":"'Source Data'!A254","v":"ami.17"},{"$f":"'Source Data'!B254","v":"m"},{"$f":"'Source Data'!C254","v":4.1576500000000002E-2},{"$f":"'Source Data'!D254","v":"require fail-over"},{"$f":"'Source Data'!E254","v":" for cellular-based functions to an alternative non-wireless technology such as power line carrier (PLC)"},{"$f":"'Source Data'!F254","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require fail-over for cellular-based functions to an alternative non-wireless technology such as power line carrier (PLC)"}]
[{"$f":"'Source Data'!A255","v":"ami.17"},{"$f":"'Source Data'!B255","v":"m"},{"$f":"'Source Data'!C255","v":0.86269300000000004},{"$f":"'Source Data'!D255","v":"protect credentials"},{"$f":"'Source Data'!E255","v":" for modifying the configuration of the AMI network,"},{"$f":"'Source Data'!F255","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for modifying the configuration of the AMI network,"}]
[{"$f":"'Source Data'!A256","v":"ami.17"},{"$f":"'Source Data'!B256","v":"m"},{"$f":"'Source Data'!C256","v":0.29485299999999998},{"$f":"'Source Data'!D256","v":"require strong passwords"},{"$f":"'Source Data'!E256","v":" for modifying the configuration of the AMI network,"},{"$f":"'Source Data'!F256","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require strong passwords for modifying the configuration of the AMI network,"}]
[{"$f":"'Source Data'!A257","v":"ami.17"},{"$f":"'Source Data'!B257","v":"m"},{"$f":"'Source Data'!C257","v":0.89282700000000004},{"$f":"'Source Data'!D257","v":"require multi-factor authentication"},{"$f":"'Source Data'!E257","v":" for modifying the configuration of the AMI network,"},{"$f":"'Source Data'!F257","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for modifying the configuration of the AMI network,"}]
[{"$f":"'Source Data'!A258","v":"ami.17"},{"$f":"'Source Data'!B258","v":"m"},{"$f":"'Source Data'!C258","v":0.20893100000000001},{"$f":"'Source Data'!D258","v":"detect unusual patterns"},{"$f":"'Source Data'!E258","v":" of traffic on the AMI cellular network."},{"$f":"'Source Data'!F258","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of traffic on the AMI cellular network."}]
[{"$f":"'Source Data'!A259","v":"ami.18"},{"$f":"'Source Data'!B259","v":"t"},{"$f":"'Source Data'!C259","v":0.80232499999999995},{"$f":"'Source Data'!D259","v":"Unauthorized Devices Create DoS and Prevent Valid DR Messages"},{"$f":"'Source Data'!E259","v":0},{"$f":"'Source Data'!F259","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unauthorized Devices Create DoS and Prevent Valid DR Messages0"}]
[{"$f":"'Source Data'!A260","v":"ami.18"},{"$f":"'Source Data'!B260","v":"d"},{"$f":"'Source Data'!C260","v":0.84364399999999995},{"$f":"'Source Data'!D260","v":"Unauthorized devices gain access to a home area network (HAN). The devices can then be used to create a Denial-of-Service (DoS) condition so that DR messages cannot reach end customer devices. (Note: this is a special case of DR.1.)"},{"$f":"'Source Data'!E260","v":0},{"$f":"'Source Data'!F260","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unauthorized devices gain access to a home area network (HAN). The devices can then be used to create a Denial-of-Service (DoS) condition so that DR messages cannot reach end customer devices. (Note: this is a special case of DR.1.)0"}]
[{"$f":"'Source Data'!A261","v":"ami.18"},{"$f":"'Source Data'!B261","v":"v"},{"$f":"'Source Data'!C261","v":0.80413500000000004},{"$f":"'Source Data'!D261","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E261","v":" to the HAN,"},{"$f":"'Source Data'!F261","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the HAN,"}]
[{"$f":"'Source Data'!A262","v":"ami.18"},{"$f":"'Source Data'!B262","v":"v"},{"$f":"'Source Data'!C262","v":0.13200500000000001},{"$f":"'Source Data'!D262","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Source Data'!E262","v":" instead of only flows to the HAN router/gateway/trust center."},{"$f":"'Source Data'!F262","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interfaces permit unnecessary traffic flows instead of only flows to the HAN router/gateway/trust center."}]
[{"$f":"'Source Data'!A263","v":"ami.18"},{"$f":"'Source Data'!B263","v":"i"},{"$f":"'Source Data'!C263","v":0.86712800000000001},{"$f":"'Source Data'!D263","v":"Inability to receive DR messages may cause affected customers to either pay more for power or to suffer a loss of usage of a device requiring power"},{"$f":"'Source Data'!E263","v":0},{"$f":"'Source Data'!F263","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inability to receive DR messages may cause affected customers to either pay more for power or to suffer a loss of usage of a device requiring power0"}]
[{"$f":"'Source Data'!A264","v":"ami.18"},{"$f":"'Source Data'!B264","v":"i"},{"$f":"'Source Data'!C264","v":0.47675400000000001},{"$f":"'Source Data'!D264","v":"Utility will have associated customer service and troubleshooting costs"},{"$f":"'Source Data'!E264","v":0},{"$f":"'Source Data'!F264","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility will have associated customer service and troubleshooting costs0"}]
[{"$f":"'Source Data'!A265","v":"ami.18"},{"$f":"'Source Data'!B265","v":"i"},{"$f":"'Source Data'!C265","v":3.8638899999999997E-2},{"$f":"'Source Data'!D265","v":"If exploited on a large scale, potential outages could occur due to utility inability to implement DR"},{"$f":"'Source Data'!E265","v":0},{"$f":"'Source Data'!F265","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"If exploited on a large scale, potential outages could occur due to utility inability to implement DR0"}]
[{"$f":"'Source Data'!A266","v":"ami.18"},{"$f":"'Source Data'!B266","v":"m"},{"$f":"'Source Data'!C266","v":0.59088399999999996},{"$f":"'Source Data'!D266","v":"restrict device access"},{"$f":"'Source Data'!E266","v":" to the HAN network"},{"$f":"'Source Data'!F266","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict device access to the HAN network"}]
[{"$f":"'Source Data'!A267","v":"ami.18"},{"$f":"'Source Data'!B267","v":"m"},{"$f":"'Source Data'!C267","v":0.29353400000000002},{"$f":"'Source Data'!D267","v":"authenticate devices"},{"$f":"'Source Data'!E267","v":" accessing the HAN network"},{"$f":"'Source Data'!F267","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate devices accessing the HAN network"}]
[{"$f":"'Source Data'!A268","v":"ami.19"},{"$f":"'Source Data'!B268","v":"t"},{"$f":"'Source Data'!C268","v":0.54442000000000002},{"$f":"'Source Data'!D268","v":"Out of Sync Time-stamping Causes Discard of Legitimate Commands"},{"$f":"'Source Data'!E268","v":0},{"$f":"'Source Data'!F268","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Out of Sync Time-stamping Causes Discard of Legitimate Commands0"}]
[{"$f":"'Source Data'!A269","v":"ami.19"},{"$f":"'Source Data'!B269","v":"d"},{"$f":"'Source Data'!C269","v":3.2440999999999998E-2},{"$f":"'Source Data'!D269","v":"Time-stamping, sometimes used to detect replay attacks, gets out of sync between a meter and its respective AMI headend system, causing the meter to ignore legitimate commands it interprets as a potential replay attack. This causes loss of advanced metering functionality such as two-way communications, remote connect/disconnect, and metrology."},{"$f":"'Source Data'!E269","v":0},{"$f":"'Source Data'!F269","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Time-stamping, sometimes used to detect replay attacks, gets out of sync between a meter and its respective AMI headend system, causing the meter to ignore legitimate commands it interprets as a potential replay attack. This causes loss of advanced metering functionality such as two-way communications, remote connect/disconnect, and metrology.0"}]
[{"$f":"'Source Data'!A270","v":"ami.19"},{"$f":"'Source Data'!B270","v":"v"},{"$f":"'Source Data'!C270","v":0.29230699999999998},{"$f":"'Source Data'!D270","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Source Data'!E270","v":" for meter commands from the AMI headend,"},{"$f":"'Source Data'!F270","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command for meter commands from the AMI headend,"}]
[{"$f":"'Source Data'!A271","v":"ami.19"},{"$f":"'Source Data'!B271","v":"v"},{"$f":"'Source Data'!C271","v":1.0939000000000001E-2},{"$f":"'Source Data'!D271","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E271","v":" to the time synchronization between meters and the AMI headend,"},{"$f":"'Source Data'!F271","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the time synchronization between meters and the AMI headend,"}]
[{"$f":"'Source Data'!A272","v":"ami.19"},{"$f":"'Source Data'!B272","v":"v"},{"$f":"'Source Data'!C272","v":0.46079399999999998},{"$f":"'Source Data'!D272","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E272","v":" to timestamps on meter commands from the AMI headend."},{"$f":"'Source Data'!F272","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to timestamps on meter commands from the AMI headend."}]
[{"$f":"'Source Data'!A273","v":"ami.19"},{"$f":"'Source Data'!B273","v":"i"},{"$f":"'Source Data'!C273","v":0.107803},{"$f":"'Source Data'!D273","v":"Higher cost, or no cost savings, to read meter data if remote reading fails"},{"$f":"'Source Data'!E273","v":0},{"$f":"'Source Data'!F273","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Higher cost, or no cost savings, to read meter data if remote reading fails0"}]
[{"$f":"'Source Data'!A274","v":"ami.19"},{"$f":"'Source Data'!B274","v":"i"},{"$f":"'Source Data'!C274","v":0.228524},{"$f":"'Source Data'!D274","v":"If exploited on a large scale, outages could occur due to utility inability to implement DR"},{"$f":"'Source Data'!E274","v":0},{"$f":"'Source Data'!F274","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"If exploited on a large scale, outages could occur due to utility inability to implement DR0"}]
[{"$f":"'Source Data'!A275","v":"ami.19"},{"$f":"'Source Data'!B275","v":"i"},{"$f":"'Source Data'!C275","v":0.27304099999999998},{"$f":"'Source Data'!D275","v":"Cost of associated customer service, late invoicing, and troubleshooting efforts"},{"$f":"'Source Data'!E275","v":0},{"$f":"'Source Data'!F275","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of associated customer service, late invoicing, and troubleshooting efforts0"}]
[{"$f":"'Source Data'!A276","v":"ami.19"},{"$f":"'Source Data'!B276","v":"m"},{"$f":"'Source Data'!C276","v":0.176424},{"$f":"'Source Data'!D276","v":"require reliable external time source"},{"$f":"'Source Data'!E276","v":" for the meter's time-stamping functionality"},{"$f":"'Source Data'!F276","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require reliable external time source for the meter's time-stamping functionality"}]
[{"$f":"'Source Data'!A277","v":"ami.19"},{"$f":"'Source Data'!B277","v":"m"},{"$f":"'Source Data'!C277","v":2.5604499999999999E-2},{"$f":"'Source Data'!D277","v":"cross check"},{"$f":"'Source Data'!E277","v":" periodically, the results of the time synchronization protocol"},{"$f":"'Source Data'!F277","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check periodically, the results of the time synchronization protocol"}]
[{"$f":"'Source Data'!A278","v":"ami.19"},{"$f":"'Source Data'!B278","v":"m"},{"$f":"'Source Data'!C278","v":0.27447100000000002},{"$f":"'Source Data'!D278","v":"check software execution integrity"},{"$f":"'Source Data'!E278","v":" of the time synchronization protocol, since software may be compromised when loaded for execution,"},{"$f":"'Source Data'!F278","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity of the time synchronization protocol, since software may be compromised when loaded for execution,"}]
[{"$f":"'Source Data'!A279","v":"ami.19"},{"$f":"'Source Data'!B279","v":"m"},{"$f":"'Source Data'!C279","v":0.86865000000000003},{"$f":"'Source Data'!D279","v":"verify time synchronization"},{"$f":"'Source Data'!E279","v":" in the time synchronization protocol"},{"$f":"'Source Data'!F279","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify time synchronization in the time synchronization protocol"}]
[{"$f":"'Source Data'!A280","v":"ami.19"},{"$f":"'Source Data'!B280","v":"m"},{"$f":"'Source Data'!C280","v":0.21009800000000001},{"$f":"'Source Data'!D280","v":"protect against replay"},{"$f":"'Source Data'!E280","v":" using session tokens"},{"$f":"'Source Data'!F280","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect against replay using session tokens"}]
[{"$f":"'Source Data'!A281","v":"ami.20"},{"$f":"'Source Data'!B281","v":"t"},{"$f":"'Source Data'!C281","v":0.66386000000000001},{"$f":"'Source Data'!D281","v":"Independent Energy Generator Causes Lower TOU Pricing"},{"$f":"'Source Data'!E281","v":0},{"$f":"'Source Data'!F281","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Independent Energy Generator Causes Lower TOU Pricing0"}]
[{"$f":"'Source Data'!A282","v":"ami.20"},{"$f":"'Source Data'!B282","v":"d"},{"$f":"'Source Data'!C282","v":0.78107700000000002},{"$f":"'Source Data'!D282","v":"An independent energy generator bribes an AMI operator to lower time-of-use (TOU) pricing to increase demand."},{"$f":"'Source Data'!E282","v":0},{"$f":"'Source Data'!F282","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An independent energy generator bribes an AMI operator to lower time-of-use (TOU) pricing to increase demand.0"}]
[{"$f":"'Source Data'!A283","v":"ami.20"},{"$f":"'Source Data'!B283","v":"v"},{"$f":"'Source Data'!C283","v":0.23446600000000001},{"$f":"'Source Data'!D283","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E283","v":" to the TOU pricing implementation."},{"$f":"'Source Data'!F283","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the TOU pricing implementation."}]
[{"$f":"'Source Data'!A284","v":"ami.20"},{"$f":"'Source Data'!B284","v":"i"},{"$f":"'Source Data'!C284","v":0.25854199999999999},{"$f":"'Source Data'!D284","v":"Utility may lose revenue due to lower prices charged customers at a large volume"},{"$f":"'Source Data'!E284","v":0},{"$f":"'Source Data'!F284","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility may lose revenue due to lower prices charged customers at a large volume0"}]
[{"$f":"'Source Data'!A285","v":"ami.20"},{"$f":"'Source Data'!B285","v":"m"},{"$f":"'Source Data'!C285","v":0.71961699999999995},{"$f":"'Source Data'!D285","v":"create audit logs"},{"$f":"'Source Data'!E285","v":" to record TOU pricing changes"},{"$f":"'Source Data'!F285","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs to record TOU pricing changes"}]
[{"$f":"'Source Data'!A286","v":"ami.20"},{"$f":"'Source Data'!B286","v":"m"},{"$f":"'Source Data'!C286","v":5.5081400000000003E-2},{"$f":"'Source Data'!D286","v":"require two-person rule"},{"$f":"'Source Data'!E286","v":" for major changes"},{"$f":"'Source Data'!F286","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require two-person rule for major changes"}]
[{"$f":"'Source Data'!A287","v":"ami.20"},{"$f":"'Source Data'!B287","v":"m"},{"$f":"'Source Data'!C287","v":3.4484300000000002E-2},{"$f":"'Source Data'!D287","v":"implement configuration management"},{"$f":"'Source Data'!E287","v":" to reduce the likelihood that one person can implement a change that impacts the entire system"},{"$f":"'Source Data'!F287","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management to reduce the likelihood that one person can implement a change that impacts the entire system"}]
[{"$f":"'Source Data'!A288","v":"ami.21"},{"$f":"'Source Data'!B288","v":"t"},{"$f":"'Source Data'!C288","v":0.53182799999999997},{"$f":"'Source Data'!D288","v":"Stolen Field Service Tools Expose AMI Infrastructure"},{"$f":"'Source Data'!E288","v":0},{"$f":"'Source Data'!F288","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Stolen Field Service Tools Expose AMI Infrastructure0"}]
[{"$f":"'Source Data'!A289","v":"ami.21"},{"$f":"'Source Data'!B289","v":"d"},{"$f":"'Source Data'!C289","v":0.92404600000000003},{"$f":"'Source Data'!D289","v":"A utility's field service laptop and optical probe are lost or stolen, exposing the software to control components of the AMI infrastructure (e.g., meters and concentrators) to any user."},{"$f":"'Source Data'!E289","v":0},{"$f":"'Source Data'!F289","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A utility's field service laptop and optical probe are lost or stolen, exposing the software to control components of the AMI infrastructure (e.g., meters and concentrators) to any user.0"}]
[{"$f":"'Source Data'!A290","v":"ami.21"},{"$f":"'Source Data'!B290","v":"v"},{"$f":"'Source Data'!C290","v":0.15546599999999999},{"$f":"'Source Data'!D290","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"},{"$f":"'Source Data'!E290","v":" to software components of the AMI infrastructure."},{"$f":"'Source Data'!F290","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals to software components of the AMI infrastructure."}]
[{"$f":"'Source Data'!A291","v":"ami.21"},{"$f":"'Source Data'!B291","v":"i"},{"$f":"'Source Data'!C291","v":2.45813E-2},{"$f":"'Source Data'!D291","v":"Potential for unexpected and perhaps intermittent power loss for a targeted customer or for a large number of customers, and associated revenue loss for a utility"},{"$f":"'Source Data'!E291","v":0},{"$f":"'Source Data'!F291","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential for unexpected and perhaps intermittent power loss for a targeted customer or for a large number of customers, and associated revenue loss for a utility0"}]
[{"$f":"'Source Data'!A292","v":"ami.21"},{"$f":"'Source Data'!B292","v":"i"},{"$f":"'Source Data'!C292","v":0.37002499999999999},{"$f":"'Source Data'!D292","v":"Impact may continue even after the laptop is retrieved if a copy of the laptop's OS and/or applications can be exfiltrated or recreated by the threat agent"},{"$f":"'Source Data'!E292","v":0},{"$f":"'Source Data'!F292","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Impact may continue even after the laptop is retrieved if a copy of the laptop's OS and/or applications can be exfiltrated or recreated by the threat agent0"}]
[{"$f":"'Source Data'!A293","v":"ami.21"},{"$f":"'Source Data'!B293","v":"m"},{"$f":"'Source Data'!C293","v":0.13845399999999999},{"$f":"'Source Data'!D293","v":"configure for least functionality"},{"$f":"'Source Data'!E293","v":" on the field service laptop"},{"$f":"'Source Data'!F293","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality on the field service laptop"}]
[{"$f":"'Source Data'!A294","v":"ami.21"},{"$f":"'Source Data'!B294","v":"m"},{"$f":"'Source Data'!C294","v":0.91591800000000001},{"$f":"'Source Data'!D294","v":"encrypt data at rest"},{"$f":"'Source Data'!E294","v":" on the field service equipment laptop"},{"$f":"'Source Data'!F294","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt data at rest on the field service equipment laptop"}]
[{"$f":"'Source Data'!A295","v":"ami.21"},{"$f":"'Source Data'!B295","v":"m"},{"$f":"'Source Data'!C295","v":0.30158299999999999},{"$f":"'Source Data'!D295","v":"track asset"},{"$f":"'Source Data'!E295","v":" (phone home) for the field service equipment laptop"},{"$f":"'Source Data'!F295","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"track asset (phone home) for the field service equipment laptop"}]
[{"$f":"'Source Data'!A296","v":"ami.21"},{"$f":"'Source Data'!B296","v":"m"},{"$f":"'Source Data'!C296","v":0.61479300000000003},{"$f":"'Source Data'!D296","v":"require credential revocation"},{"$f":"'Source Data'!E296","v":" for laptops"},{"$f":"'Source Data'!F296","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require credential revocation for laptops"}]
[{"$f":"'Source Data'!A297","v":"ami.21"},{"$f":"'Source Data'!B297","v":"m"},{"$f":"'Source Data'!C297","v":0.27671200000000001},{"$f":"'Source Data'!D297","v":"sanitize device"},{"$f":"'Source Data'!E297","v":" with remote wipe capability for lost field assets"},{"$f":"'Source Data'!F297","v":"sanitize"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"sanitize device with remote wipe capability for lost field assets"}]
[{"$f":"'Source Data'!A298","v":"ami.22"},{"$f":"'Source Data'!B298","v":"t"},{"$f":"'Source Data'!C298","v":0.19144600000000001},{"$f":"'Source Data'!D298","v":"Wireless Access to AMI Administration Causes Invalid Disconnect"},{"$f":"'Source Data'!E298","v":0},{"$f":"'Source Data'!F298","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Wireless Access to AMI Administration Causes Invalid Disconnect0"}]
[{"$f":"'Source Data'!A299","v":"ami.22"},{"$f":"'Source Data'!B299","v":"d"},{"$f":"'Source Data'!C299","v":0.51745699999999994},{"$f":"'Source Data'!D299","v":"A threat agent gains wireless access to a web-based administration page on an AMI device that controls the ability to disconnect power from the device."},{"$f":"'Source Data'!E299","v":0},{"$f":"'Source Data'!F299","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent gains wireless access to a web-based administration page on an AMI device that controls the ability to disconnect power from the device.0"}]
[{"$f":"'Source Data'!A300","v":"ami.22"},{"$f":"'Source Data'!B300","v":"v"},{"$f":"'Source Data'!C300","v":8.9903399999999994E-2},{"$f":"'Source Data'!D300","v":"system permits wireless access by unauthorized parties"},{"$f":"'Source Data'!E300","v":" to the wireless network used to control an AMI device,"},{"$f":"'Source Data'!F300","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits wireless access by unauthorized parties to the wireless network used to control an AMI device,"}]
[{"$f":"'Source Data'!A301","v":"ami.22"},{"$f":"'Source Data'!B301","v":"v"},{"$f":"'Source Data'!C301","v":0.64072799999999996},{"$f":"'Source Data'!D301","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E301","v":" to the web-based administration page used to control an AMI device."},{"$f":"'Source Data'!F301","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the web-based administration page used to control an AMI device."}]
[{"$f":"'Source Data'!A302","v":"ami.22"},{"$f":"'Source Data'!B302","v":"i"},{"$f":"'Source Data'!C302","v":0.66176800000000002},{"$f":"'Source Data'!D302","v":"Unexpected power loss for the customer"},{"$f":"'Source Data'!E302","v":0},{"$f":"'Source Data'!F302","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unexpected power loss for the customer0"}]
[{"$f":"'Source Data'!A303","v":"ami.22"},{"$f":"'Source Data'!B303","v":"m"},{"$f":"'Source Data'!C303","v":0.36515199999999998},{"$f":"'Source Data'!D303","v":"require multi-factor authentication"},{"$f":"'Source Data'!E303","v":" for privileged functionality"},{"$f":"'Source Data'!F303","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for privileged functionality"}]
[{"$f":"'Source Data'!A304","v":"ami.22"},{"$f":"'Source Data'!B304","v":"m"},{"$f":"'Source Data'!C304","v":0.87063299999999999},{"$f":"'Source Data'!D304","v":"restrict application access"},{"$f":"'Source Data'!E304","v":" to web-based administration"},{"$f":"'Source Data'!F304","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict application access to web-based administration"}]
[{"$f":"'Source Data'!A305","v":"ami.22"},{"$f":"'Source Data'!B305","v":"m"},{"$f":"'Source Data'!C305","v":0.67315000000000003},{"$f":"'Source Data'!D305","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E305","v":" to protect the wireless network"},{"$f":"'Source Data'!F305","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms to protect the wireless network"}]
[{"$f":"'Source Data'!A306","v":"ami.23"},{"$f":"'Source Data'!B306","v":"t"},{"$f":"'Source Data'!C306","v":0.226574},{"$f":"'Source Data'!D306","v":"Meter Authentication Credentials are Compromised and Posted on Internet"},{"$f":"'Source Data'!E306","v":0},{"$f":"'Source Data'!F306","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Meter Authentication Credentials are Compromised and Posted on Internet0"}]
[{"$f":"'Source Data'!A307","v":"ami.23"},{"$f":"'Source Data'!B307","v":"d"},{"$f":"'Source Data'!C307","v":0.85900100000000001},{"$f":"'Source Data'!D307","v":"A utility deploys all AMI devices with the same authentication credentials granting privileged access via the local infra-red port, and the credentials are compromised and posted on the Internet."},{"$f":"'Source Data'!E307","v":0},{"$f":"'Source Data'!F307","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A utility deploys all AMI devices with the same authentication credentials granting privileged access via the local infra-red port, and the credentials are compromised and posted on the Internet.0"}]
[{"$f":"'Source Data'!A308","v":"ami.23"},{"$f":"'Source Data'!B308","v":"v"},{"$f":"'Source Data'!C308","v":9.3696799999999997E-2},{"$f":"'Source Data'!D308","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E308","v":" to AMI devices (hardcoded passwords),"},{"$f":"'Source Data'!F308","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to AMI devices (hardcoded passwords),"}]
[{"$f":"'Source Data'!A309","v":"ami.23"},{"$f":"'Source Data'!B309","v":"v"},{"$f":"'Source Data'!C309","v":3.5321999999999999E-2},{"$f":"'Source Data'!D309","v":"shared credentials are used for access"},{"$f":"'Source Data'!E309","v":" to AMI devices."},{"$f":"'Source Data'!F309","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"shared credentials are used for access to AMI devices."}]
[{"$f":"'Source Data'!A310","v":"ami.23"},{"$f":"'Source Data'!B310","v":"i"},{"$f":"'Source Data'!C310","v":0.11279400000000001},{"$f":"'Source Data'!D310","v":"Potential for unexpected and perhaps intermittent power loss for a targeted customer or for a large number of customers, and associated revenue loss for a utility"},{"$f":"'Source Data'!E310","v":0},{"$f":"'Source Data'!F310","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential for unexpected and perhaps intermittent power loss for a targeted customer or for a large number of customers, and associated revenue loss for a utility0"}]
[{"$f":"'Source Data'!A311","v":"ami.23"},{"$f":"'Source Data'!B311","v":"m"},{"$f":"'Source Data'!C311","v":0.94925899999999996},{"$f":"'Source Data'!D311","v":"require multi-factor authentication"},{"$f":"'Source Data'!E311","v":" for privileged functionality"},{"$f":"'Source Data'!F311","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for privileged functionality"}]
[{"$f":"'Source Data'!A312","v":"ami.23"},{"$f":"'Source Data'!B312","v":"m"},{"$f":"'Source Data'!C312","v":0.16341900000000001},{"$f":"'Source Data'!D312","v":"verify absence of hardcoded credentials"},{"$f":"'Source Data'!E312","v":" on AMI equipment"},{"$f":"'Source Data'!F312","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify absence of hardcoded credentials on AMI equipment"}]
[{"$f":"'Source Data'!A313","v":"ami.23"},{"$f":"'Source Data'!B313","v":"m"},{"$f":"'Source Data'!C313","v":0.38778299999999999},{"$f":"'Source Data'!D313","v":"require password rule enforcement"},{"$f":"'Source Data'!E313","v":" including rule that limits sharing of a password by many meters"},{"$f":"'Source Data'!F313","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require password rule enforcement including rule that limits sharing of a password by many meters"}]
[{"$f":"'Source Data'!A314","v":"ami.24"},{"$f":"'Source Data'!B314","v":"t"},{"$f":"'Source Data'!C314","v":0.53527000000000002},{"$f":"'Source Data'!D314","v":"Weak Cryptography Exposes AMI Device Communication"},{"$f":"'Source Data'!E314","v":0},{"$f":"'Source Data'!F314","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Weak Cryptography Exposes AMI Device Communication0"}]
[{"$f":"'Source Data'!A315","v":"ami.24"},{"$f":"'Source Data'!B315","v":"d"},{"$f":"'Source Data'!C315","v":0.552844},{"$f":"'Source Data'!D315","v":"An AMI vendor implements weak cryptography that is easy to crack, allowing access to and modification of configuration or data on that interface."},{"$f":"'Source Data'!E315","v":0},{"$f":"'Source Data'!F315","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An AMI vendor implements weak cryptography that is easy to crack, allowing access to and modification of configuration or data on that interface.0"}]
[{"$f":"'Source Data'!A316","v":"ami.24"},{"$f":"'Source Data'!B316","v":"v"},{"$f":"'Source Data'!C316","v":0.20569000000000001},{"$f":"'Source Data'!D316","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"},{"$f":"'Source Data'!E316","v":" to control access to configuration or data in AMI implementation."},{"$f":"'Source Data'!F316","v":"Cryptographic Vulnerability (6.3.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary to control access to configuration or data in AMI implementation."}]
[{"$f":"'Source Data'!A317","v":"ami.24"},{"$f":"'Source Data'!B317","v":"i"},{"$f":"'Source Data'!C317","v":0.41965999999999998},{"$f":"'Source Data'!D317","v":"Cost to upgrade or to replace all devices, if upgrade is not feasible. This impact is expected whether or not a threat agent ever uses this vulnerability to launch an attack"},{"$f":"'Source Data'!E317","v":0},{"$f":"'Source Data'!F317","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost to upgrade or to replace all devices, if upgrade is not feasible. This impact is expected whether or not a threat agent ever uses this vulnerability to launch an attack0"}]
[{"$f":"'Source Data'!A318","v":"ami.24"},{"$f":"'Source Data'!B318","v":"i"},{"$f":"'Source Data'!C318","v":0.83692800000000001},{"$f":"'Source Data'!D318","v":"Loss of customers' private information, and associated costs"},{"$f":"'Source Data'!E318","v":0},{"$f":"'Source Data'!F318","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of customers' private information, and associated costs0"}]
[{"$f":"'Source Data'!A319","v":"ami.24"},{"$f":"'Source Data'!B319","v":"i"},{"$f":"'Source Data'!C319","v":0.20485999999999999},{"$f":"'Source Data'!D319","v":"Mass disconnect of meters potentially causing circuit breaker trips, resulting in temporary outages until power on the grid can be rebalanced"},{"$f":"'Source Data'!E319","v":0},{"$f":"'Source Data'!F319","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Mass disconnect of meters potentially causing circuit breaker trips, resulting in temporary outages until power on the grid can be rebalanced0"}]
[{"$f":"'Source Data'!A320","v":"ami.24"},{"$f":"'Source Data'!B320","v":"m"},{"$f":"'Source Data'!C320","v":0.48002299999999998},{"$f":"'Source Data'!D320","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E320","v":" "},{"$f":"'Source Data'!F320","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms "}]
[{"$f":"'Source Data'!A321","v":"ami.24"},{"$f":"'Source Data'!B321","v":"m"},{"$f":"'Source Data'!C321","v":0.17838599999999999},{"$f":"'Source Data'!D321","v":"define procedures"},{"$f":"'Source Data'!E321","v":" in configuration management policies and procedures to allow future cryptographic changes"},{"$f":"'Source Data'!F321","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define procedures in configuration management policies and procedures to allow future cryptographic changes"}]
[{"$f":"'Source Data'!A322","v":"ami.24"},{"$f":"'Source Data'!B322","v":"m"},{"$f":"'Source Data'!C322","v":0.52134400000000003},{"$f":"'Source Data'!D322","v":"define procedures"},{"$f":"'Source Data'!E322","v":" to include security, including cryptography, in the purchasing process"},{"$f":"'Source Data'!F322","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define procedures to include security, including cryptography, in the purchasing process"}]
[{"$f":"'Source Data'!A323","v":"ami.24"},{"$f":"'Source Data'!B323","v":"m"},{"$f":"'Source Data'!C323","v":0.808531},{"$f":"'Source Data'!D323","v":"perform security testing"},{"$f":"'Source Data'!E323","v":" of security controls during system acceptance testing"},{"$f":"'Source Data'!F323","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"perform security testing of security controls during system acceptance testing"}]
[{"$f":"'Source Data'!A324","v":"ami.25"},{"$f":"'Source Data'!B324","v":"t"},{"$f":"'Source Data'!C324","v":0.85010699999999995},{"$f":"'Source Data'!D324","v":"Known but Unpatched Vulnerability Exposes AMI Infrastructure"},{"$f":"'Source Data'!E324","v":0},{"$f":"'Source Data'!F324","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Known but Unpatched Vulnerability Exposes AMI Infrastructure0"}]
[{"$f":"'Source Data'!A325","v":"ami.25"},{"$f":"'Source Data'!B325","v":"d"},{"$f":"'Source Data'!C325","v":0.65243300000000004},{"$f":"'Source Data'!D325","v":"A threat agent is able to gain access to the AMI system by exploiting a known vulnerability that has not yet been patched. The threat agent is unable to access the AMI applications but can access other AMI devices and the headend system."},{"$f":"'Source Data'!E325","v":0},{"$f":"'Source Data'!F325","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent is able to gain access to the AMI system by exploiting a known vulnerability that has not yet been patched. The threat agent is unable to access the AMI applications but can access other AMI devices and the headend system.0"}]
[{"$f":"'Source Data'!A326","v":"ami.25"},{"$f":"'Source Data'!B326","v":"v"},{"$f":"'Source Data'!C326","v":0.49607699999999999},{"$f":"'Source Data'!D326","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Source Data'!E326","v":" in the AMI devices and headend system."},{"$f":"'Source Data'!F326","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"software patches are not checked regularly to ensure that they are current in the AMI devices and headend system."}]
[{"$f":"'Source Data'!A327","v":"ami.25"},{"$f":"'Source Data'!B327","v":"i"},{"$f":"'Source Data'!C327","v":0.30021100000000001},{"$f":"'Source Data'!D327","v":"Access to an AMI headend, via an unpatched firewall and operating system for example, could permit a threat agent to shut down the AMI headend"},{"$f":"'Source Data'!E327","v":0},{"$f":"'Source Data'!F327","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Access to an AMI headend, via an unpatched firewall and operating system for example, could permit a threat agent to shut down the AMI headend0"}]
[{"$f":"'Source Data'!A328","v":"ami.25"},{"$f":"'Source Data'!B328","v":"i"},{"$f":"'Source Data'!C328","v":0.43221700000000002},{"$f":"'Source Data'!D328","v":"Outages caused by an AMI headend shut down due to the utility's inability to implement DR at peak times"},{"$f":"'Source Data'!E328","v":0},{"$f":"'Source Data'!F328","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Outages caused by an AMI headend shut down due to the utility's inability to implement DR at peak times0"}]
[{"$f":"'Source Data'!A329","v":"ami.25"},{"$f":"'Source Data'!B329","v":"i"},{"$f":"'Source Data'!C329","v":0.29934500000000003},{"$f":"'Source Data'!D329","v":"Customer service and troubleshooting costs"},{"$f":"'Source Data'!E329","v":0},{"$f":"'Source Data'!F329","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Customer service and troubleshooting costs0"}]
[{"$f":"'Source Data'!A330","v":"ami.25"},{"$f":"'Source Data'!B330","v":"m"},{"$f":"'Source Data'!C330","v":0.77609799999999995},{"$f":"'Source Data'!D330","v":"maintain patches"},{"$f":"'Source Data'!E330","v":" including a severity rating (e.g., critical, important, moderate, low) and timeframes for patching vulnerabilities based on severity"},{"$f":"'Source Data'!F330","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches including a severity rating (e.g., critical, important, moderate, low) and timeframes for patching vulnerabilities based on severity"}]
[{"$f":"'Source Data'!A331","v":"ami.25"},{"$f":"'Source Data'!B331","v":"m"},{"$f":"'Source Data'!C331","v":0.81473700000000004},{"$f":"'Source Data'!D331","v":"detect unauthorized access"},{"$f":"'Source Data'!E331","v":" in network traffic to the AMI headend servers"},{"$f":"'Source Data'!F331","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access in network traffic to the AMI headend servers"}]
[{"$f":"'Source Data'!A332","v":"ami.25"},{"$f":"'Source Data'!B332","v":"m"},{"$f":"'Source Data'!C332","v":0.40562100000000001},{"$f":"'Source Data'!D332","v":"generate alarms"},{"$f":"'Source Data'!E332","v":" for unauthorized access to the AMI headend servers"},{"$f":"'Source Data'!F332","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for unauthorized access to the AMI headend servers"}]
[{"$f":"'Source Data'!A333","v":"ami.25"},{"$f":"'Source Data'!B333","v":"m"},{"$f":"'Source Data'!C333","v":0.69915499999999997},{"$f":"'Source Data'!D333","v":"restrict network access"},{"$f":"'Source Data'!E333","v":" to the AMI headend servers"},{"$f":"'Source Data'!F333","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the AMI headend servers"}]
[{"$f":"'Source Data'!A334","v":"ami.25"},{"$f":"'Source Data'!B334","v":"m"},{"$f":"'Source Data'!C334","v":0.24357599999999999},{"$f":"'Source Data'!D334","v":"define procedures"},{"$f":"'Source Data'!E334","v":" for equipment purchase, to ensure timely availability of validated security updates from vendor"},{"$f":"'Source Data'!F334","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define procedures for equipment purchase, to ensure timely availability of validated security updates from vendor"}]
[{"$f":"'Source Data'!A335","v":"ami.25"},{"$f":"'Source Data'!B335","v":"m"},{"$f":"'Source Data'!C335","v":0.27601700000000001},{"$f":"'Source Data'!D335","v":"perform security testing"},{"$f":"'Source Data'!E335","v":" to validate that the system as purchased is current with respect to security updates"},{"$f":"'Source Data'!F335","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"perform security testing to validate that the system as purchased is current with respect to security updates"}]
[{"$f":"'Source Data'!A336","v":"ami.26"},{"$f":"'Source Data'!B336","v":"t"},{"$f":"'Source Data'!C336","v":0.56832400000000005},{"$f":"'Source Data'!D336","v":"AMI Billing Cards are Compromised Incurring Loss of Revenu"},{"$f":"'Source Data'!E336","v":0},{"$f":"'Source Data'!F336","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"AMI Billing Cards are Compromised Incurring Loss of Revenu0"}]
[{"$f":"'Source Data'!A337","v":"ami.26"},{"$f":"'Source Data'!B337","v":"d"},{"$f":"'Source Data'!C337","v":0.57926299999999997},{"$f":"'Source Data'!D337","v":"The smart cards or magnetic cards for AMI billing are compromised. Example compromises include tampering with cards to change the credit amount, erasing the logic that decrements the credit amount remaining, or forging cards."},{"$f":"'Source Data'!E337","v":0},{"$f":"'Source Data'!F337","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The smart cards or magnetic cards for AMI billing are compromised. Example compromises include tampering with cards to change the credit amount, erasing the logic that decrements the credit amount remaining, or forging cards.0"}]
[{"$f":"'Source Data'!A338","v":"ami.26"},{"$f":"'Source Data'!B338","v":"v"},{"$f":"'Source Data'!C338","v":4.0056500000000002E-2},{"$f":"'Source Data'!D338","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Source Data'!E338","v":" on smartcards inserted into a meter,"},{"$f":"'Source Data'!F338","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system assumes data inputs and resulting calculations are accurate on smartcards inserted into a meter,"}]
[{"$f":"'Source Data'!A339","v":"ami.26"},{"$f":"'Source Data'!B339","v":"v"},{"$f":"'Source Data'!C339","v":0.14785999999999999},{"$f":"'Source Data'!D339","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E339","v":" to AMI billing information on smartcards."},{"$f":"'Source Data'!F339","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to AMI billing information on smartcards."}]
[{"$f":"'Source Data'!A340","v":"ami.26"},{"$f":"'Source Data'!B340","v":"i"},{"$f":"'Source Data'!C340","v":0.376384},{"$f":"'Source Data'!D340","v":"Loss of revenue"},{"$f":"'Source Data'!E340","v":0},{"$f":"'Source Data'!F340","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of revenue0"}]
[{"$f":"'Source Data'!A341","v":"ami.26"},{"$f":"'Source Data'!B341","v":"m"},{"$f":"'Source Data'!C341","v":0.64942500000000003},{"$f":"'Source Data'!D341","v":"design for security"},{"$f":"'Source Data'!E341","v":" in the payment system"},{"$f":"'Source Data'!F341","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design for security in the payment system"}]
[{"$f":"'Source Data'!A342","v":"ami.26"},{"$f":"'Source Data'!B342","v":"m"},{"$f":"'Source Data'!C342","v":0.82584900000000006},{"$f":"'Source Data'!D342","v":"check software file integrity"},{"$f":"'Source Data'!E342","v":" (digital signatures or keyed hashes) of card contents"},{"$f":"'Source Data'!F342","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity (digital signatures or keyed hashes) of card contents"}]
[{"$f":"'Source Data'!A343","v":"ami.26"},{"$f":"'Source Data'!B343","v":"m"},{"$f":"'Source Data'!C343","v":0.85145400000000004},{"$f":"'Source Data'!D343","v":"perform security testing"},{"$f":"'Source Data'!E343","v":" as part of system acceptance testing"},{"$f":"'Source Data'!F343","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"perform security testing as part of system acceptance testing"}]
[{"$f":"'Source Data'!A344","v":"ami.26"},{"$f":"'Source Data'!B344","v":"m"},{"$f":"'Source Data'!C344","v":8.0446699999999996E-2},{"$f":"'Source Data'!D344","v":"authenticate data source"},{"$f":"'Source Data'!E344","v":" i.e., smart cards or magnetic cards for AMI billing"},{"$f":"'Source Data'!F344","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate data source i.e., smart cards or magnetic cards for AMI billing"}]
[{"$f":"'Source Data'!A345","v":"ami.27"},{"$f":"'Source Data'!B345","v":"t"},{"$f":"'Source Data'!C345","v":0.12592500000000001},{"$f":"'Source Data'!D345","v":"Reverse Engineering of AMI Equipment Allows Unauthorized Mass Control"},{"$f":"'Source Data'!E345","v":0},{"$f":"'Source Data'!F345","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Reverse Engineering of AMI Equipment Allows Unauthorized Mass Control0"}]
[{"$f":"'Source Data'!A346","v":"ami.27"},{"$f":"'Source Data'!B346","v":"d"},{"$f":"'Source Data'!C346","v":0.99457499999999999},{"$f":"'Source Data'!D346","v":"A threat agent is able to reverse engineer AMI equipment (meters and concentrators) to determine how to remotely control them. This allows the threat agent to control many devices simultaneously, and, for example, to perform a simultaneous mass disconnect, send DR messages that cause consumption of electricity to go up dramatically, or cause devices to send out last gasp or self-test failed messages."},{"$f":"'Source Data'!E346","v":0},{"$f":"'Source Data'!F346","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent is able to reverse engineer AMI equipment (meters and concentrators) to determine how to remotely control them. This allows the threat agent to control many devices simultaneously, and, for example, to perform a simultaneous mass disconnect, send DR messages that cause consumption of electricity to go up dramatically, or cause devices to send out last gasp or self-test failed messages.0"}]
[{"$f":"'Source Data'!A347","v":"ami.27"},{"$f":"'Source Data'!B347","v":"v"},{"$f":"'Source Data'!C347","v":0.43951200000000001},{"$f":"'Source Data'!D347","v":"design permits unnecessary privileges"},{"$f":"'Source Data'!E347","v":" such as unprotected interfaces used for development, testing, monitoring or maintenance purposes that remain in production equipment."},{"$f":"'Source Data'!F347","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design permits unnecessary privileges such as unprotected interfaces used for development, testing, monitoring or maintenance purposes that remain in production equipment."}]
[{"$f":"'Source Data'!A348","v":"ami.27"},{"$f":"'Source Data'!B348","v":"v"},{"$f":"'Source Data'!C348","v":0.67397899999999999},{"$f":"'Source Data'!D348","v":"back doors for access are left in place"},{"$f":"'Source Data'!E348","v":" for AMI equipment."},{"$f":"'Source Data'!F348","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"back doors for access are left in place for AMI equipment."}]
[{"$f":"'Source Data'!A349","v":"ami.27"},{"$f":"'Source Data'!B349","v":"i"},{"$f":"'Source Data'!C349","v":0.93252000000000002},{"$f":"'Source Data'!D349","v":"When demand can be manipulated quickly by a threat agent, there is the potential for outages while operators adjust generation to demand"},{"$f":"'Source Data'!E349","v":0},{"$f":"'Source Data'!F349","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"When demand can be manipulated quickly by a threat agent, there is the potential for outages while operators adjust generation to demand0"}]
[{"$f":"'Source Data'!A350","v":"ami.27"},{"$f":"'Source Data'!B350","v":"i"},{"$f":"'Source Data'!C350","v":0.65213699999999997},{"$f":"'Source Data'!D350","v":"Faked failure messages cause the utility to assume the cost of investigation and deploying technicians to resolve issues, as well as cost of their inability to address real problem meters due to the false event \"noise.\""},{"$f":"'Source Data'!E350","v":0},{"$f":"'Source Data'!F350","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Faked failure messages cause the utility to assume the cost of investigation and deploying technicians to resolve issues, as well as cost of their inability to address real problem meters due to the false event \"noise.\"0"}]
[{"$f":"'Source Data'!A351","v":"ami.27"},{"$f":"'Source Data'!B351","v":"m"},{"$f":"'Source Data'!C351","v":0.70721800000000001},{"$f":"'Source Data'!D351","v":"design for security"},{"$f":"'Source Data'!E351","v":" to identify and remove unsecure development features and \"nonstandard\" interfaces from production devices"},{"$f":"'Source Data'!F351","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design for security to identify and remove unsecure development features and \"nonstandard\" interfaces from production devices"}]
[{"$f":"'Source Data'!A352","v":"ami.27"},{"$f":"'Source Data'!B352","v":"m"},{"$f":"'Source Data'!C352","v":0.74170199999999997},{"$f":"'Source Data'!D352","v":"design for security"},{"$f":"'Source Data'!E352","v":" in equipment such that knowledge alone should not allow a threat agent to access a device without knowledge of keys and other credentials in equipment design"},{"$f":"'Source Data'!F352","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design for security in equipment such that knowledge alone should not allow a threat agent to access a device without knowledge of keys and other credentials in equipment design"}]
[{"$f":"'Source Data'!A353","v":"ami.27"},{"$f":"'Source Data'!B353","v":"m"},{"$f":"'Source Data'!C353","v":0.27353},{"$f":"'Source Data'!D353","v":"configure for least functionality"},{"$f":"'Source Data'!E353","v":" by removing unnecessary interfaces and labeling from production devices"},{"$f":"'Source Data'!F353","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by removing unnecessary interfaces and labeling from production devices"}]
[{"$f":"'Source Data'!A354","v":"ami.28"},{"$f":"'Source Data'!B354","v":"t"},{"$f":"'Source Data'!C354","v":0.197576},{"$f":"'Source Data'!D354","v":"Failed Patching Causes AMI Devices to Stop Operating"},{"$f":"'Source Data'!E354","v":0},{"$f":"'Source Data'!F354","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Failed Patching Causes AMI Devices to Stop Operating0"}]
[{"$f":"'Source Data'!A355","v":"ami.28"},{"$f":"'Source Data'!B355","v":"d"},{"$f":"'Source Data'!C355","v":0.35304200000000002},{"$f":"'Source Data'!D355","v":"A utility attempts to patch the AMI devices, but fails. Many AMI devices are no longer able to operate due to the failed patching process."},{"$f":"'Source Data'!E355","v":0},{"$f":"'Source Data'!F355","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A utility attempts to patch the AMI devices, but fails. Many AMI devices are no longer able to operate due to the failed patching process.0"}]
[{"$f":"'Source Data'!A356","v":"ami.28"},{"$f":"'Source Data'!B356","v":"v"},{"$f":"'Source Data'!C356","v":0.37762400000000002},{"$f":"'Source Data'!D356","v":"software patches may be applied without verifying continued system operation"},{"$f":"'Source Data'!E356","v":" in the realistic environment of a large footprint operation."},{"$f":"'Source Data'!F356","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"software patches may be applied without verifying continued system operation in the realistic environment of a large footprint operation."}]
[{"$f":"'Source Data'!A357","v":"ami.28"},{"$f":"'Source Data'!B357","v":"i"},{"$f":"'Source Data'!C357","v":0.74764900000000001},{"$f":"'Source Data'!D357","v":"Cost to utility to repair or replace devices"},{"$f":"'Source Data'!E357","v":0},{"$f":"'Source Data'!F357","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost to utility to repair or replace devices0"}]
[{"$f":"'Source Data'!A358","v":"ami.28"},{"$f":"'Source Data'!B358","v":"i"},{"$f":"'Source Data'!C358","v":0.88610199999999995},{"$f":"'Source Data'!D358","v":"Lack of capability to invoice customers, causing temporary financial loss"},{"$f":"'Source Data'!E358","v":0},{"$f":"'Source Data'!F358","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Lack of capability to invoice customers, causing temporary financial loss0"}]
[{"$f":"'Source Data'!A359","v":"ami.28"},{"$f":"'Source Data'!B359","v":"i"},{"$f":"'Source Data'!C359","v":0.80202099999999998},{"$f":"'Source Data'!D359","v":"Loss of capability to perform DR, which may cause outages during periods of peak use"},{"$f":"'Source Data'!E359","v":0},{"$f":"'Source Data'!F359","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of capability to perform DR, which may cause outages during periods of peak use0"}]
[{"$f":"'Source Data'!A360","v":"ami.28"},{"$f":"'Source Data'!B360","v":"i"},{"$f":"'Source Data'!C360","v":0.103603},{"$f":"'Source Data'!D360","v":"Cost of handling customer service situation"},{"$f":"'Source Data'!E360","v":0},{"$f":"'Source Data'!F360","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of handling customer service situation0"}]
[{"$f":"'Source Data'!A361","v":"ami.28"},{"$f":"'Source Data'!B361","v":"m"},{"$f":"'Source Data'!C361","v":0.71839600000000003},{"$f":"'Source Data'!D361","v":"require fail-safe rollback"},{"$f":"'Source Data'!E361","v":" for the patching process"},{"$f":"'Source Data'!F361","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require fail-safe rollback for the patching process"}]
[{"$f":"'Source Data'!A362","v":"ami.28"},{"$f":"'Source Data'!B362","v":"m"},{"$f":"'Source Data'!C362","v":0.99510900000000002},{"$f":"'Source Data'!D362","v":"test before installation"},{"$f":"'Source Data'!E362","v":" to troubleshoot problems by testing a (non-production) set of meters prior to applying patches to production units"},{"$f":"'Source Data'!F362","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test before installation to troubleshoot problems by testing a (non-production) set of meters prior to applying patches to production units"}]
[{"$f":"'Source Data'!A363","v":"ami.29"},{"$f":"'Source Data'!B363","v":"t"},{"$f":"'Source Data'!C363","v":0.186555},{"$f":"'Source Data'!D363","v":"Unauthorized Device Acquires HAN Access and Steals Private Information"},{"$f":"'Source Data'!E363","v":0},{"$f":"'Source Data'!F363","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unauthorized Device Acquires HAN Access and Steals Private Information0"}]
[{"$f":"'Source Data'!A364","v":"ami.29"},{"$f":"'Source Data'!B364","v":"d"},{"$f":"'Source Data'!C364","v":0.70401100000000005},{"$f":"'Source Data'!D364","v":"An unauthorized device gains access to the HAN and uses the web interface to obtain private information. Examples of such information are patterns of energy usage and the presence of medical devices."},{"$f":"'Source Data'!E364","v":0},{"$f":"'Source Data'!F364","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An unauthorized device gains access to the HAN and uses the web interface to obtain private information. Examples of such information are patterns of energy usage and the presence of medical devices.0"}]
[{"$f":"'Source Data'!A365","v":"ami.29"},{"$f":"'Source Data'!B365","v":"v"},{"$f":"'Source Data'!C365","v":0.79391500000000004},{"$f":"'Source Data'!D365","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E365","v":" to the HAN."},{"$f":"'Source Data'!F365","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the HAN."}]
[{"$f":"'Source Data'!A366","v":"ami.29"},{"$f":"'Source Data'!B366","v":"i"},{"$f":"'Source Data'!C366","v":0.434643},{"$f":"'Source Data'!D366","v":"Privacy violations for customers"},{"$f":"'Source Data'!E366","v":0},{"$f":"'Source Data'!F366","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Privacy violations for customers0"}]
[{"$f":"'Source Data'!A367","v":"ami.29"},{"$f":"'Source Data'!B367","v":"i"},{"$f":"'Source Data'!C367","v":9.6410499999999996E-2},{"$f":"'Source Data'!D367","v":"Loss of public confidence in AMI, even if the utility is not held legally responsible for the privacy violations"},{"$f":"'Source Data'!E367","v":0},{"$f":"'Source Data'!F367","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of public confidence in AMI, even if the utility is not held legally responsible for the privacy violations0"}]
[{"$f":"'Source Data'!A368","v":"ami.29"},{"$f":"'Source Data'!B368","v":"i"},{"$f":"'Source Data'!C368","v":0.46156199999999997},{"$f":"'Source Data'!D368","v":"Costs of privacy breach notification if required of the utility"},{"$f":"'Source Data'!E368","v":0},{"$f":"'Source Data'!F368","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Costs of privacy breach notification if required of the utility0"}]
[{"$f":"'Source Data'!A369","v":"ami.29"},{"$f":"'Source Data'!B369","v":"m"},{"$f":"'Source Data'!C369","v":0.33219500000000002},{"$f":"'Source Data'!D369","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E369","v":" for protection of the HAN"},{"$f":"'Source Data'!F369","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms for protection of the HAN"}]
[{"$f":"'Source Data'!A370","v":"ami.29"},{"$f":"'Source Data'!B370","v":"m"},{"$f":"'Source Data'!C370","v":0.55876899999999996},{"$f":"'Source Data'!D370","v":"minimize private information"},{"$f":"'Source Data'!E370","v":" in HAN systems and devices"},{"$f":"'Source Data'!F370","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"minimize private information in HAN systems and devices"}]
[{"$f":"'Source Data'!A371","v":"ami.29"},{"$f":"'Source Data'!B371","v":"m"},{"$f":"'Source Data'!C371","v":4.0978399999999998E-2},{"$f":"'Source Data'!D371","v":"require multi-factor authentication"},{"$f":"'Source Data'!E371","v":" for access to the HAN"},{"$f":"'Source Data'!F371","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for access to the HAN"}]
[{"$f":"'Source Data'!A372","v":"ami.30"},{"$f":"'Source Data'!B372","v":"t"},{"$f":"'Source Data'!C372","v":0.417771},{"$f":"'Source Data'!D372","v":"Threat Agent Performs Unauthorized Firmware Alteration"},{"$f":"'Source Data'!E372","v":0},{"$f":"'Source Data'!F372","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat Agent Performs Unauthorized Firmware Alteration0"}]
[{"$f":"'Source Data'!A373","v":"ami.30"},{"$f":"'Source Data'!B373","v":"d"},{"$f":"'Source Data'!C373","v":0.51146800000000003},{"$f":"'Source Data'!D373","v":"A threat agent installs rogue firmware on multiple smart meters, bypassing any protection mechanism (e.g., checksums, signatures) and fully controlling smart meter behavior. This might be achieved via direct access to meters, via interception/modification of legitimate meter updates or via access to the headend."},{"$f":"'Source Data'!E373","v":0},{"$f":"'Source Data'!F373","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent installs rogue firmware on multiple smart meters, bypassing any protection mechanism (e.g., checksums, signatures) and fully controlling smart meter behavior. This might be achieved via direct access to meters, via interception/modification of legitimate meter updates or via access to the headend.0"}]
[{"$f":"'Source Data'!A374","v":"ami.30"},{"$f":"'Source Data'!B374","v":"v"},{"$f":"'Source Data'!C374","v":0.54679},{"$f":"'Source Data'!D374","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E374","v":" to install firmware on the meter,"},{"$f":"'Source Data'!F374","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to install firmware on the meter,"}]
[{"$f":"'Source Data'!A375","v":"ami.30"},{"$f":"'Source Data'!B375","v":"v"},{"$f":"'Source Data'!C375","v":0.65958300000000003},{"$f":"'Source Data'!D375","v":"system permits installation of malware"},{"$f":"'Source Data'!E375","v":" on a meter."},{"$f":"'Source Data'!F375","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware on a meter."}]
[{"$f":"'Source Data'!A376","v":"ami.30"},{"$f":"'Source Data'!B376","v":"i"},{"$f":"'Source Data'!C376","v":0.60884199999999999},{"$f":"'Source Data'!D376","v":"Continuous loss of revenue for utility if modified firmware understates usage (impact scales as more meters are affected)"},{"$f":"'Source Data'!E376","v":0},{"$f":"'Source Data'!F376","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Continuous loss of revenue for utility if modified firmware understates usage (impact scales as more meters are affected)0"}]
[{"$f":"'Source Data'!A377","v":"ami.30"},{"$f":"'Source Data'!B377","v":"i"},{"$f":"'Source Data'!C377","v":0.77226099999999998},{"$f":"'Source Data'!D377","v":"Truck rolls needed to investigate compromised meter failure or nonresponsive meters"},{"$f":"'Source Data'!E377","v":0},{"$f":"'Source Data'!F377","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Truck rolls needed to investigate compromised meter failure or nonresponsive meters0"}]
[{"$f":"'Source Data'!A378","v":"ami.30"},{"$f":"'Source Data'!B378","v":"m"},{"$f":"'Source Data'!C378","v":0.307531},{"$f":"'Source Data'!D378","v":"detect unusual patterns"},{"$f":"'Source Data'!E378","v":" of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient)"},{"$f":"'Source Data'!F378","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient)"}]
[{"$f":"'Source Data'!A379","v":"ami.30"},{"$f":"'Source Data'!B379","v":"m"},{"$f":"'Source Data'!C379","v":0.860375},{"$f":"'Source Data'!D379","v":"require multi-factor authentication"},{"$f":"'Source Data'!E379","v":" for firmware updates"},{"$f":"'Source Data'!F379","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for firmware updates"}]
[{"$f":"'Source Data'!A380","v":"ami.30"},{"$f":"'Source Data'!B380","v":"m"},{"$f":"'Source Data'!C380","v":6.6064999999999999E-2},{"$f":"'Source Data'!D380","v":"check software file integrity"},{"$f":"'Source Data'!E380","v":" (using digital signatures or keyed hash) on code files to validate firmware updates before installation"},{"$f":"'Source Data'!F380","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity (using digital signatures or keyed hash) on code files to validate firmware updates before installation"}]
[{"$f":"'Source Data'!A381","v":"ami.30"},{"$f":"'Source Data'!B381","v":"m"},{"$f":"'Source Data'!C381","v":0.75114899999999996},{"$f":"'Source Data'!D381","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E381","v":" to limit privileges to install firmware"},{"$f":"'Source Data'!F381","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privileges to install firmware"}]
[{"$f":"'Source Data'!A382","v":"ami.31"},{"$f":"'Source Data'!B382","v":"t"},{"$f":"'Source Data'!C382","v":0.48572500000000002},{"$f":"'Source Data'!D382","v":"Rogue Firmware Enables Unauthorized Mass Remote Disconnect"},{"$f":"'Source Data'!E382","v":0},{"$f":"'Source Data'!F382","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Rogue Firmware Enables Unauthorized Mass Remote Disconnect0"}]
[{"$f":"'Source Data'!A383","v":"ami.31"},{"$f":"'Source Data'!B383","v":"d"},{"$f":"'Source Data'!C383","v":0.322654},{"$f":"'Source Data'!D383","v":"A threat agent prepares smart meter firmware containing malware and manually installs it on a target smart meter in each neighborhood.  The single insertion point in each neighborhood becomes the bot master for a smart meter based botnet. The bot master acquires the IP address for the neighborhood's headend at the utility and spoofs that address. As other smart meters attempt to connect to the headend, the bot master sends a firmware update command to the smart meters and transmits the malicious firmware to each victim. Individual bots propagate the malicious firmware throughout the neighborhood and use them to achieve a mass remote disconnect scheduled at the same time."},{"$f":"'Source Data'!E383","v":0},{"$f":"'Source Data'!F383","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent prepares smart meter firmware containing malware and manually installs it on a target smart meter in each neighborhood.  The single insertion point in each neighborhood becomes the bot master for a smart meter based botnet. The bot master acquires the IP address for the neighborhood's headend at the utility and spoofs that address. As other smart meters attempt to connect to the headend, the bot master sends a firmware update command to the smart meters and transmits the malicious firmware to each victim. Individual bots propagate the malicious firmware throughout the neighborhood and use them to achieve a mass remote disconnect scheduled at the same time.0"}]
[{"$f":"'Source Data'!A384","v":"ami.31"},{"$f":"'Source Data'!B384","v":"v"},{"$f":"'Source Data'!C384","v":0.52751300000000001},{"$f":"'Source Data'!D384","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E384","v":" to communicate to the meter with the privileges of the headend, such as updating meter firmware,"},{"$f":"'Source Data'!F384","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to communicate to the meter with the privileges of the headend, such as updating meter firmware,"}]
[{"$f":"'Source Data'!A385","v":"ami.31"},{"$f":"'Source Data'!B385","v":"v"},{"$f":"'Source Data'!C385","v":7.5368099999999997E-3},{"$f":"'Source Data'!D385","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Source Data'!E385","v":" such as the propagation of unauthorized firmware to meters by a compromised headend system"},{"$f":"'Source Data'!F385","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized installation of software or firmware such as the propagation of unauthorized firmware to meters by a compromised headend system"}]
[{"$f":"'Source Data'!A386","v":"ami.31"},{"$f":"'Source Data'!B386","v":"i"},{"$f":"'Source Data'!C386","v":0.70726599999999995},{"$f":"'Source Data'!D386","v":"A small number of disconnects could subvert the smart grid deployment and make the utility lose consumer confidence"},{"$f":"'Source Data'!E386","v":0},{"$f":"'Source Data'!F386","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A small number of disconnects could subvert the smart grid deployment and make the utility lose consumer confidence0"}]
[{"$f":"'Source Data'!A387","v":"ami.31"},{"$f":"'Source Data'!B387","v":"m"},{"$f":"'Source Data'!C387","v":0.51579699999999995},{"$f":"'Source Data'!D387","v":"detect anomalous commands"},{"$f":"'Source Data'!E387","v":" (disconnect and reconnect commands) on the network not stemming from the normal Customer Information System (CIS) system"},{"$f":"'Source Data'!F387","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect anomalous commands (disconnect and reconnect commands) on the network not stemming from the normal Customer Information System (CIS) system"}]
[{"$f":"'Source Data'!A388","v":"ami.31"},{"$f":"'Source Data'!B388","v":"m"},{"$f":"'Source Data'!C388","v":0.36590499999999998},{"$f":"'Source Data'!D388","v":"require multi-factor authentication"},{"$f":"'Source Data'!E388","v":" for firmware updates"},{"$f":"'Source Data'!F388","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for firmware updates"}]
[{"$f":"'Source Data'!A389","v":"ami.31"},{"$f":"'Source Data'!B389","v":"m"},{"$f":"'Source Data'!C389","v":1.83374E-2},{"$f":"'Source Data'!D389","v":"check software file integrity"},{"$f":"'Source Data'!E389","v":" (digital signature or keyed hash) on code files to validate firmware updates before installation"},{"$f":"'Source Data'!F389","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity (digital signature or keyed hash) on code files to validate firmware updates before installation"}]
[{"$f":"'Source Data'!A390","v":"ami.32"},{"$f":"'Source Data'!B390","v":"t"},{"$f":"'Source Data'!C390","v":0.24684200000000001},{"$f":"'Source Data'!D390","v":"Power Stolen by Reconfiguring Meter via Optical Port"},{"$f":"'Source Data'!E390","v":0},{"$f":"'Source Data'!F390","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Power Stolen by Reconfiguring Meter via Optical Port0"}]
[{"$f":"'Source Data'!A391","v":"ami.32"},{"$f":"'Source Data'!B391","v":"d"},{"$f":"'Source Data'!C391","v":0.54618599999999995},{"$f":"'Source Data'!D391","v":"Many smart meters provide the capability of re-calibrating the settings via an optical port, which is then misused by economic thieves who offer to alter the meters for a fee, changing the settings for recording power consumption and often cutting utility bills by 50-75%. This requires collusion between a knowledgeable criminal and an electric customer, and will spread because of the ease of intrusion and the economic benefit to both parties."},{"$f":"'Source Data'!E391","v":0},{"$f":"'Source Data'!F391","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Many smart meters provide the capability of re-calibrating the settings via an optical port, which is then misused by economic thieves who offer to alter the meters for a fee, changing the settings for recording power consumption and often cutting utility bills by 50-75%. This requires collusion between a knowledgeable criminal and an electric customer, and will spread because of the ease of intrusion and the economic benefit to both parties.0"}]
[{"$f":"'Source Data'!A392","v":"ami.32"},{"$f":"'Source Data'!B392","v":"v"},{"$f":"'Source Data'!C392","v":0.32228499999999999},{"$f":"'Source Data'!D392","v":"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data"},{"$f":"'Source Data'!E392","v":" in particular, procedures and equipment for modifying meter configurations,"},{"$f":"'Source Data'!F392","v":"Insufficient Identity Validation or Background Checks (6.2.2.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data in particular, procedures and equipment for modifying meter configurations,"}]
[{"$f":"'Source Data'!A393","v":"ami.32"},{"$f":"'Source Data'!B393","v":"v"},{"$f":"'Source Data'!C393","v":0.137021},{"$f":"'Source Data'!D393","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E393","v":" to the meter optical port, which in many cases allows reconfiguration of the meter settings (the optical port password may be found unencrypted on the meter or in field equipment that accesses the meter),"},{"$f":"'Source Data'!F393","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the meter optical port, which in many cases allows reconfiguration of the meter settings (the optical port password may be found unencrypted on the meter or in field equipment that accesses the meter),"}]
[{"$f":"'Source Data'!A394","v":"ami.32"},{"$f":"'Source Data'!B394","v":"v"},{"$f":"'Source Data'!C394","v":0.54264299999999999},{"$f":"'Source Data'!D394","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E394","v":" to the configuration that determines how power consumption is recorded,"},{"$f":"'Source Data'!F394","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the configuration that determines how power consumption is recorded,"}]
[{"$f":"'Source Data'!A395","v":"ami.32"},{"$f":"'Source Data'!B395","v":"v"},{"$f":"'Source Data'!C395","v":0.24179800000000001},{"$f":"'Source Data'!D395","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E395","v":" (via password) to field tool or third party installations of software that can reconfigure meters."},{"$f":"'Source Data'!F395","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access (via password) to field tool or third party installations of software that can reconfigure meters."}]
[{"$f":"'Source Data'!A396","v":"ami.32"},{"$f":"'Source Data'!B396","v":"i"},{"$f":"'Source Data'!C396","v":0.48537400000000003},{"$f":"'Source Data'!D396","v":"The utility experiences a loss of revenue due to under billing"},{"$f":"'Source Data'!E396","v":0},{"$f":"'Source Data'!F396","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility experiences a loss of revenue due to under billing0"}]
[{"$f":"'Source Data'!A397","v":"ami.32"},{"$f":"'Source Data'!B397","v":"m"},{"$f":"'Source Data'!C397","v":0.76139100000000004},{"$f":"'Source Data'!D397","v":"require password rule enforcement"},{"$f":"'Source Data'!E397","v":" (not the same password for all meters),"},{"$f":"'Source Data'!F397","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require password rule enforcement (not the same password for all meters),"}]
[{"$f":"'Source Data'!A398","v":"ami.32"},{"$f":"'Source Data'!B398","v":"m"},{"$f":"'Source Data'!C398","v":0.90897700000000003},{"$f":"'Source Data'!D398","v":"detect unusual patterns"},{"$f":"'Source Data'!E398","v":" of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient),"},{"$f":"'Source Data'!F398","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient),"}]
[{"$f":"'Source Data'!A399","v":"ami.32"},{"$f":"'Source Data'!B399","v":"m"},{"$f":"'Source Data'!C399","v":0.94903400000000004},{"$f":"'Source Data'!D399","v":"detect unauthorized configuration changes"},{"$f":"'Source Data'!E399","v":" on the meter."},{"$f":"'Source Data'!F399","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized configuration changes on the meter."}]
[{"$f":"'Source Data'!A400","v":"ami.32"},{"$f":"'Source Data'!B400","v":"m"},{"$f":"'Source Data'!C400","v":1.7953199999999999E-2},{"$f":"'Source Data'!D400","v":"verify personnel"},{"$f":"'Source Data'!E400","v":" with extensive background checks on utility employeees and contract maintenance personnel, especially those that directly interact with field devices,"},{"$f":"'Source Data'!F400","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify personnel with extensive background checks on utility employeees and contract maintenance personnel, especially those that directly interact with field devices,"}]
[{"$f":"'Source Data'!A401","v":"ami.32"},{"$f":"'Source Data'!B401","v":"m"},{"$f":"'Source Data'!C401","v":3.9877300000000001E-3},{"$f":"'Source Data'!D401","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E401","v":" to limit privilege to change meter settings that determine how power consumption is recorded,"},{"$f":"'Source Data'!F401","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privilege to change meter settings that determine how power consumption is recorded,"}]
[{"$f":"'Source Data'!A402","v":"ami.32"},{"$f":"'Source Data'!B402","v":"m"},{"$f":"'Source Data'!C402","v":0.108041},{"$f":"'Source Data'!D402","v":"protect credentials"},{"$f":"'Source Data'!E402","v":" to meter optical port, within administrative processes, on meter and in field equipment"},{"$f":"'Source Data'!F402","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials to meter optical port, within administrative processes, on meter and in field equipment"}]
[{"$f":"'Source Data'!A403","v":"der.1"},{"$f":"'Source Data'!B403","v":"t"},{"$f":"'Source Data'!C403","v":9.6893900000000005E-2},{"$f":"'Source Data'!D403","v":"Inadequate Access Control of DER Systems Causes Electrocution"},{"$f":"'Source Data'!E403","v":0},{"$f":"'Source Data'!F403","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inadequate Access Control of DER Systems Causes Electrocution0"}]
[{"$f":"'Source Data'!A404","v":"der.1"},{"$f":"'Source Data'!B404","v":"d"},{"$f":"'Source Data'!C404","v":0.47327799999999998},{"$f":"'Source Data'!D404","v":"The DER owner fails to change the default password or not set a password for the DER system user interface. A threat agent (inept installer, hacker, or industrial spy) gets access through the user interface and changes the DER settings so that it does not trip off upon low voltage (anti-islanding protection), but continues to provide power during a power system fault."},{"$f":"'Source Data'!E404","v":0},{"$f":"'Source Data'!F404","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The DER owner fails to change the default password or not set a password for the DER system user interface. A threat agent (inept installer, hacker, or industrial spy) gets access through the user interface and changes the DER settings so that it does not trip off upon low voltage (anti-islanding protection), but continues to provide power during a power system fault.0"}]
[{"$f":"'Source Data'!A405","v":"der.1"},{"$f":"'Source Data'!B405","v":"v"},{"$f":"'Source Data'!C405","v":0.12270300000000001},{"$f":"'Source Data'!D405","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E405","v":" to DER settings through the DER system user interface"},{"$f":"'Source Data'!F405","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to DER settings through the DER system user interface"}]
[{"$f":"'Source Data'!A406","v":"der.1"},{"$f":"'Source Data'!B406","v":"v"},{"$f":"'Source Data'!C406","v":0.94855199999999995},{"$f":"'Source Data'!D406","v":"default password is not changed"},{"$f":"'Source Data'!E406","v":" for the DER system"},{"$f":"'Source Data'!F406","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"default password is not changed for the DER system"}]
[{"$f":"'Source Data'!A407","v":"der.1"},{"$f":"'Source Data'!B407","v":"v"},{"$f":"'Source Data'!C407","v":0.80000599999999999},{"$f":"'Source Data'!D407","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E407","v":" to anti-islanding protection in the DER system due to poor configuration design,"},{"$f":"'Source Data'!F407","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to anti-islanding protection in the DER system due to poor configuration design,"}]
[{"$f":"'Source Data'!A408","v":"der.1"},{"$f":"'Source Data'!B408","v":"v"},{"$f":"'Source Data'!C408","v":0.92593099999999995},{"$f":"'Source Data'!D408","v":"commands or other messages may be inserted on the network by unauthorized individuals"},{"$f":"'Source Data'!E408","v":" between the user interface and the DER system, that result in unauthenticated changes to sensitive parameters."},{"$f":"'Source Data'!F408","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"commands or other messages may be inserted on the network by unauthorized individuals between the user interface and the DER system, that result in unauthenticated changes to sensitive parameters."}]
[{"$f":"'Source Data'!A409","v":"der.1"},{"$f":"'Source Data'!B409","v":"i"},{"$f":"'Source Data'!C409","v":0.92050600000000005},{"$f":"'Source Data'!D409","v":"DER system suffers physical damage due to feeding into a fault"},{"$f":"'Source Data'!E409","v":0},{"$f":"'Source Data'!F409","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"DER system suffers physical damage due to feeding into a fault0"}]
[{"$f":"'Source Data'!A410","v":"der.1"},{"$f":"'Source Data'!B410","v":"i"},{"$f":"'Source Data'!C410","v":0.57894100000000004},{"$f":"'Source Data'!D410","v":"A utility field crew member may be electrocuted"},{"$f":"'Source Data'!E410","v":0},{"$f":"'Source Data'!F410","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A utility field crew member may be electrocuted0"}]
[{"$f":"'Source Data'!A411","v":"der.1"},{"$f":"'Source Data'!B411","v":"i"},{"$f":"'Source Data'!C411","v":1.8452799999999998E-2},{"$f":"'Source Data'!D411","v":"The utility experiences damage to its reputation due to smart grid anomalies"},{"$f":"'Source Data'!E411","v":0},{"$f":"'Source Data'!F411","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility experiences damage to its reputation due to smart grid anomalies0"}]
[{"$f":"'Source Data'!A412","v":"der.1"},{"$f":"'Source Data'!B412","v":"m"},{"$f":"'Source Data'!C412","v":0.69243100000000002},{"$f":"'Source Data'!D412","v":"authenticate users"},{"$f":"'Source Data'!E412","v":" for all user interface interactions"},{"$f":"'Source Data'!F412","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users for all user interface interactions"}]
[{"$f":"'Source Data'!A413","v":"der.1"},{"$f":"'Source Data'!B413","v":"m"},{"$f":"'Source Data'!C413","v":0.62495199999999995},{"$f":"'Source Data'!D413","v":"change default credentials"},{"$f":"'Source Data'!E413","v":" after installation"},{"$f":"'Source Data'!F413","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"change default credentials after installation"}]
[{"$f":"'Source Data'!A414","v":"der.1"},{"$f":"'Source Data'!B414","v":"m"},{"$f":"'Source Data'!C414","v":0.277088},{"$f":"'Source Data'!D414","v":"enforce limits in hardware"},{"$f":"'Source Data'!E414","v":" to ensure that no setting changes can damage equipment"},{"$f":"'Source Data'!F414","v":"enforce limits"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce limits in hardware to ensure that no setting changes can damage equipment"}]
[{"$f":"'Source Data'!A415","v":"der.1"},{"$f":"'Source Data'!B415","v":"m"},{"$f":"'Source Data'!C415","v":0.98430600000000001},{"$f":"'Source Data'!D415","v":"train personnel"},{"$f":"'Source Data'!E415","v":" on secure networking requirements so that DER owners will understand the impact of bypassing security settings"},{"$f":"'Source Data'!F415","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel on secure networking requirements so that DER owners will understand the impact of bypassing security settings"}]
[{"$f":"'Source Data'!A416","v":"der.1"},{"$f":"'Source Data'!B416","v":"m"},{"$f":"'Source Data'!C416","v":0.72600900000000002},{"$f":"'Source Data'!D416","v":"require approval"},{"$f":"'Source Data'!E416","v":" of next level management for critical security settings"},{"$f":"'Source Data'!F416","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approval of next level management for critical security settings"}]
[{"$f":"'Source Data'!A417","v":"der.2"},{"$f":"'Source Data'!B417","v":"t"},{"$f":"'Source Data'!C417","v":0.99953899999999996},{"$f":"'Source Data'!D417","v":"DER's Rogue Wireless Connection Exposes the DER System to Threat Agents via the Internet"},{"$f":"'Source Data'!E417","v":0},{"$f":"'Source Data'!F417","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"DER's Rogue Wireless Connection Exposes the DER System to Threat Agents via the Internet0"}]
[{"$f":"'Source Data'!A418","v":"der.2"},{"$f":"'Source Data'!B418","v":"d"},{"$f":"'Source Data'!C418","v":0.19711500000000001},{"$f":"'Source Data'!D418","v":"An industrial or large commercial DER system is configured for local operational access through a wireless network, but is erroneously connected to the company's wireless corporate network, thus exposing the DER system to the Internet. Through the incorrect connection to the Internet, a threat agent gains control of the DER system and alters the operation of the DER functions to make them ignore utility commands and to turn off the \"acknowledge command\" interaction with the utility. The DER system may no longer limit power output during critical situations."},{"$f":"'Source Data'!E418","v":0},{"$f":"'Source Data'!F418","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An industrial or large commercial DER system is configured for local operational access through a wireless network, but is erroneously connected to the company's wireless corporate network, thus exposing the DER system to the Internet. Through the incorrect connection to the Internet, a threat agent gains control of the DER system and alters the operation of the DER functions to make them ignore utility commands and to turn off the \"acknowledge command\" interaction with the utility. The DER system may no longer limit power output during critical situations.0"}]
[{"$f":"'Source Data'!A419","v":"der.2"},{"$f":"'Source Data'!B419","v":"v"},{"$f":"'Source Data'!C419","v":0.55015800000000004},{"$f":"'Source Data'!D419","v":"network is connected to untrusted networks"},{"$f":"'Source Data'!E419","v":" specifically the DER operational network is connected to the company's wireless corporate network,"},{"$f":"'Source Data'!F419","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network is connected to untrusted networks specifically the DER operational network is connected to the company's wireless corporate network,"}]
[{"$f":"'Source Data'!A420","v":"der.2"},{"$f":"'Source Data'!B420","v":"v"},{"$f":"'Source Data'!C420","v":0.92778099999999997},{"$f":"'Source Data'!D420","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E420","v":" to the wireless network allowing an unauthorized entity to gain control of DER system through the Internet,"},{"$f":"'Source Data'!F420","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the wireless network allowing an unauthorized entity to gain control of DER system through the Internet,"}]
[{"$f":"'Source Data'!A421","v":"der.2"},{"$f":"'Source Data'!B421","v":"v"},{"$f":"'Source Data'!C421","v":0.67542999999999997},{"$f":"'Source Data'!D421","v":"system permits wireless access by unauthorized parties"},{"$f":"'Source Data'!E421","v":" to the wireless network in the DER system,"},{"$f":"'Source Data'!F421","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits wireless access by unauthorized parties to the wireless network in the DER system,"}]
[{"$f":"'Source Data'!A422","v":"der.2"},{"$f":"'Source Data'!B422","v":"v"},{"$f":"'Source Data'!C422","v":0.56153200000000003},{"$f":"'Source Data'!D422","v":"unnecessary access is permitted to system functions"},{"$f":"'Source Data'!E422","v":" in the DER system,"},{"$f":"'Source Data'!F422","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to system functions in the DER system,"}]
[{"$f":"'Source Data'!A423","v":"der.2"},{"$f":"'Source Data'!B423","v":"v"},{"$f":"'Source Data'!C423","v":0.36355300000000002},{"$f":"'Source Data'!D423","v":"users lack visibility to the failure of the system to respond to commands"},{"$f":"'Source Data'!E423","v":" by the utility for the DER system."},{"$f":"'Source Data'!F423","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility to the failure of the system to respond to commands by the utility for the DER system."}]
[{"$f":"'Source Data'!A424","v":"der.2"},{"$f":"'Source Data'!B424","v":"i"},{"$f":"'Source Data'!C424","v":0.46715600000000002},{"$f":"'Source Data'!D424","v":"Utility power equipment is damaged, causing financial impacts and outages of customers"},{"$f":"'Source Data'!E424","v":0},{"$f":"'Source Data'!F424","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility power equipment is damaged, causing financial impacts and outages of customers0"}]
[{"$f":"'Source Data'!A425","v":"der.2"},{"$f":"'Source Data'!B425","v":"i"},{"$f":"'Source Data'!C425","v":0.185553},{"$f":"'Source Data'!D425","v":"The utility experiences damage to its reputation due to smart grid anomalies"},{"$f":"'Source Data'!E425","v":0},{"$f":"'Source Data'!F425","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility experiences damage to its reputation due to smart grid anomalies0"}]
[{"$f":"'Source Data'!A426","v":"der.2"},{"$f":"'Source Data'!B426","v":"i"},{"$f":"'Source Data'!C426","v":0.18066099999999999},{"$f":"'Source Data'!D426","v":"The utility's networked grid in a city may experience damaging reverse power flows, or overloads to substation transformers"},{"$f":"'Source Data'!E426","v":0},{"$f":"'Source Data'!F426","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility's networked grid in a city may experience damaging reverse power flows, or overloads to substation transformers0"}]
[{"$f":"'Source Data'!A427","v":"der.2"},{"$f":"'Source Data'!B427","v":"m"},{"$f":"'Source Data'!C427","v":0.36721599999999999},{"$f":"'Source Data'!D427","v":"verify network changes"},{"$f":"'Source Data'!E427","v":" including connections available between networks"},{"$f":"'Source Data'!F427","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify network changes including connections available between networks"}]
[{"$f":"'Source Data'!A428","v":"der.2"},{"$f":"'Source Data'!B428","v":"m"},{"$f":"'Source Data'!C428","v":7.1227299999999993E-2},{"$f":"'Source Data'!D428","v":"authenticate devices"},{"$f":"'Source Data'!E428","v":" so that any new connections support only authorized equipment"},{"$f":"'Source Data'!F428","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate devices so that any new connections support only authorized equipment"}]
[{"$f":"'Source Data'!A429","v":"der.2"},{"$f":"'Source Data'!B429","v":"m"},{"$f":"'Source Data'!C429","v":0.86514199999999997},{"$f":"'Source Data'!D429","v":"detect unauthorized configuration changes"},{"$f":"'Source Data'!E429","v":" to the DER system"},{"$f":"'Source Data'!F429","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized configuration changes to the DER system"}]
[{"$f":"'Source Data'!A430","v":"der.2"},{"$f":"'Source Data'!B430","v":"m"},{"$f":"'Source Data'!C430","v":0.29978500000000002},{"$f":"'Source Data'!D430","v":"configure for least functionality"},{"$f":"'Source Data'!E430","v":" by limiting the types of traffic, shutting down certain ports, etc."},{"$f":"'Source Data'!F430","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by limiting the types of traffic, shutting down certain ports, etc."}]
[{"$f":"'Source Data'!A431","v":"der.2"},{"$f":"'Source Data'!B431","v":"m"},{"$f":"'Source Data'!C431","v":0.39619500000000002},{"$f":"'Source Data'!D431","v":"authenticate messages"},{"$f":"'Source Data'!E431","v":" , including their source and destinations, in communication protocols used between DER system components"},{"$f":"'Source Data'!F431","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages , including their source and destinations, in communication protocols used between DER system components"}]
[{"$f":"'Source Data'!A432","v":"der.2"},{"$f":"'Source Data'!B432","v":"m"},{"$f":"'Source Data'!C432","v":0.85775800000000002},{"$f":"'Source Data'!D432","v":"require acknowledgment"},{"$f":"'Source Data'!E432","v":" in communication protocols used for critical commands from the utility to DER systems,"},{"$f":"'Source Data'!F432","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require acknowledgment in communication protocols used for critical commands from the utility to DER systems,"}]
[{"$f":"'Source Data'!A433","v":"der.2"},{"$f":"'Source Data'!B433","v":"m"},{"$f":"'Source Data'!C433","v":0.18995300000000001},{"$f":"'Source Data'!D433","v":"require failure messages"},{"$f":"'Source Data'!E433","v":" in communication protocols used for critical commands from the utility to DER systems,"},{"$f":"'Source Data'!F433","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require failure messages in communication protocols used for critical commands from the utility to DER systems,"}]
[{"$f":"'Source Data'!A434","v":"der.2"},{"$f":"'Source Data'!B434","v":"m"},{"$f":"'Source Data'!C434","v":0.748722},{"$f":"'Source Data'!D434","v":"train personnel"},{"$f":"'Source Data'!E434","v":" (DER system installers) to ensure that the recommended access control security settings are enabled"},{"$f":"'Source Data'!F434","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel (DER system installers) to ensure that the recommended access control security settings are enabled"}]
[{"$f":"'Source Data'!A435","v":"der.2"},{"$f":"'Source Data'!B435","v":"m"},{"$f":"'Source Data'!C435","v":0.166493},{"$f":"'Source Data'!D435","v":"require secure factory settings"},{"$f":"'Source Data'!E435","v":" for configuration and network parameters by default"},{"$f":"'Source Data'!F435","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require secure factory settings for configuration and network parameters by default"}]
[{"$f":"'Source Data'!A436","v":"der.2"},{"$f":"'Source Data'!B436","v":"m"},{"$f":"'Source Data'!C436","v":0.67796100000000004},{"$f":"'Source Data'!D436","v":"authenticate users"},{"$f":"'Source Data'!E436","v":" who make modifications to secure configuration and network settings"},{"$f":"'Source Data'!F436","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users who make modifications to secure configuration and network settings"}]
[{"$f":"'Source Data'!A437","v":"der.2"},{"$f":"'Source Data'!B437","v":"m"},{"$f":"'Source Data'!C437","v":0.22475000000000001},{"$f":"'Source Data'!D437","v":"limit remote modification"},{"$f":"'Source Data'!E437","v":" of functional and security settings for the DER system"},{"$f":"'Source Data'!F437","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"limit remote modification of functional and security settings for the DER system"}]
[{"$f":"'Source Data'!A438","v":"der.2"},{"$f":"'Source Data'!B438","v":"m"},{"$f":"'Source Data'!C438","v":0.24379700000000001},{"$f":"'Source Data'!D438","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E438","v":" to protect DER wireless network,"},{"$f":"'Source Data'!F438","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms to protect DER wireless network,"}]
[{"$f":"'Source Data'!A439","v":"der.2"},{"$f":"'Source Data'!B439","v":"m"},{"$f":"'Source Data'!C439","v":0.46083400000000002},{"$f":"'Source Data'!D439","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E439","v":" to limit privileges to safety critical functions"},{"$f":"'Source Data'!F439","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privileges to safety critical functions"}]
[{"$f":"'Source Data'!A440","v":"der.3"},{"$f":"'Source Data'!B440","v":"t"},{"$f":"'Source Data'!C440","v":0.88433399999999995},{"$f":"'Source Data'!D440","v":"Malware Introduced in DER System During Deployment"},{"$f":"'Source Data'!E440","v":0},{"$f":"'Source Data'!F440","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Malware Introduced in DER System During Deployment0"}]
[{"$f":"'Source Data'!A441","v":"der.3"},{"$f":"'Source Data'!B441","v":"d"},{"$f":"'Source Data'!C441","v":0.493176},{"$f":"'Source Data'!D441","v":"A threat agent, possibly a disgruntled employee of the DER vendor or a DER implementation company, makes malicious software changes to equipment software or firmware. This malware causes large numbers of DER systems to ignore certain critical commands from the utility. For example, after some future date, it prevents the DER systems from limiting their energy output when so commanded and then locks out any other commands."},{"$f":"'Source Data'!E441","v":0},{"$f":"'Source Data'!F441","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent, possibly a disgruntled employee of the DER vendor or a DER implementation company, makes malicious software changes to equipment software or firmware. This malware causes large numbers of DER systems to ignore certain critical commands from the utility. For example, after some future date, it prevents the DER systems from limiting their energy output when so commanded and then locks out any other commands.0"}]
[{"$f":"'Source Data'!A442","v":"der.3"},{"$f":"'Source Data'!B442","v":"v"},{"$f":"'Source Data'!C442","v":0.26543699999999998},{"$f":"'Source Data'!D442","v":"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data"},{"$f":"'Source Data'!E442","v":" when granted access to software and firmware in equipment that is at the vendor factory or during implementation,"},{"$f":"'Source Data'!F442","v":"Insufficient Identity Validation or Background Checks (6.2.2.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data when granted access to software and firmware in equipment that is at the vendor factory or during implementation,"}]
[{"$f":"'Source Data'!A443","v":"der.3"},{"$f":"'Source Data'!B443","v":"v"},{"$f":"'Source Data'!C443","v":0.57296899999999995},{"$f":"'Source Data'!D443","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Source Data'!E443","v":" in DER equipment,"},{"$f":"'Source Data'!F443","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized installation of software or firmware in DER equipment,"}]
[{"$f":"'Source Data'!A444","v":"der.3"},{"$f":"'Source Data'!B444","v":"v"},{"$f":"'Source Data'!C444","v":0.43334400000000001},{"$f":"'Source Data'!D444","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E444","v":" to modify software or firmware on systems post-delivery,"},{"$f":"'Source Data'!F444","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to modify software or firmware on systems post-delivery,"}]
[{"$f":"'Source Data'!A445","v":"der.3"},{"$f":"'Source Data'!B445","v":"v"},{"$f":"'Source Data'!C445","v":0.49940899999999999},{"$f":"'Source Data'!D445","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Source Data'!E445","v":" in the DER system."},{"$f":"'Source Data'!F445","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized installation of software or firmware in the DER system."}]
[{"$f":"'Source Data'!A446","v":"der.3"},{"$f":"'Source Data'!B446","v":"i"},{"$f":"'Source Data'!C446","v":0.98513399999999995},{"$f":"'Source Data'!D446","v":"Loss of a transformer"},{"$f":"'Source Data'!E446","v":0},{"$f":"'Source Data'!F446","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of a transformer0"}]
[{"$f":"'Source Data'!A447","v":"der.3"},{"$f":"'Source Data'!B447","v":"i"},{"$f":"'Source Data'!C447","v":0.30778800000000001},{"$f":"'Source Data'!D447","v":"Financial loss to utility"},{"$f":"'Source Data'!E447","v":0},{"$f":"'Source Data'!F447","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Financial loss to utility0"}]
[{"$f":"'Source Data'!A448","v":"der.3"},{"$f":"'Source Data'!B448","v":"i"},{"$f":"'Source Data'!C448","v":0.83530099999999996},{"$f":"'Source Data'!D448","v":"Financial loss to DER owner"},{"$f":"'Source Data'!E448","v":0},{"$f":"'Source Data'!F448","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Financial loss to DER owner0"}]
[{"$f":"'Source Data'!A449","v":"der.3"},{"$f":"'Source Data'!B449","v":"i"},{"$f":"'Source Data'!C449","v":0.84283799999999998},{"$f":"'Source Data'!D449","v":"The combined effect causes a large reverse power flow in a substation and causes severe damage to a substation transformer. All DER software/firmware will have to be updated"},{"$f":"'Source Data'!E449","v":0},{"$f":"'Source Data'!F449","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The combined effect causes a large reverse power flow in a substation and causes severe damage to a substation transformer. All DER software/firmware will have to be updated0"}]
[{"$f":"'Source Data'!A450","v":"der.3"},{"$f":"'Source Data'!B450","v":"m"},{"$f":"'Source Data'!C450","v":2.87602E-2},{"$f":"'Source Data'!D450","v":"cross check"},{"$f":"'Source Data'!E450","v":" software/firmware before installation by comparing with a known good version (a \"gold disk\")"},{"$f":"'Source Data'!F450","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check software/firmware before installation by comparing with a known good version (a \"gold disk\")"}]
[{"$f":"'Source Data'!A451","v":"der.3"},{"$f":"'Source Data'!B451","v":"m"},{"$f":"'Source Data'!C451","v":0.73602699999999999},{"$f":"'Source Data'!D451","v":"require on-going validation"},{"$f":"'Source Data'!E451","v":" of software/firmware"},{"$f":"'Source Data'!F451","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require on-going validation of software/firmware"}]
[{"$f":"'Source Data'!A452","v":"der.3"},{"$f":"'Source Data'!B452","v":"m"},{"$f":"'Source Data'!C452","v":0.25182399999999999},{"$f":"'Source Data'!D452","v":"authenticate users"},{"$f":"'Source Data'!E452","v":" for access to modify software/firmware"},{"$f":"'Source Data'!F452","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users for access to modify software/firmware"}]
[{"$f":"'Source Data'!A453","v":"der.3"},{"$f":"'Source Data'!B453","v":"m"},{"$f":"'Source Data'!C453","v":0.61772899999999997},{"$f":"'Source Data'!D453","v":"test for malware"},{"$f":"'Source Data'!E453","v":" in DER systems"},{"$f":"'Source Data'!F453","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test for malware in DER systems"}]
[{"$f":"'Source Data'!A454","v":"der.3"},{"$f":"'Source Data'!B454","v":"m"},{"$f":"'Source Data'!C454","v":0.31470100000000001},{"$f":"'Source Data'!D454","v":"verify personnel"},{"$f":"'Source Data'!E454","v":" with background checks on DER development personnel, implementers, and contract maintenance personnel, especially those that interact directly with the DER interface to the utility"},{"$f":"'Source Data'!F454","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify personnel with background checks on DER development personnel, implementers, and contract maintenance personnel, especially those that interact directly with the DER interface to the utility"}]
[{"$f":"'Source Data'!A455","v":"der.3"},{"$f":"'Source Data'!B455","v":"m"},{"$f":"'Source Data'!C455","v":0.58674999999999999},{"$f":"'Source Data'!D455","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E455","v":" to limit privileges to modify software/firmware after installation"},{"$f":"'Source Data'!F455","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privileges to modify software/firmware after installation"}]
[{"$f":"'Source Data'!A456","v":"der.4"},{"$f":"'Source Data'!B456","v":"t"},{"$f":"'Source Data'!C456","v":0.63606600000000002},{"$f":"'Source Data'!D456","v":"Confidential DER Generation Information Stolen to Harm Customer"},{"$f":"'Source Data'!E456","v":0},{"$f":"'Source Data'!F456","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Confidential DER Generation Information Stolen to Harm Customer0"}]
[{"$f":"'Source Data'!A457","v":"der.4"},{"$f":"'Source Data'!B457","v":"d"},{"$f":"'Source Data'!C457","v":0.15048},{"$f":"'Source Data'!D457","v":"A utility is monitoring the energy and ancillary services provided by an industrial or commercial customer's DER system. The communication protocol that transports this information is intercepted and a threat agent gains access to the private generation data from the DER system because the protocol provides either no confidentiality or inadequate confidentiality. This private data is used to harm the customer."},{"$f":"'Source Data'!E457","v":0},{"$f":"'Source Data'!F457","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A utility is monitoring the energy and ancillary services provided by an industrial or commercial customer's DER system. The communication protocol that transports this information is intercepted and a threat agent gains access to the private generation data from the DER system because the protocol provides either no confidentiality or inadequate confidentiality. This private data is used to harm the customer.0"}]
[{"$f":"'Source Data'!A458","v":"der.4"},{"$f":"'Source Data'!B458","v":"v"},{"$f":"'Source Data'!C458","v":0.96510499999999999},{"$f":"'Source Data'!D458","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E458","v":" in the communication protocol of the DER system,"},{"$f":"'Source Data'!F458","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals in the communication protocol of the DER system,"}]
[{"$f":"'Source Data'!A459","v":"der.4"},{"$f":"'Source Data'!B459","v":"v"},{"$f":"'Source Data'!C459","v":0.211947},{"$f":"'Source Data'!D459","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Source Data'!E459","v":" in the communication protocol of the DER system."},{"$f":"'Source Data'!F459","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes private data accessible to unauthorized individuals in the communication protocol of the DER system."}]
[{"$f":"'Source Data'!A460","v":"der.4"},{"$f":"'Source Data'!B460","v":"i"},{"$f":"'Source Data'!C460","v":0.75813399999999997},{"$f":"'Source Data'!D460","v":"Utility is sued for financial damages due to lost customer privacy"},{"$f":"'Source Data'!E460","v":0},{"$f":"'Source Data'!F460","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility is sued for financial damages due to lost customer privacy0"}]
[{"$f":"'Source Data'!A461","v":"der.4"},{"$f":"'Source Data'!B461","v":"i"},{"$f":"'Source Data'!C461","v":8.0418000000000003E-2},{"$f":"'Source Data'!D461","v":"Utility reputation is damaged for not providing security for private information"},{"$f":"'Source Data'!E461","v":0},{"$f":"'Source Data'!F461","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility reputation is damaged for not providing security for private information0"}]
[{"$f":"'Source Data'!A462","v":"der.4"},{"$f":"'Source Data'!B462","v":"m"},{"$f":"'Source Data'!C462","v":0.21743899999999999},{"$f":"'Source Data'!D462","v":"encrypt communication paths"},{"$f":"'Source Data'!E462","v":" used for confidential or private information"},{"$f":"'Source Data'!F462","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths used for confidential or private information"}]
[{"$f":"'Source Data'!A463","v":"der.5"},{"$f":"'Source Data'!B463","v":"t"},{"$f":"'Source Data'!C463","v":0.76008200000000004},{"$f":"'Source Data'!D463","v":"Trojan Horse Attack Captures Confidential DER Generation Information"},{"$f":"'Source Data'!E463","v":0},{"$f":"'Source Data'!F463","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Trojan Horse Attack Captures Confidential DER Generation Information0"}]
[{"$f":"'Source Data'!A464","v":"der.5"},{"$f":"'Source Data'!B464","v":"d"},{"$f":"'Source Data'!C464","v":1.8801600000000001E-3},{"$f":"'Source Data'!D464","v":"A DER system installed for the mutual benefit of a utility partnership with an industrial or commercial customer contains a Trojan horse, either embedded at the factory, added during installation, or inserted by maintenance personnel. The Trojan horse captures confidential market-related information from both the utility and the partner. An industrial competitor uses this market information to the detriment of both the utility and the customer."},{"$f":"'Source Data'!E464","v":0},{"$f":"'Source Data'!F464","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A DER system installed for the mutual benefit of a utility partnership with an industrial or commercial customer contains a Trojan horse, either embedded at the factory, added during installation, or inserted by maintenance personnel. The Trojan horse captures confidential market-related information from both the utility and the partner. An industrial competitor uses this market information to the detriment of both the utility and the customer.0"}]
[{"$f":"'Source Data'!A465","v":"der.5"},{"$f":"'Source Data'!B465","v":"v"},{"$f":"'Source Data'!C465","v":0.48725400000000002},{"$f":"'Source Data'!D465","v":"system permits installation of malware"},{"$f":"'Source Data'!E465","v":" in the supply chain for the DER system"},{"$f":"'Source Data'!F465","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware in the supply chain for the DER system"}]
[{"$f":"'Source Data'!A466","v":"der.5"},{"$f":"'Source Data'!B466","v":"i"},{"$f":"'Source Data'!C466","v":0.248644},{"$f":"'Source Data'!D466","v":"Utility suffers from financial losses due to market manipulation by the industrial competitor"},{"$f":"'Source Data'!E466","v":0},{"$f":"'Source Data'!F466","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility suffers from financial losses due to market manipulation by the industrial competitor0"}]
[{"$f":"'Source Data'!A467","v":"der.5"},{"$f":"'Source Data'!B467","v":"i"},{"$f":"'Source Data'!C467","v":0.57835899999999996},{"$f":"'Source Data'!D467","v":"Utility is sued for financial damages due to lost customer confidentiality"},{"$f":"'Source Data'!E467","v":0},{"$f":"'Source Data'!F467","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility is sued for financial damages due to lost customer confidentiality0"}]
[{"$f":"'Source Data'!A468","v":"der.5"},{"$f":"'Source Data'!B468","v":"i"},{"$f":"'Source Data'!C468","v":0.48733599999999999},{"$f":"'Source Data'!D468","v":"Utility reputation is damaged for not being able to secure confidential information"},{"$f":"'Source Data'!E468","v":0},{"$f":"'Source Data'!F468","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility reputation is damaged for not being able to secure confidential information0"}]
[{"$f":"'Source Data'!A469","v":"der.5"},{"$f":"'Source Data'!B469","v":"m"},{"$f":"'Source Data'!C469","v":0.43636999999999998},{"$f":"'Source Data'!D469","v":"test before installation"},{"$f":"'Source Data'!E469","v":" of the DER system, for the presence of malware,"},{"$f":"'Source Data'!F469","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test before installation of the DER system, for the presence of malware,"}]
[{"$f":"'Source Data'!A470","v":"der.5"},{"$f":"'Source Data'!B470","v":"m"},{"$f":"'Source Data'!C470","v":0.53326399999999996},{"$f":"'Source Data'!D470","v":"test after installation"},{"$f":"'Source Data'!E470","v":" of the DER system, for the presence of malware,"},{"$f":"'Source Data'!F470","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test after installation of the DER system, for the presence of malware,"}]
[{"$f":"'Source Data'!A471","v":"der.5"},{"$f":"'Source Data'!B471","v":"m"},{"$f":"'Source Data'!C471","v":6.5420399999999998E-3},{"$f":"'Source Data'!D471","v":"require assured maintenance"},{"$f":"'Source Data'!E471","v":" by security-certified maintenance organizations that can be trusted not to install malware"},{"$f":"'Source Data'!F471","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require assured maintenance by security-certified maintenance organizations that can be trusted not to install malware"}]
[{"$f":"'Source Data'!A472","v":"der.5"},{"$f":"'Source Data'!B472","v":"m"},{"$f":"'Source Data'!C472","v":0.129245},{"$f":"'Source Data'!D472","v":"test after maintenance"},{"$f":"'Source Data'!E472","v":" for malware in all DER systems"},{"$f":"'Source Data'!F472","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test after maintenance for malware in all DER systems"}]
[{"$f":"'Source Data'!A473","v":"der.5"},{"$f":"'Source Data'!B473","v":"m"},{"$f":"'Source Data'!C473","v":7.7797199999999997E-2},{"$f":"'Source Data'!D473","v":"create audit logs"},{"$f":"'Source Data'!E473","v":" of all changes to software and firmware, linking the updates to roles"},{"$f":"'Source Data'!F473","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all changes to software and firmware, linking the updates to roles"}]
[{"$f":"'Source Data'!A474","v":"der.5"},{"$f":"'Source Data'!B474","v":"m"},{"$f":"'Source Data'!C474","v":0.877803},{"$f":"'Source Data'!D474","v":"protect audit logs"},{"$f":"'Source Data'!E474","v":" from deletion of records unless a security authority is notified"},{"$f":"'Source Data'!F474","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect audit logs from deletion of records unless a security authority is notified"}]
[{"$f":"'Source Data'!A475","v":"der.5"},{"$f":"'Source Data'!B475","v":"m"},{"$f":"'Source Data'!C475","v":0.80373399999999995},{"$f":"'Source Data'!D475","v":"configure for least functionality"},{"$f":"'Source Data'!E475","v":" by disabling backdoor vendor/maintenance ports"},{"$f":"'Source Data'!F475","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by disabling backdoor vendor/maintenance ports"}]
[{"$f":"'Source Data'!A476","v":"der.5"},{"$f":"'Source Data'!B476","v":"m"},{"$f":"'Source Data'!C476","v":0.95474000000000003},{"$f":"'Source Data'!D476","v":"verify personnel"},{"$f":"'Source Data'!E476","v":" with background checks on DER development personnel, implementers, and contract maintenance personnel with privileges to modify firmware or software,"},{"$f":"'Source Data'!F476","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify personnel with background checks on DER development personnel, implementers, and contract maintenance personnel with privileges to modify firmware or software,"}]
[{"$f":"'Source Data'!A477","v":"der.5"},{"$f":"'Source Data'!B477","v":"m"},{"$f":"'Source Data'!C477","v":0.43950800000000001},{"$f":"'Source Data'!D477","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E477","v":" to limit privileges to modify firmware or software after installation"},{"$f":"'Source Data'!F477","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privileges to modify firmware or software after installation"}]
[{"$f":"'Source Data'!A478","v":"der.5"},{"$f":"'Source Data'!B478","v":"m"},{"$f":"'Source Data'!C478","v":0.66451300000000002},{"$f":"'Source Data'!D478","v":"restrict access"},{"$f":"'Source Data'!E478","v":" at factory for modifying software and firmware"},{"$f":"'Source Data'!F478","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict access at factory for modifying software and firmware"}]
[{"$f":"'Source Data'!A479","v":"der.5"},{"$f":"'Source Data'!B479","v":"m"},{"$f":"'Source Data'!C479","v":0.355568},{"$f":"'Source Data'!D479","v":"require authentication"},{"$f":"'Source Data'!E479","v":" to modify firmware or software after installation"},{"$f":"'Source Data'!F479","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require authentication to modify firmware or software after installation"}]
[{"$f":"'Source Data'!A480","v":"der.6"},{"$f":"'Source Data'!B480","v":"t"},{"$f":"'Source Data'!C480","v":0.72423899999999997},{"$f":"'Source Data'!D480","v":"Compromised DER Sequence of Commands Causes Power Outage"},{"$f":"'Source Data'!E480","v":0},{"$f":"'Source Data'!F480","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Compromised DER Sequence of Commands Causes Power Outage0"}]
[{"$f":"'Source Data'!A481","v":"der.6"},{"$f":"'Source Data'!B481","v":"d"},{"$f":"'Source Data'!C481","v":0.30318000000000001},{"$f":"'Source Data'!D481","v":"A utility-owned DER storage system is located in a substation to balance large feeder generation and load variations. A threat agent causes a sequence of commands, although valid individually, to arrive at the DER system in the wrong order (possibly through a replay attack), causing the DER system to create a greater imbalance and tripping off all customers served from that substation."},{"$f":"'Source Data'!E481","v":0},{"$f":"'Source Data'!F481","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A utility-owned DER storage system is located in a substation to balance large feeder generation and load variations. A threat agent causes a sequence of commands, although valid individually, to arrive at the DER system in the wrong order (possibly through a replay attack), causing the DER system to create a greater imbalance and tripping off all customers served from that substation.0"}]
[{"$f":"'Source Data'!A482","v":"der.6"},{"$f":"'Source Data'!B482","v":"v"},{"$f":"'Source Data'!C482","v":0.321633},{"$f":"'Source Data'!D482","v":"system permits potentially harmful command sequences"},{"$f":"'Source Data'!E482","v":" in the application-to-application messaging scheme of the DER storage system,"},{"$f":"'Source Data'!F482","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits potentially harmful command sequences in the application-to-application messaging scheme of the DER storage system,"}]
[{"$f":"'Source Data'!A483","v":"der.6"},{"$f":"'Source Data'!B483","v":"v"},{"$f":"'Source Data'!C483","v":1.4063900000000001E-2},{"$f":"'Source Data'!D483","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Source Data'!E483","v":" in the communication protocol of the DER storage system."},{"$f":"'Source Data'!F483","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command in the communication protocol of the DER storage system."}]
[{"$f":"'Source Data'!A484","v":"der.6"},{"$f":"'Source Data'!B484","v":"i"},{"$f":"'Source Data'!C484","v":0.639015},{"$f":"'Source Data'!D484","v":"Outages for all customers served by the substation"},{"$f":"'Source Data'!E484","v":0},{"$f":"'Source Data'!F484","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Outages for all customers served by the substation0"}]
[{"$f":"'Source Data'!A485","v":"der.6"},{"$f":"'Source Data'!B485","v":"i"},{"$f":"'Source Data'!C485","v":0.91610400000000003},{"$f":"'Source Data'!D485","v":"Continued threat of outages until the cause of the improper DER system operation is determined and corrected"},{"$f":"'Source Data'!E485","v":0},{"$f":"'Source Data'!F485","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Continued threat of outages until the cause of the improper DER system operation is determined and corrected0"}]
[{"$f":"'Source Data'!A486","v":"der.6"},{"$f":"'Source Data'!B486","v":"i"},{"$f":"'Source Data'!C486","v":0.90041000000000004},{"$f":"'Source Data'!D486","v":"Utilities need to curtail customer generation and/or loads until the problem is corrected"},{"$f":"'Source Data'!E486","v":0},{"$f":"'Source Data'!F486","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utilities need to curtail customer generation and/or loads until the problem is corrected0"}]
[{"$f":"'Source Data'!A487","v":"der.6"},{"$f":"'Source Data'!B487","v":"m"},{"$f":"'Source Data'!C487","v":0.62641899999999995},{"$f":"'Source Data'!D487","v":"check message integrity"},{"$f":"'Source Data'!E487","v":" in communication protocols used to manage DER systems"},{"$f":"'Source Data'!F487","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check message integrity in communication protocols used to manage DER systems"}]
[{"$f":"'Source Data'!A488","v":"der.6"},{"$f":"'Source Data'!B488","v":"m"},{"$f":"'Source Data'!C488","v":0.62595800000000001},{"$f":"'Source Data'!D488","v":"protect against replay"},{"$f":"'Source Data'!E488","v":" in communication protocols used to manage DER systems"},{"$f":"'Source Data'!F488","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect against replay in communication protocols used to manage DER systems"}]
[{"$f":"'Source Data'!A489","v":"der.6"},{"$f":"'Source Data'!B489","v":"m"},{"$f":"'Source Data'!C489","v":0.82307300000000005},{"$f":"'Source Data'!D489","v":"create audit logs"},{"$f":"'Source Data'!E489","v":" of out-of-sequence data"},{"$f":"'Source Data'!F489","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of out-of-sequence data"}]
[{"$f":"'Source Data'!A490","v":"der.6"},{"$f":"'Source Data'!B490","v":"m"},{"$f":"'Source Data'!C490","v":0.37323099999999998},{"$f":"'Source Data'!D490","v":"generate alarms"},{"$f":"'Source Data'!E490","v":" for system owners when out-of-sequence data is detected"},{"$f":"'Source Data'!F490","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for system owners when out-of-sequence data is detected"}]
[{"$f":"'Source Data'!A491","v":"der.7"},{"$f":"'Source Data'!B491","v":"t"},{"$f":"'Source Data'!C491","v":0.301012},{"$f":"'Source Data'!D491","v":"Incorrect Clock Causes Substation DER System Shut Down During Critical Peak"},{"$f":"'Source Data'!E491","v":0},{"$f":"'Source Data'!F491","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Incorrect Clock Causes Substation DER System Shut Down During Critical Peak0"}]
[{"$f":"'Source Data'!A492","v":"der.7"},{"$f":"'Source Data'!B492","v":"d"},{"$f":"'Source Data'!C492","v":0.97644200000000003},{"$f":"'Source Data'!D492","v":"A utility-owned DER system is located in a substation with the primary purpose of providing additional power during a critical peak. A threat agent changes the time clock in the DER system through a false time-synchronization message, so that either the DER system believes that the critical peak event is over or that all time-stamped messages to it are invalid, so it goes into default shut-down mode. "},{"$f":"'Source Data'!E492","v":0},{"$f":"'Source Data'!F492","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A utility-owned DER system is located in a substation with the primary purpose of providing additional power during a critical peak. A threat agent changes the time clock in the DER system through a false time-synchronization message, so that either the DER system believes that the critical peak event is over or that all time-stamped messages to it are invalid, so it goes into default shut-down mode. 0"}]
[{"$f":"'Source Data'!A493","v":"der.7"},{"$f":"'Source Data'!B493","v":"v"},{"$f":"'Source Data'!C493","v":0.53797399999999995},{"$f":"'Source Data'!D493","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E493","v":" in the time synchronization communication protocol,"},{"$f":"'Source Data'!F493","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals in the time synchronization communication protocol,"}]
[{"$f":"'Source Data'!A494","v":"der.7"},{"$f":"'Source Data'!B494","v":"v"},{"$f":"'Source Data'!C494","v":0.90152699999999997},{"$f":"'Source Data'!D494","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E494","v":" in the time synchronization communication protocol,"},{"$f":"'Source Data'!F494","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in the time synchronization communication protocol,"}]
[{"$f":"'Source Data'!A495","v":"der.7"},{"$f":"'Source Data'!B495","v":"v"},{"$f":"'Source Data'!C495","v":0.36868299999999998},{"$f":"'Source Data'!D495","v":"system takes action before confirming changes with user"},{"$f":"'Source Data'!E495","v":" in the DER management system."},{"$f":"'Source Data'!F495","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system takes action before confirming changes with user in the DER management system."}]
[{"$f":"'Source Data'!A496","v":"der.7"},{"$f":"'Source Data'!B496","v":"i"},{"$f":"'Source Data'!C496","v":0.55423599999999995},{"$f":"'Source Data'!D496","v":"The DER system performs an immediate shut down and causes damage to a transformer"},{"$f":"'Source Data'!E496","v":0},{"$f":"'Source Data'!F496","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The DER system performs an immediate shut down and causes damage to a transformer0"}]
[{"$f":"'Source Data'!A497","v":"der.7"},{"$f":"'Source Data'!B497","v":"i"},{"$f":"'Source Data'!C497","v":0.73489700000000002},{"$f":"'Source Data'!D497","v":"Customer outages occur during the critical peak"},{"$f":"'Source Data'!E497","v":0},{"$f":"'Source Data'!F497","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Customer outages occur during the critical peak0"}]
[{"$f":"'Source Data'!A498","v":"der.7"},{"$f":"'Source Data'!B498","v":"i"},{"$f":"'Source Data'!C498","v":0.102113},{"$f":"'Source Data'!D498","v":"Utilities need to curtail customer generation and/or loads until a new transformer is installed"},{"$f":"'Source Data'!E498","v":0},{"$f":"'Source Data'!F498","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utilities need to curtail customer generation and/or loads until a new transformer is installed0"}]
[{"$f":"'Source Data'!A499","v":"der.7"},{"$f":"'Source Data'!B499","v":"m"},{"$f":"'Source Data'!C499","v":0.17333999999999999},{"$f":"'Source Data'!D499","v":"authenticate messages"},{"$f":"'Source Data'!E499","v":" in the time synchronization communication protocol"},{"$f":"'Source Data'!F499","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages in the time synchronization communication protocol"}]
[{"$f":"'Source Data'!A500","v":"der.7"},{"$f":"'Source Data'!B500","v":"m"},{"$f":"'Source Data'!C500","v":3.8482299999999997E-2},{"$f":"'Source Data'!D500","v":"check message integrity"},{"$f":"'Source Data'!E500","v":" in the time synchronization communication protocol"},{"$f":"'Source Data'!F500","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check message integrity in the time synchronization communication protocol"}]
[{"$f":"'Source Data'!A501","v":"der.7"},{"$f":"'Source Data'!B501","v":"m"},{"$f":"'Source Data'!C501","v":0.33826699999999998},{"$f":"'Source Data'!D501","v":"cross check"},{"$f":"'Source Data'!E501","v":" operationally critical actions with the utility DER management system before acting"},{"$f":"'Source Data'!F501","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check operationally critical actions with the utility DER management system before acting"}]
[{"$f":"'Source Data'!A502","v":"der.8"},{"$f":"'Source Data'!B502","v":"t"},{"$f":"'Source Data'!C502","v":0.73446299999999998},{"$f":"'Source Data'!D502","v":"EV Charging Station Ignores Utility Command to Limit Fast-Charging"},{"$f":"'Source Data'!E502","v":0},{"$f":"'Source Data'!F502","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"EV Charging Station Ignores Utility Command to Limit Fast-Charging0"}]
[{"$f":"'Source Data'!A503","v":"der.8"},{"$f":"'Source Data'!B503","v":"d"},{"$f":"'Source Data'!C503","v":0.59221999999999997},{"$f":"'Source Data'!D503","v":"A charging station employee (with system administrator authority) wants to increase the revenue of an electric vehicle (EV) charging station acting as a DER system. The employee modifies a utility command to \"curtail the fast-charging rate\" or to change the time-stamp when the fast-charging limit command was received. During a peak period, many EVs simultaneously start charging, causing the distribution transformer to fail."},{"$f":"'Source Data'!E503","v":0},{"$f":"'Source Data'!F503","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A charging station employee (with system administrator authority) wants to increase the revenue of an electric vehicle (EV) charging station acting as a DER system. The employee modifies a utility command to \"curtail the fast-charging rate\" or to change the time-stamp when the fast-charging limit command was received. During a peak period, many EVs simultaneously start charging, causing the distribution transformer to fail.0"}]
[{"$f":"'Source Data'!A504","v":"der.8"},{"$f":"'Source Data'!B504","v":"v"},{"$f":"'Source Data'!C504","v":0.78217300000000001},{"$f":"'Source Data'!D504","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E504","v":" to instructions received from the utility regarding permitted charging operations."},{"$f":"'Source Data'!F504","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to instructions received from the utility regarding permitted charging operations."}]
[{"$f":"'Source Data'!A505","v":"der.8"},{"$f":"'Source Data'!B505","v":"i"},{"$f":"'Source Data'!C505","v":0.53089500000000001},{"$f":"'Source Data'!D505","v":"Transformer is damaged"},{"$f":"'Source Data'!E505","v":0},{"$f":"'Source Data'!F505","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Transformer is damaged0"}]
[{"$f":"'Source Data'!A506","v":"der.8"},{"$f":"'Source Data'!B506","v":"i"},{"$f":"'Source Data'!C506","v":0.69738800000000001},{"$f":"'Source Data'!D506","v":"Lawsuits between the utility and the EV charging station over responsibility for the cost to replace the failed transformer"},{"$f":"'Source Data'!E506","v":0},{"$f":"'Source Data'!F506","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Lawsuits between the utility and the EV charging station over responsibility for the cost to replace the failed transformer0"}]
[{"$f":"'Source Data'!A507","v":"der.8"},{"$f":"'Source Data'!B507","v":"m"},{"$f":"'Source Data'!C507","v":0.37534899999999999},{"$f":"'Source Data'!D507","v":"require read-only access"},{"$f":"'Source Data'!E507","v":" to timestamps for stored copies of commands received from utility"},{"$f":"'Source Data'!F507","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require read-only access to timestamps for stored copies of commands received from utility"}]
[{"$f":"'Source Data'!A508","v":"der.8"},{"$f":"'Source Data'!B508","v":"m"},{"$f":"'Source Data'!C508","v":0.60009900000000005},{"$f":"'Source Data'!D508","v":"require non-repudiation"},{"$f":"'Source Data'!E508","v":" for all critical commands between the utility and the customer system"},{"$f":"'Source Data'!F508","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require non-repudiation for all critical commands between the utility and the customer system"}]
[{"$f":"'Source Data'!A509","v":"der.9"},{"$f":"'Source Data'!B509","v":"t"},{"$f":"'Source Data'!C509","v":0.484433},{"$f":"'Source Data'!D509","v":"Loss of DER Control Occurs due to Invalid or Missing Messages"},{"$f":"'Source Data'!E509","v":0},{"$f":"'Source Data'!F509","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of DER Control Occurs due to Invalid or Missing Messages0"}]
[{"$f":"'Source Data'!A510","v":"der.9"},{"$f":"'Source Data'!B510","v":"d"},{"$f":"'Source Data'!C510","v":0.97760899999999995},{"$f":"'Source Data'!D510","v":"A malicious or non-malicious individual causes the loss of DER control due to invalid or missing messages. Since the DER system either tries to act on invalid messages or no longer has messages constraining its output, it causes a distribution transformer to overload, thus causing an outage for the site and for neighboring sites. The DER system also sustains damage due to invalid settings."},{"$f":"'Source Data'!E510","v":0},{"$f":"'Source Data'!F510","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A malicious or non-malicious individual causes the loss of DER control due to invalid or missing messages. Since the DER system either tries to act on invalid messages or no longer has messages constraining its output, it causes a distribution transformer to overload, thus causing an outage for the site and for neighboring sites. The DER system also sustains damage due to invalid settings.0"}]
[{"$f":"'Source Data'!A511","v":"der.9"},{"$f":"'Source Data'!B511","v":"v"},{"$f":"'Source Data'!C511","v":0.24304600000000001},{"$f":"'Source Data'!D511","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E511","v":" "},{"$f":"'Source Data'!F511","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals "}]
[{"$f":"'Source Data'!A512","v":"der.9"},{"$f":"'Source Data'!B512","v":"v"},{"$f":"'Source Data'!C512","v":0.81601500000000005},{"$f":"'Source Data'!D512","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E512","v":" "},{"$f":"'Source Data'!F512","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message "}]
[{"$f":"'Source Data'!A513","v":"der.9"},{"$f":"'Source Data'!B513","v":"i"},{"$f":"'Source Data'!C513","v":0.249359},{"$f":"'Source Data'!D513","v":"A distribution transformer is damaged"},{"$f":"'Source Data'!E513","v":0},{"$f":"'Source Data'!F513","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A distribution transformer is damaged0"}]
[{"$f":"'Source Data'!A514","v":"der.9"},{"$f":"'Source Data'!B514","v":"i"},{"$f":"'Source Data'!C514","v":0.74876799999999999},{"$f":"'Source Data'!D514","v":"A local outage occurs that requires field crews to replace the damaged transformer"},{"$f":"'Source Data'!E514","v":0},{"$f":"'Source Data'!F514","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A local outage occurs that requires field crews to replace the damaged transformer0"}]
[{"$f":"'Source Data'!A515","v":"der.9"},{"$f":"'Source Data'!B515","v":"i"},{"$f":"'Source Data'!C515","v":0.73390299999999997},{"$f":"'Source Data'!D515","v":"The DER system may sustain damage due to trying to act on invalid messages or not being constrained by expected messages that did not arrive"},{"$f":"'Source Data'!E515","v":0},{"$f":"'Source Data'!F515","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The DER system may sustain damage due to trying to act on invalid messages or not being constrained by expected messages that did not arrive0"}]
[{"$f":"'Source Data'!A516","v":"der.9"},{"$f":"'Source Data'!B516","v":"m"},{"$f":"'Source Data'!C516","v":4.1690199999999997E-2},{"$f":"'Source Data'!D516","v":"authenticate messages"},{"$f":"'Source Data'!E516","v":" in all communication protocols"},{"$f":"'Source Data'!F516","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages in all communication protocols"}]
[{"$f":"'Source Data'!A517","v":"der.9"},{"$f":"'Source Data'!B517","v":"m"},{"$f":"'Source Data'!C517","v":0.87699099999999997},{"$f":"'Source Data'!D517","v":"validate data"},{"$f":"'Source Data'!E517","v":" in DER systems messages as reasonable and within the DER intrinsic capabilities"},{"$f":"'Source Data'!F517","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate data in DER systems messages as reasonable and within the DER intrinsic capabilities"}]
[{"$f":"'Source Data'!A518","v":"der.9"},{"$f":"'Source Data'!B518","v":"m"},{"$f":"'Source Data'!C518","v":0.71982900000000005},{"$f":"'Source Data'!D518","v":"generate alarms"},{"$f":"'Source Data'!E518","v":" for messages that fail message authentication"},{"$f":"'Source Data'!F518","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for messages that fail message authentication"}]
[{"$f":"'Source Data'!A519","v":"der.9"},{"$f":"'Source Data'!B519","v":"m"},{"$f":"'Source Data'!C519","v":0.74858899999999995},{"$f":"'Source Data'!D519","v":"create audit logs"},{"$f":"'Source Data'!E519","v":" of messages that fail message authentication"},{"$f":"'Source Data'!F519","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of messages that fail message authentication"}]
[{"$f":"'Source Data'!A520","v":"der.9"},{"$f":"'Source Data'!B520","v":"m"},{"$f":"'Source Data'!C520","v":0.98929500000000004},{"$f":"'Source Data'!D520","v":"require non-repudiation"},{"$f":"'Source Data'!E520","v":" to validate receipt of messages"},{"$f":"'Source Data'!F520","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require non-repudiation to validate receipt of messages"}]
[{"$f":"'Source Data'!A521","v":"der.10"},{"$f":"'Source Data'!B521","v":"t"},{"$f":"'Source Data'!C521","v":0.48461599999999999},{"$f":"'Source Data'!D521","v":"Threat Agent Modifies FDEMS Efficiency Settings"},{"$f":"'Source Data'!E521","v":0},{"$f":"'Source Data'!F521","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat Agent Modifies FDEMS Efficiency Settings0"}]
[{"$f":"'Source Data'!A522","v":"der.10"},{"$f":"'Source Data'!B522","v":"d"},{"$f":"'Source Data'!C522","v":0.73643999999999998},{"$f":"'Source Data'!D522","v":"A malicious individual accesses a FDEMS in a small- to medium-sized commercial or industrial site, and modifies the energy output, the volt-var curves, or other DER efficiency settings that were requested by the utility."},{"$f":"'Source Data'!E522","v":0},{"$f":"'Source Data'!F522","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A malicious individual accesses a FDEMS in a small- to medium-sized commercial or industrial site, and modifies the energy output, the volt-var curves, or other DER efficiency settings that were requested by the utility.0"}]
[{"$f":"'Source Data'!A523","v":"der.10"},{"$f":"'Source Data'!B523","v":"v"},{"$f":"'Source Data'!C523","v":0.35416799999999998},{"$f":"'Source Data'!D523","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E523","v":" to critical settings in FDEMS,"},{"$f":"'Source Data'!F523","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to critical settings in FDEMS,"}]
[{"$f":"'Source Data'!A524","v":"der.10"},{"$f":"'Source Data'!B524","v":"v"},{"$f":"'Source Data'!C524","v":0.99023399999999995},{"$f":"'Source Data'!D524","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E524","v":" to the FDEMS network,"},{"$f":"'Source Data'!F524","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted to the FDEMS network,"}]
[{"$f":"'Source Data'!A525","v":"der.10"},{"$f":"'Source Data'!B525","v":"v"},{"$f":"'Source Data'!C525","v":0.14071400000000001},{"$f":"'Source Data'!D525","v":"unnecessary access is permitted to the operating system"},{"$f":"'Source Data'!E525","v":" hosting the FDEMS applications,"},{"$f":"'Source Data'!F525","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the operating system hosting the FDEMS applications,"}]
[{"$f":"'Source Data'!A526","v":"der.10"},{"$f":"'Source Data'!B526","v":"v"},{"$f":"'Source Data'!C526","v":0.10582},{"$f":"'Source Data'!D526","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E526","v":" to the FDEMS system."},{"$f":"'Source Data'!F526","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to the FDEMS system."}]
[{"$f":"'Source Data'!A527","v":"der.10"},{"$f":"'Source Data'!B527","v":"v"},{"$f":"'Source Data'!C527","v":0.44001699999999999},{"$f":"'Source Data'!D527","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E527","v":" to the FDEMS network,"},{"$f":"'Source Data'!F527","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the FDEMS network,"}]
[{"$f":"'Source Data'!A528","v":"der.10"},{"$f":"'Source Data'!B528","v":"v"},{"$f":"'Source Data'!C528","v":0.166376},{"$f":"'Source Data'!D528","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E528","v":" that allows modification of the FDEMS settings,"},{"$f":"'Source Data'!F528","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access that allows modification of the FDEMS settings,"}]
[{"$f":"'Source Data'!A529","v":"der.10"},{"$f":"'Source Data'!B529","v":"i"},{"$f":"'Source Data'!C529","v":0.31776700000000002},{"$f":"'Source Data'!D529","v":"The utility loses financially due to the need to purchase higher costing energy and/or to operate the power system less efficiently"},{"$f":"'Source Data'!E529","v":0},{"$f":"'Source Data'!F529","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility loses financially due to the need to purchase higher costing energy and/or to operate the power system less efficiently0"}]
[{"$f":"'Source Data'!A530","v":"der.10"},{"$f":"'Source Data'!B530","v":"i"},{"$f":"'Source Data'!C530","v":7.5900200000000001E-2},{"$f":"'Source Data'!D530","v":"The customer experiences higher costs due to not meeting the utility efficiency requests"},{"$f":"'Source Data'!E530","v":0},{"$f":"'Source Data'!F530","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The customer experiences higher costs due to not meeting the utility efficiency requests0"}]
[{"$f":"'Source Data'!A531","v":"der.10"},{"$f":"'Source Data'!B531","v":"m"},{"$f":"'Source Data'!C531","v":0.15631800000000001},{"$f":"'Source Data'!D531","v":"restrict application access"},{"$f":"'Source Data'!E531","v":" for all FDEMS user interface interactions"},{"$f":"'Source Data'!F531","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict application access for all FDEMS user interface interactions"}]
[{"$f":"'Source Data'!A532","v":"der.10"},{"$f":"'Source Data'!B532","v":"m"},{"$f":"'Source Data'!C532","v":0.37375799999999998},{"$f":"'Source Data'!D532","v":"authenticate users"},{"$f":"'Source Data'!E532","v":" for all FDEMS user interface interactions"},{"$f":"'Source Data'!F532","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users for all FDEMS user interface interactions"}]
[{"$f":"'Source Data'!A533","v":"der.10"},{"$f":"'Source Data'!B533","v":"m"},{"$f":"'Source Data'!C533","v":0.13383999999999999},{"$f":"'Source Data'!D533","v":"change default credentials"},{"$f":"'Source Data'!E533","v":" for FDEMS after installation"},{"$f":"'Source Data'!F533","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"change default credentials for FDEMS after installation"}]
[{"$f":"'Source Data'!A534","v":"der.10"},{"$f":"'Source Data'!B534","v":"m"},{"$f":"'Source Data'!C534","v":0.13572000000000001},{"$f":"'Source Data'!D534","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E534","v":" in the FDEMS system"},{"$f":"'Source Data'!F534","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control in the FDEMS system"}]
[{"$f":"'Source Data'!A535","v":"der.10"},{"$f":"'Source Data'!B535","v":"m"},{"$f":"'Source Data'!C535","v":0.62297400000000003},{"$f":"'Source Data'!D535","v":"enforce least privilege"},{"$f":"'Source Data'!E535","v":" to access the FDEMS operating system and physical host"},{"$f":"'Source Data'!F535","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege to access the FDEMS operating system and physical host"}]
[{"$f":"'Source Data'!A536","v":"der.10"},{"$f":"'Source Data'!B536","v":"m"},{"$f":"'Source Data'!C536","v":0.871618},{"$f":"'Source Data'!D536","v":"enforce restrictive firewall rules"},{"$f":"'Source Data'!E536","v":" for access to the FDEMS network"},{"$f":"'Source Data'!F536","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce restrictive firewall rules for access to the FDEMS network"}]
[{"$f":"'Source Data'!A537","v":"der.10"},{"$f":"'Source Data'!B537","v":"m"},{"$f":"'Source Data'!C537","v":0.44997700000000002},{"$f":"'Source Data'!D537","v":"require multi-factor authentication"},{"$f":"'Source Data'!E537","v":" for users requesting remote access to the FDEMS network"},{"$f":"'Source Data'!F537","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for users requesting remote access to the FDEMS network"}]
[{"$f":"'Source Data'!A538","v":"der.10"},{"$f":"'Source Data'!B538","v":"m"},{"$f":"'Source Data'!C538","v":0.93731399999999998},{"$f":"'Source Data'!D538","v":"train personnel"},{"$f":"'Source Data'!E538","v":" including the FDEMS owners and administrators, on secure networking requirements"},{"$f":"'Source Data'!F538","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel including the FDEMS owners and administrators, on secure networking requirements"}]
[{"$f":"'Source Data'!A539","v":"der.10"},{"$f":"'Source Data'!B539","v":"m"},{"$f":"'Source Data'!C539","v":0.56098700000000001},{"$f":"'Source Data'!D539","v":"protect credentials"},{"$f":"'Source Data'!E539","v":" that allow access to the FDEMS network,"},{"$f":"'Source Data'!F539","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials that allow access to the FDEMS network,"}]
[{"$f":"'Source Data'!A540","v":"der.10"},{"$f":"'Source Data'!B540","v":"m"},{"$f":"'Source Data'!C540","v":0.113104},{"$f":"'Source Data'!D540","v":"protect credentials"},{"$f":"'Source Data'!E540","v":" for the FDEMS application or operating system that permit access to modify the FDEMS settings"},{"$f":"'Source Data'!F540","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for the FDEMS application or operating system that permit access to modify the FDEMS settings"}]
[{"$f":"'Source Data'!A541","v":"der.11"},{"$f":"'Source Data'!B541","v":"t"},{"$f":"'Source Data'!C541","v":0.37368400000000002},{"$f":"'Source Data'!D541","v":"Threat Agent Shuts Down Commercial/Industrial FDEMS"},{"$f":"'Source Data'!E541","v":0},{"$f":"'Source Data'!F541","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat Agent Shuts Down Commercial/Industrial FDEMS0"}]
[{"$f":"'Source Data'!A542","v":"der.11"},{"$f":"'Source Data'!B542","v":"d"},{"$f":"'Source Data'!C542","v":0.90694799999999998},{"$f":"'Source Data'!D542","v":"A threat agent gains access to a FDEMS in a small- to medium-sized commercial or industrial site, such as a shopping center, university campus, hospital complex, or manufacturing facility and installs malicious software. At a pre-planned time, the virus planted by the threat agent causes a synchronized shut down of all the DER systems on the site, either causing a complete or partial outage of the facility or forcing the facility to purchase additional power from the grid."},{"$f":"'Source Data'!E542","v":0},{"$f":"'Source Data'!F542","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent gains access to a FDEMS in a small- to medium-sized commercial or industrial site, such as a shopping center, university campus, hospital complex, or manufacturing facility and installs malicious software. At a pre-planned time, the virus planted by the threat agent causes a synchronized shut down of all the DER systems on the site, either causing a complete or partial outage of the facility or forcing the facility to purchase additional power from the grid.0"}]
[{"$f":"'Source Data'!A543","v":"der.11"},{"$f":"'Source Data'!B543","v":"v"},{"$f":"'Source Data'!C543","v":0.91349000000000002},{"$f":"'Source Data'!D543","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E543","v":" to the FDEMS network,"},{"$f":"'Source Data'!F543","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted to the FDEMS network,"}]
[{"$f":"'Source Data'!A544","v":"der.11"},{"$f":"'Source Data'!B544","v":"v"},{"$f":"'Source Data'!C544","v":4.2735099999999998E-2},{"$f":"'Source Data'!D544","v":"unnecessary access is permitted to the operating system"},{"$f":"'Source Data'!E544","v":" hosting the FDEMS applications,"},{"$f":"'Source Data'!F544","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the operating system hosting the FDEMS applications,"}]
[{"$f":"'Source Data'!A545","v":"der.11"},{"$f":"'Source Data'!B545","v":"v"},{"$f":"'Source Data'!C545","v":0.120532},{"$f":"'Source Data'!D545","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E545","v":" to the FDEMS system,"},{"$f":"'Source Data'!F545","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to the FDEMS system,"}]
[{"$f":"'Source Data'!A546","v":"der.11"},{"$f":"'Source Data'!B546","v":"v"},{"$f":"'Source Data'!C546","v":0.99833499999999997},{"$f":"'Source Data'!D546","v":"system takes action before confirming changes with user"},{"$f":"'Source Data'!E546","v":" to shutdown DER systems in the FDEMS,"},{"$f":"'Source Data'!F546","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system takes action before confirming changes with user to shutdown DER systems in the FDEMS,"}]
[{"$f":"'Source Data'!A547","v":"der.11"},{"$f":"'Source Data'!B547","v":"v"},{"$f":"'Source Data'!C547","v":0.13730400000000001},{"$f":"'Source Data'!D547","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E547","v":" to the FDEMS network"},{"$f":"'Source Data'!F547","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the FDEMS network"}]
[{"$f":"'Source Data'!A548","v":"der.11"},{"$f":"'Source Data'!B548","v":"v"},{"$f":"'Source Data'!C548","v":0.54342199999999996},{"$f":"'Source Data'!D548","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E548","v":" that allows modification of the FDEMS software"},{"$f":"'Source Data'!F548","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access that allows modification of the FDEMS software"}]
[{"$f":"'Source Data'!A549","v":"der.11"},{"$f":"'Source Data'!B549","v":"i"},{"$f":"'Source Data'!C549","v":0.80206900000000003},{"$f":"'Source Data'!D549","v":"Depending upon the size of the facility, this unplanned loss of DER energy could cause power quality problems on the utility grid, including low voltage, harmonics, and a possible temporary feeder outage"},{"$f":"'Source Data'!E549","v":0},{"$f":"'Source Data'!F549","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Depending upon the size of the facility, this unplanned loss of DER energy could cause power quality problems on the utility grid, including low voltage, harmonics, and a possible temporary feeder outage0"}]
[{"$f":"'Source Data'!A550","v":"der.11"},{"$f":"'Source Data'!B550","v":"i"},{"$f":"'Source Data'!C550","v":0.526308},{"$f":"'Source Data'!D550","v":"The utility pays more for energy than necessary"},{"$f":"'Source Data'!E550","v":0},{"$f":"'Source Data'!F550","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility pays more for energy than necessary0"}]
[{"$f":"'Source Data'!A551","v":"der.11"},{"$f":"'Source Data'!B551","v":"i"},{"$f":"'Source Data'!C551","v":0.829488},{"$f":"'Source Data'!D551","v":"The utility experiences loss of reputation"},{"$f":"'Source Data'!E551","v":0},{"$f":"'Source Data'!F551","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility experiences loss of reputation0"}]
[{"$f":"'Source Data'!A552","v":"der.11"},{"$f":"'Source Data'!B552","v":"i"},{"$f":"'Source Data'!C552","v":0.15112},{"$f":"'Source Data'!D552","v":"The customer experiences higher costs due to not meeting the utility requests"},{"$f":"'Source Data'!E552","v":0},{"$f":"'Source Data'!F552","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The customer experiences higher costs due to not meeting the utility requests0"}]
[{"$f":"'Source Data'!A553","v":"der.11"},{"$f":"'Source Data'!B553","v":"m"},{"$f":"'Source Data'!C553","v":0.165184},{"$f":"'Source Data'!D553","v":"enforce least privilege"},{"$f":"'Source Data'!E553","v":" to access the FDEMS operating system and physical host"},{"$f":"'Source Data'!F553","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege to access the FDEMS operating system and physical host"}]
[{"$f":"'Source Data'!A554","v":"der.11"},{"$f":"'Source Data'!B554","v":"m"},{"$f":"'Source Data'!C554","v":0.80420000000000003},{"$f":"'Source Data'!D554","v":"enforce restrictive firewall rules"},{"$f":"'Source Data'!E554","v":" for access to the FDEMS network"},{"$f":"'Source Data'!F554","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce restrictive firewall rules for access to the FDEMS network"}]
[{"$f":"'Source Data'!A555","v":"der.11"},{"$f":"'Source Data'!B555","v":"m"},{"$f":"'Source Data'!C555","v":0.72030300000000003},{"$f":"'Source Data'!D555","v":"require multi-factor authentication"},{"$f":"'Source Data'!E555","v":" for users requesting remote access to the FDEMS"},{"$f":"'Source Data'!F555","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for users requesting remote access to the FDEMS"}]
[{"$f":"'Source Data'!A556","v":"der.11"},{"$f":"'Source Data'!B556","v":"m"},{"$f":"'Source Data'!C556","v":0.62071299999999996},{"$f":"'Source Data'!D556","v":"require application whitelisting"},{"$f":"'Source Data'!E556","v":" on the FDEMS"},{"$f":"'Source Data'!F556","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require application whitelisting on the FDEMS"}]
[{"$f":"'Source Data'!A557","v":"der.11"},{"$f":"'Source Data'!B557","v":"m"},{"$f":"'Source Data'!C557","v":0.24713199999999999},{"$f":"'Source Data'!D557","v":"generate alerts"},{"$f":"'Source Data'!E557","v":" upon shutdown of site DER systems"},{"$f":"'Source Data'!F557","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts upon shutdown of site DER systems"}]
[{"$f":"'Source Data'!A558","v":"der.11"},{"$f":"'Source Data'!B558","v":"m"},{"$f":"'Source Data'!C558","v":0.87309000000000003},{"$f":"'Source Data'!D558","v":"train personnel"},{"$f":"'Source Data'!E558","v":" including FDEMS owners and administrators on secure networking requirements"},{"$f":"'Source Data'!F558","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel including FDEMS owners and administrators on secure networking requirements"}]
[{"$f":"'Source Data'!A559","v":"der.11"},{"$f":"'Source Data'!B559","v":"m"},{"$f":"'Source Data'!C559","v":0.66824799999999995},{"$f":"'Source Data'!D559","v":"protect credentials"},{"$f":"'Source Data'!E559","v":" that allow access to the FDEMS network"},{"$f":"'Source Data'!F559","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials that allow access to the FDEMS network"}]
[{"$f":"'Source Data'!A560","v":"der.11"},{"$f":"'Source Data'!B560","v":"m"},{"$f":"'Source Data'!C560","v":0.65664900000000004},{"$f":"'Source Data'!D560","v":"protect credentials"},{"$f":"'Source Data'!E560","v":" for the FDEMS operating system that permit access to modify the FDEMS software"},{"$f":"'Source Data'!F560","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for the FDEMS operating system that permit access to modify the FDEMS software"}]
[{"$f":"'Source Data'!A561","v":"der.11"},{"$f":"'Source Data'!B561","v":"m"},{"$f":"'Source Data'!C561","v":0.99654900000000002},{"$f":"'Source Data'!D561","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E561","v":" to limit the privilege to install software on the FDEMS host"},{"$f":"'Source Data'!F561","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit the privilege to install software on the FDEMS host"}]
[{"$f":"'Source Data'!A562","v":"der.12"},{"$f":"'Source Data'!B562","v":"t"},{"$f":"'Source Data'!C562","v":0.69616299999999998},{"$f":"'Source Data'!D562","v":"Modified Management Settings for Substation FDEMS Impact Power Quality"},{"$f":"'Source Data'!E562","v":0},{"$f":"'Source Data'!F562","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Modified Management Settings for Substation FDEMS Impact Power Quality0"}]
[{"$f":"'Source Data'!A563","v":"der.12"},{"$f":"'Source Data'!B563","v":"d"},{"$f":"'Source Data'!C563","v":6.93941E-2},{"$f":"'Source Data'!D563","v":"A malicious individual accesses a utility FDEMS that manages DER generation and storage systems within a substation, and modifies the energy output, the volt-var curves, or other DER management settings. When the utility requests the FDEMS to control the DER systems to provide more vars, the FDEMS causes the DER systems to behave erratically and cause the substation to have power quality problems, including tripping of the transmission line breaker."},{"$f":"'Source Data'!E563","v":0},{"$f":"'Source Data'!F563","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A malicious individual accesses a utility FDEMS that manages DER generation and storage systems within a substation, and modifies the energy output, the volt-var curves, or other DER management settings. When the utility requests the FDEMS to control the DER systems to provide more vars, the FDEMS causes the DER systems to behave erratically and cause the substation to have power quality problems, including tripping of the transmission line breaker.0"}]
[{"$f":"'Source Data'!A564","v":"der.12"},{"$f":"'Source Data'!B564","v":"v"},{"$f":"'Source Data'!C564","v":0.37040600000000001},{"$f":"'Source Data'!D564","v":"unnecessary access is permitted to critical functions"},{"$f":"'Source Data'!E564","v":" that modify critical settings in the FDEMS,"},{"$f":"'Source Data'!F564","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to critical functions that modify critical settings in the FDEMS,"}]
[{"$f":"'Source Data'!A565","v":"der.12"},{"$f":"'Source Data'!B565","v":"v"},{"$f":"'Source Data'!C565","v":0.34684799999999999},{"$f":"'Source Data'!D565","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E565","v":" for the FDEMS network,"},{"$f":"'Source Data'!F565","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted for the FDEMS network,"}]
[{"$f":"'Source Data'!A566","v":"der.12"},{"$f":"'Source Data'!B566","v":"v"},{"$f":"'Source Data'!C566","v":0.88482300000000003},{"$f":"'Source Data'!D566","v":"unnecessary access is permitted to the operating system"},{"$f":"'Source Data'!E566","v":" hosting the FDEMS applications,"},{"$f":"'Source Data'!F566","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the operating system hosting the FDEMS applications,"}]
[{"$f":"'Source Data'!A567","v":"der.12"},{"$f":"'Source Data'!B567","v":"v"},{"$f":"'Source Data'!C567","v":0.78634999999999999},{"$f":"'Source Data'!D567","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E567","v":" to the FDEMS system,"},{"$f":"'Source Data'!F567","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to the FDEMS system,"}]
[{"$f":"'Source Data'!A568","v":"der.12"},{"$f":"'Source Data'!B568","v":"v"},{"$f":"'Source Data'!C568","v":0.79394399999999998},{"$f":"'Source Data'!D568","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E568","v":" to the FDEMS network"},{"$f":"'Source Data'!F568","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the FDEMS network"}]
[{"$f":"'Source Data'!A569","v":"der.12"},{"$f":"'Source Data'!B569","v":"v"},{"$f":"'Source Data'!C569","v":0.86334599999999995},{"$f":"'Source Data'!D569","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E569","v":" that allows modificatio of the FDEMS settings"},{"$f":"'Source Data'!F569","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access that allows modificatio of the FDEMS settings"}]
[{"$f":"'Source Data'!A570","v":"der.12"},{"$f":"'Source Data'!B570","v":"i"},{"$f":"'Source Data'!C570","v":0.155033},{"$f":"'Source Data'!D570","v":"Power system power quality problems, including erratic supply of vars to the transmission system"},{"$f":"'Source Data'!E570","v":0},{"$f":"'Source Data'!F570","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Power system power quality problems, including erratic supply of vars to the transmission system0"}]
[{"$f":"'Source Data'!A571","v":"der.12"},{"$f":"'Source Data'!B571","v":"i"},{"$f":"'Source Data'!C571","v":0.70926900000000004},{"$f":"'Source Data'!D571","v":"An outage of all feeders in the substation"},{"$f":"'Source Data'!E571","v":0},{"$f":"'Source Data'!F571","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An outage of all feeders in the substation0"}]
[{"$f":"'Source Data'!A572","v":"der.12"},{"$f":"'Source Data'!B572","v":"m"},{"$f":"'Source Data'!C572","v":0.44416600000000001},{"$f":"'Source Data'!D572","v":"restrict application access"},{"$f":"'Source Data'!E572","v":" for all FDEMS user interface interactions"},{"$f":"'Source Data'!F572","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict application access for all FDEMS user interface interactions"}]
[{"$f":"'Source Data'!A573","v":"der.12"},{"$f":"'Source Data'!B573","v":"m"},{"$f":"'Source Data'!C573","v":0.54627800000000004},{"$f":"'Source Data'!D573","v":"authenticate users"},{"$f":"'Source Data'!E573","v":" for all FDEMS user interface interactions"},{"$f":"'Source Data'!F573","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users for all FDEMS user interface interactions"}]
[{"$f":"'Source Data'!A574","v":"der.12"},{"$f":"'Source Data'!B574","v":"m"},{"$f":"'Source Data'!C574","v":0.71961900000000001},{"$f":"'Source Data'!D574","v":"enforce changing default passwords"},{"$f":"'Source Data'!E574","v":" as a system enforced step during installation"},{"$f":"'Source Data'!F574","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce changing default passwords as a system enforced step during installation"}]
[{"$f":"'Source Data'!A575","v":"der.12"},{"$f":"'Source Data'!B575","v":"m"},{"$f":"'Source Data'!C575","v":0.75810100000000002},{"$f":"'Source Data'!D575","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E575","v":" in the FDEMS system"},{"$f":"'Source Data'!F575","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control in the FDEMS system"}]
[{"$f":"'Source Data'!A576","v":"der.12"},{"$f":"'Source Data'!B576","v":"m"},{"$f":"'Source Data'!C576","v":9.6368099999999998E-2},{"$f":"'Source Data'!D576","v":"enforce least privilege"},{"$f":"'Source Data'!E576","v":" for access to the FDEMS operating system and physical host"},{"$f":"'Source Data'!F576","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege for access to the FDEMS operating system and physical host"}]
[{"$f":"'Source Data'!A577","v":"der.12"},{"$f":"'Source Data'!B577","v":"m"},{"$f":"'Source Data'!C577","v":0.83083099999999999},{"$f":"'Source Data'!D577","v":"enforce restrictive firewall rules"},{"$f":"'Source Data'!E577","v":" for access to the FDEMS network"},{"$f":"'Source Data'!F577","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce restrictive firewall rules for access to the FDEMS network"}]
[{"$f":"'Source Data'!A578","v":"der.12"},{"$f":"'Source Data'!B578","v":"m"},{"$f":"'Source Data'!C578","v":0.42305100000000001},{"$f":"'Source Data'!D578","v":"require multi-factor authentication"},{"$f":"'Source Data'!E578","v":" for users requesting remote access to the FDEMS"},{"$f":"'Source Data'!F578","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for users requesting remote access to the FDEMS"}]
[{"$f":"'Source Data'!A579","v":"der.12"},{"$f":"'Source Data'!B579","v":"m"},{"$f":"'Source Data'!C579","v":0.70166099999999998},{"$f":"'Source Data'!D579","v":"protect credentials"},{"$f":"'Source Data'!E579","v":" that allow access to the FDEMS network"},{"$f":"'Source Data'!F579","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials that allow access to the FDEMS network"}]
[{"$f":"'Source Data'!A580","v":"der.12"},{"$f":"'Source Data'!B580","v":"m"},{"$f":"'Source Data'!C580","v":0.28506500000000001},{"$f":"'Source Data'!D580","v":"protect credentials"},{"$f":"'Source Data'!E580","v":" for the FDEMS application or operating system that permit access to modify the FDEMS settings"},{"$f":"'Source Data'!F580","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for the FDEMS application or operating system that permit access to modify the FDEMS settings"}]
[{"$f":"'Source Data'!A581","v":"der.13"},{"$f":"'Source Data'!B581","v":"t"},{"$f":"'Source Data'!C581","v":0.20522399999999999},{"$f":"'Source Data'!D581","v":"Custom Malware Gives Threat Agent Control of FDEMS"},{"$f":"'Source Data'!E581","v":0},{"$f":"'Source Data'!F581","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Custom Malware Gives Threat Agent Control of FDEMS0"}]
[{"$f":"'Source Data'!A582","v":"der.13"},{"$f":"'Source Data'!B582","v":"d"},{"$f":"'Source Data'!C582","v":0.73611899999999997},{"$f":"'Source Data'!D582","v":"A threat agent compromises the operating system/operating environment platform of a FDEMS and installs malware. The malware leverages automated machine-to-machine authentication mechanisms and/or compromises stored cryptographic authentication keys to allow it to impersonate the authorized FDEMS software. This gives the threat agent complete control over all of the FDEMS resources and remote resources controlled or managed by the FDEMS."},{"$f":"'Source Data'!E582","v":0},{"$f":"'Source Data'!F582","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent compromises the operating system/operating environment platform of a FDEMS and installs malware. The malware leverages automated machine-to-machine authentication mechanisms and/or compromises stored cryptographic authentication keys to allow it to impersonate the authorized FDEMS software. This gives the threat agent complete control over all of the FDEMS resources and remote resources controlled or managed by the FDEMS.0"}]
[{"$f":"'Source Data'!A583","v":"der.13"},{"$f":"'Source Data'!B583","v":"v"},{"$f":"'Source Data'!C583","v":0.43350699999999998},{"$f":"'Source Data'!D583","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E583","v":" to embedded equipment in the supply chain, installation organization or maintenance organization,"},{"$f":"'Source Data'!F583","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to embedded equipment in the supply chain, installation organization or maintenance organization,"}]
[{"$f":"'Source Data'!A584","v":"der.13"},{"$f":"'Source Data'!B584","v":"v"},{"$f":"'Source Data'!C584","v":0.80885600000000002},{"$f":"'Source Data'!D584","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Source Data'!E584","v":" between the FDEMS and the Internet, allowing for Internet-based malware delivery mechanisms,"},{"$f":"'Source Data'!F584","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interfaces permit unnecessary traffic flows between the FDEMS and the Internet, allowing for Internet-based malware delivery mechanisms,"}]
[{"$f":"'Source Data'!A585","v":"der.13"},{"$f":"'Source Data'!B585","v":"v"},{"$f":"'Source Data'!C585","v":0.18868499999999999},{"$f":"'Source Data'!D585","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Source Data'!E585","v":" permitting compromise of the FDEMS platform,"},{"$f":"'Source Data'!F585","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"software patches are not checked regularly to ensure that they are current permitting compromise of the FDEMS platform,"}]
[{"$f":"'Source Data'!A586","v":"der.13"},{"$f":"'Source Data'!B586","v":"v"},{"$f":"'Source Data'!C586","v":0.98347099999999998},{"$f":"'Source Data'!D586","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E586","v":" to install software on the FDEMS platform"},{"$f":"'Source Data'!F586","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to install software on the FDEMS platform"}]
[{"$f":"'Source Data'!A587","v":"der.13"},{"$f":"'Source Data'!B587","v":"i"},{"$f":"'Source Data'!C587","v":0.40895500000000001},{"$f":"'Source Data'!D587","v":"The FDEMS owner may experience loss of revenue as well as possible penalties for not responding as contracted"},{"$f":"'Source Data'!E587","v":0},{"$f":"'Source Data'!F587","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The FDEMS owner may experience loss of revenue as well as possible penalties for not responding as contracted0"}]
[{"$f":"'Source Data'!A588","v":"der.13"},{"$f":"'Source Data'!B588","v":"i"},{"$f":"'Source Data'!C588","v":0.89338799999999996},{"$f":"'Source Data'!D588","v":"Over a long period while avoiding detection, the threat agent can cause changes to the FDEMS commands to benefit a rival FDEMS installation"},{"$f":"'Source Data'!E588","v":0},{"$f":"'Source Data'!F588","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Over a long period while avoiding detection, the threat agent can cause changes to the FDEMS commands to benefit a rival FDEMS installation0"}]
[{"$f":"'Source Data'!A589","v":"der.13"},{"$f":"'Source Data'!B589","v":"i"},{"$f":"'Source Data'!C589","v":0.87099700000000002},{"$f":"'Source Data'!D589","v":"Other unexpected impacts, since the threat agent has undetected control of the FDEMS"},{"$f":"'Source Data'!E589","v":0},{"$f":"'Source Data'!F589","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Other unexpected impacts, since the threat agent has undetected control of the FDEMS0"}]
[{"$f":"'Source Data'!A590","v":"der.13"},{"$f":"'Source Data'!B590","v":"m"},{"$f":"'Source Data'!C590","v":0.11404300000000001},{"$f":"'Source Data'!D590","v":"require secure boot loader"},{"$f":"'Source Data'!E590","v":" "},{"$f":"'Source Data'!F590","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require secure boot loader "}]
[{"$f":"'Source Data'!A591","v":"der.13"},{"$f":"'Source Data'!B591","v":"m"},{"$f":"'Source Data'!C591","v":0.93005899999999997},{"$f":"'Source Data'!D591","v":"check software execution integrity"},{"$f":"'Source Data'!E591","v":" , since software may be compromised when loaded for execution,"},{"$f":"'Source Data'!F591","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity , since software may be compromised when loaded for execution,"}]
[{"$f":"'Source Data'!A592","v":"der.13"},{"$f":"'Source Data'!B592","v":"m"},{"$f":"'Source Data'!C592","v":0.17941799999999999},{"$f":"'Source Data'!D592","v":"check software file integrity"},{"$f":"'Source Data'!E592","v":" for software executables and images"},{"$f":"'Source Data'!F592","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity for software executables and images"}]
[{"$f":"'Source Data'!A593","v":"der.13"},{"$f":"'Source Data'!B593","v":"m"},{"$f":"'Source Data'!C593","v":0.92818599999999996},{"$f":"'Source Data'!D593","v":"check OS integrity"},{"$f":"'Source Data'!E593","v":" (e.g., virtual machine monitoring, rootkit detection, etc.)"},{"$f":"'Source Data'!F593","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check OS integrity (e.g., virtual machine monitoring, rootkit detection, etc.)"}]
[{"$f":"'Source Data'!A594","v":"der.13"},{"$f":"'Source Data'!B594","v":"m"},{"$f":"'Source Data'!C594","v":0.66208900000000004},{"$f":"'Source Data'!D594","v":"create audit logs"},{"$f":"'Source Data'!E594","v":" to capture commands"},{"$f":"'Source Data'!F594","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs to capture commands"}]
[{"$f":"'Source Data'!A595","v":"der.13"},{"$f":"'Source Data'!B595","v":"m"},{"$f":"'Source Data'!C595","v":0.42152600000000001},{"$f":"'Source Data'!D595","v":"protect credentials"},{"$f":"'Source Data'!E595","v":" required for installing software on the FDEMS platform, in user and administrative processes,"},{"$f":"'Source Data'!F595","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials required for installing software on the FDEMS platform, in user and administrative processes,"}]
[{"$f":"'Source Data'!A596","v":"der.13"},{"$f":"'Source Data'!B596","v":"m"},{"$f":"'Source Data'!C596","v":5.3548400000000003E-2},{"$f":"'Source Data'!D596","v":"maintain patches"},{"$f":"'Source Data'!E596","v":" on the FDEMS system,"},{"$f":"'Source Data'!F596","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches on the FDEMS system,"}]
[{"$f":"'Source Data'!A597","v":"der.14"},{"$f":"'Source Data'!B597","v":"t"},{"$f":"'Source Data'!C597","v":0.70377900000000004},{"$f":"'Source Data'!D597","v":"DER Systems Shut Down by Spoofed SCADA Control Command"},{"$f":"'Source Data'!E597","v":0},{"$f":"'Source Data'!F597","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"DER Systems Shut Down by Spoofed SCADA Control Command0"}]
[{"$f":"'Source Data'!A598","v":"der.14"},{"$f":"'Source Data'!B598","v":"d"},{"$f":"'Source Data'!C598","v":0.58077000000000001},{"$f":"'Source Data'!D598","v":" threat agent spoofs DER SCADA control commands to perform emergency shutdowns of a large number of DER systems simultaneously."},{"$f":"'Source Data'!E598","v":0},{"$f":"'Source Data'!F598","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":" threat agent spoofs DER SCADA control commands to perform emergency shutdowns of a large number of DER systems simultaneously.0"}]
[{"$f":"'Source Data'!A599","v":"der.14"},{"$f":"'Source Data'!B599","v":"v"},{"$f":"'Source Data'!C599","v":0.30059900000000001},{"$f":"'Source Data'!D599","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E599","v":" in the DER SCADA communication protocols,"},{"$f":"'Source Data'!F599","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals in the DER SCADA communication protocols,"}]
[{"$f":"'Source Data'!A600","v":"der.14"},{"$f":"'Source Data'!B600","v":"v"},{"$f":"'Source Data'!C600","v":4.9188000000000003E-2},{"$f":"'Source Data'!D600","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E600","v":" in the DER SCADA communication protocols,"},{"$f":"'Source Data'!F600","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in the DER SCADA communication protocols,"}]
[{"$f":"'Source Data'!A601","v":"der.14"},{"$f":"'Source Data'!B601","v":"v"},{"$f":"'Source Data'!C601","v":0.53380399999999995},{"$f":"'Source Data'!D601","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E601","v":" specifically messages sent to DER systems but not originated by the SCADA system,"},{"$f":"'Source Data'!F601","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity specifically messages sent to DER systems but not originated by the SCADA system,"}]
[{"$f":"'Source Data'!A602","v":"der.14"},{"$f":"'Source Data'!B602","v":"v"},{"$f":"'Source Data'!C602","v":0.27024300000000001},{"$f":"'Source Data'!D602","v":"unnecessary access is permitted to system functions"},{"$f":"'Source Data'!E602","v":" for the DER SCADA system, permitting an adversary to gather information about how to spoof shutdown messages."},{"$f":"'Source Data'!F602","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to system functions for the DER SCADA system, permitting an adversary to gather information about how to spoof shutdown messages."}]
[{"$f":"'Source Data'!A603","v":"der.14"},{"$f":"'Source Data'!B603","v":"i"},{"$f":"'Source Data'!C603","v":0.62441199999999997},{"$f":"'Source Data'!D603","v":"Power system instability, including outages and power quality problems"},{"$f":"'Source Data'!E603","v":0},{"$f":"'Source Data'!F603","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Power system instability, including outages and power quality problems0"}]
[{"$f":"'Source Data'!A604","v":"der.14"},{"$f":"'Source Data'!B604","v":"i"},{"$f":"'Source Data'!C604","v":0.61464600000000003},{"$f":"'Source Data'!D604","v":"Utility legal costs related to DER owner litigation for loss of revenue"},{"$f":"'Source Data'!E604","v":0},{"$f":"'Source Data'!F604","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility legal costs related to DER owner litigation for loss of revenue0"}]
[{"$f":"'Source Data'!A605","v":"der.14"},{"$f":"'Source Data'!B605","v":"m"},{"$f":"'Source Data'!C605","v":0.75536099999999995},{"$f":"'Source Data'!D605","v":"limit events"},{"$f":"'Source Data'!E605","v":" specifically the number of shutdown events of DER systems within a specified time period"},{"$f":"'Source Data'!F605","v":"enforce limits"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"limit events specifically the number of shutdown events of DER systems within a specified time period"}]
[{"$f":"'Source Data'!A606","v":"der.14"},{"$f":"'Source Data'!B606","v":"m"},{"$f":"'Source Data'!C606","v":0.86117999999999995},{"$f":"'Source Data'!D606","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E606","v":" in the DER SCADA"},{"$f":"'Source Data'!F606","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control in the DER SCADA"}]
[{"$f":"'Source Data'!A607","v":"der.14"},{"$f":"'Source Data'!B607","v":"m"},{"$f":"'Source Data'!C607","v":0.17894699999999999},{"$f":"'Source Data'!D607","v":"authenticate data source"},{"$f":"'Source Data'!E607","v":" for the DER SCADA protocols"},{"$f":"'Source Data'!F607","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate data source for the DER SCADA protocols"}]
[{"$f":"'Source Data'!A608","v":"der.14"},{"$f":"'Source Data'!B608","v":"m"},{"$f":"'Source Data'!C608","v":0.25484699999999999},{"$f":"'Source Data'!D608","v":"authenticate messages"},{"$f":"'Source Data'!E608","v":" that convey DER SCADA control commands"},{"$f":"'Source Data'!F608","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages that convey DER SCADA control commands"}]
[{"$f":"'Source Data'!A609","v":"der.14"},{"$f":"'Source Data'!B609","v":"m"},{"$f":"'Source Data'!C609","v":0.411165},{"$f":"'Source Data'!D609","v":"validate inputs"},{"$f":"'Source Data'!E609","v":" (as a consistency check) for the DER SCADA control commands"},{"$f":"'Source Data'!F609","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate inputs (as a consistency check) for the DER SCADA control commands"}]
[{"$f":"'Source Data'!A610","v":"der.14"},{"$f":"'Source Data'!B610","v":"m"},{"$f":"'Source Data'!C610","v":0.78492300000000004},{"$f":"'Source Data'!D610","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E610","v":" as part of DER SCADA network management"},{"$f":"'Source Data'!F610","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention as part of DER SCADA network management"}]
[{"$f":"'Source Data'!A611","v":"der.15"},{"$f":"'Source Data'!B611","v":"t"},{"$f":"'Source Data'!C611","v":0.918763},{"$f":"'Source Data'!D611","v":"Threat Agent Spoofs DER Data Monitored by DER SCADA Systems"},{"$f":"'Source Data'!E611","v":0},{"$f":"'Source Data'!F611","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat Agent Spoofs DER Data Monitored by DER SCADA Systems0"}]
[{"$f":"'Source Data'!A612","v":"der.15"},{"$f":"'Source Data'!B612","v":"d"},{"$f":"'Source Data'!C612","v":5.4482599999999999E-2},{"$f":"'Source Data'!D612","v":"A threat agent modifies the industrial and the larger commercial DER data being monitored by the utility distribution DER SCADA system in real-time, altering the load value so that it is much higher than the actual value. Although this modification does not affect the monthly revenue metering for these DER systems, it causes the utility to request and pay for additional ancillary services from a neighboring DER storage system."},{"$f":"'Source Data'!E612","v":0},{"$f":"'Source Data'!F612","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent modifies the industrial and the larger commercial DER data being monitored by the utility distribution DER SCADA system in real-time, altering the load value so that it is much higher than the actual value. Although this modification does not affect the monthly revenue metering for these DER systems, it causes the utility to request and pay for additional ancillary services from a neighboring DER storage system.0"}]
[{"$f":"'Source Data'!A613","v":"der.15"},{"$f":"'Source Data'!B613","v":"v"},{"$f":"'Source Data'!C613","v":0.67745699999999998},{"$f":"'Source Data'!D613","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E613","v":" to load value data in the DER SCADA communication protocols,"},{"$f":"'Source Data'!F613","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to load value data in the DER SCADA communication protocols,"}]
[{"$f":"'Source Data'!A614","v":"der.15"},{"$f":"'Source Data'!B614","v":"v"},{"$f":"'Source Data'!C614","v":0.54907499999999998},{"$f":"'Source Data'!D614","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Source Data'!E614","v":" between load value and meter values."},{"$f":"'Source Data'!F614","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system assumes data inputs and resulting calculations are accurate between load value and meter values."}]
[{"$f":"'Source Data'!A615","v":"der.15"},{"$f":"'Source Data'!B615","v":"v"},{"$f":"'Source Data'!C615","v":0.14524500000000001},{"$f":"'Source Data'!D615","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E615","v":" in the DER SCADA communication protocols"},{"$f":"'Source Data'!F615","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in the DER SCADA communication protocols"}]
[{"$f":"'Source Data'!A616","v":"der.15"},{"$f":"'Source Data'!B616","v":"v"},{"$f":"'Source Data'!C616","v":0.95003300000000002},{"$f":"'Source Data'!D616","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E616","v":" specifically adversary presence on the network capable of intercepting and modifying messages."},{"$f":"'Source Data'!F616","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity specifically adversary presence on the network capable of intercepting and modifying messages."}]
[{"$f":"'Source Data'!A617","v":"der.15"},{"$f":"'Source Data'!B617","v":"i"},{"$f":"'Source Data'!C617","v":0.99905200000000005},{"$f":"'Source Data'!D617","v":"Increased utility costs for unnecessary ancillary services"},{"$f":"'Source Data'!E617","v":0},{"$f":"'Source Data'!F617","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Increased utility costs for unnecessary ancillary services0"}]
[{"$f":"'Source Data'!A618","v":"der.15"},{"$f":"'Source Data'!B618","v":"i"},{"$f":"'Source Data'!C618","v":0.93636600000000003},{"$f":"'Source Data'!D618","v":"Utility legal costs for finding and litigating the threat agent"},{"$f":"'Source Data'!E618","v":0},{"$f":"'Source Data'!F618","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility legal costs for finding and litigating the threat agent0"}]
[{"$f":"'Source Data'!A619","v":"der.15"},{"$f":"'Source Data'!B619","v":"m"},{"$f":"'Source Data'!C619","v":0.31004999999999999},{"$f":"'Source Data'!D619","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E619","v":" for the DER SCADA"},{"$f":"'Source Data'!F619","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control for the DER SCADA"}]
[{"$f":"'Source Data'!A620","v":"der.15"},{"$f":"'Source Data'!B620","v":"m"},{"$f":"'Source Data'!C620","v":0.216998},{"$f":"'Source Data'!D620","v":"authenticate data source"},{"$f":"'Source Data'!E620","v":" for the DER SCADA protocols"},{"$f":"'Source Data'!F620","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate data source for the DER SCADA protocols"}]
[{"$f":"'Source Data'!A621","v":"der.15"},{"$f":"'Source Data'!B621","v":"m"},{"$f":"'Source Data'!C621","v":0.13048799999999999},{"$f":"'Source Data'!D621","v":"authenticate messages"},{"$f":"'Source Data'!E621","v":" that convey the DER SCADA control commands"},{"$f":"'Source Data'!F621","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages that convey the DER SCADA control commands"}]
[{"$f":"'Source Data'!A622","v":"der.15"},{"$f":"'Source Data'!B622","v":"m"},{"$f":"'Source Data'!C622","v":0.17322299999999999},{"$f":"'Source Data'!D622","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E622","v":" as part of DER SCADA network management"},{"$f":"'Source Data'!F622","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention as part of DER SCADA network management"}]
[{"$f":"'Source Data'!A623","v":"der.16"},{"$f":"'Source Data'!B623","v":"t"},{"$f":"'Source Data'!C623","v":0.29375499999999999},{"$f":"'Source Data'!D623","v":"DER SCADA System Issues Invalid Commands"},{"$f":"'Source Data'!E623","v":0},{"$f":"'Source Data'!F623","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"DER SCADA System Issues Invalid Commands0"}]
[{"$f":"'Source Data'!A624","v":"der.16"},{"$f":"'Source Data'!B624","v":"d"},{"$f":"'Source Data'!C624","v":0.29209099999999999},{"$f":"'Source Data'!D624","v":"A threat agent breaches a DER SCADA system and causes the DER SCADA system to issue an invalid command to all DER systems. Since DER systems may react differently to invalid commands, the power system experiences immediate and rapid fluctuations as some DER systems shut down, while others go into default mode with no volt-var support, still others revert to full output, and a few become islanded microgrids. The distribution equipment tries to compensate automatically, but causes more problems as the voltage experiences severe surges and sags."},{"$f":"'Source Data'!E624","v":0},{"$f":"'Source Data'!F624","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent breaches a DER SCADA system and causes the DER SCADA system to issue an invalid command to all DER systems. Since DER systems may react differently to invalid commands, the power system experiences immediate and rapid fluctuations as some DER systems shut down, while others go into default mode with no volt-var support, still others revert to full output, and a few become islanded microgrids. The distribution equipment tries to compensate automatically, but causes more problems as the voltage experiences severe surges and sags.0"}]
[{"$f":"'Source Data'!A625","v":"der.16"},{"$f":"'Source Data'!B625","v":"v"},{"$f":"'Source Data'!C625","v":9.4159300000000001E-2},{"$f":"'Source Data'!D625","v":"system permits potentially harmful command sequences"},{"$f":"'Source Data'!E625","v":" in particular issuance of commands with unknown impact on the DER systems,"},{"$f":"'Source Data'!F625","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits potentially harmful command sequences in particular issuance of commands with unknown impact on the DER systems,"}]
[{"$f":"'Source Data'!A626","v":"der.16"},{"$f":"'Source Data'!B626","v":"v"},{"$f":"'Source Data'!C626","v":0.85054700000000005},{"$f":"'Source Data'!D626","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E626","v":" to SCADA application data or software that allows the DER SCADA system to send invalid commands to DER systems,"},{"$f":"'Source Data'!F626","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to SCADA application data or software that allows the DER SCADA system to send invalid commands to DER systems,"}]
[{"$f":"'Source Data'!A627","v":"der.16"},{"$f":"'Source Data'!B627","v":"v"},{"$f":"'Source Data'!C627","v":0.29033500000000001},{"$f":"'Source Data'!D627","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E627","v":" to the SCADA DER system,"},{"$f":"'Source Data'!F627","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the SCADA DER system,"}]
[{"$f":"'Source Data'!A628","v":"der.16"},{"$f":"'Source Data'!B628","v":"i"},{"$f":"'Source Data'!C628","v":0.62046699999999999},{"$f":"'Source Data'!D628","v":"Power system rapid fluctuations that cause power quality problems for customers, including outages"},{"$f":"'Source Data'!E628","v":0},{"$f":"'Source Data'!F628","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Power system rapid fluctuations that cause power quality problems for customers, including outages0"}]
[{"$f":"'Source Data'!A629","v":"der.16"},{"$f":"'Source Data'!B629","v":"i"},{"$f":"'Source Data'!C629","v":0.44995499999999999},{"$f":"'Source Data'!D629","v":"Equipment damage (that can lead to loss of life) due to power system surges and sags"},{"$f":"'Source Data'!E629","v":0},{"$f":"'Source Data'!F629","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Equipment damage (that can lead to loss of life) due to power system surges and sags0"}]
[{"$f":"'Source Data'!A630","v":"der.16"},{"$f":"'Source Data'!B630","v":"i"},{"$f":"'Source Data'!C630","v":0.60107500000000003},{"$f":"'Source Data'!D630","v":"Transmission power quality problem"},{"$f":"'Source Data'!E630","v":0},{"$f":"'Source Data'!F630","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Transmission power quality problem0"}]
[{"$f":"'Source Data'!A631","v":"der.16"},{"$f":"'Source Data'!B631","v":"m"},{"$f":"'Source Data'!C631","v":0.76626000000000005},{"$f":"'Source Data'!D631","v":"authenticate users"},{"$f":"'Source Data'!E631","v":" accessing the DER SCADA system"},{"$f":"'Source Data'!F631","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users accessing the DER SCADA system"}]
[{"$f":"'Source Data'!A632","v":"der.16"},{"$f":"'Source Data'!B632","v":"m"},{"$f":"'Source Data'!C632","v":0.57045900000000005},{"$f":"'Source Data'!D632","v":"authenticate messages"},{"$f":"'Source Data'!E632","v":" communicated in the DER SCADA network"},{"$f":"'Source Data'!F632","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages communicated in the DER SCADA network"}]
[{"$f":"'Source Data'!A633","v":"der.16"},{"$f":"'Source Data'!B633","v":"m"},{"$f":"'Source Data'!C633","v":0.29076200000000002},{"$f":"'Source Data'!D633","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E633","v":" in the utility's DER SCADA system,"},{"$f":"'Source Data'!F633","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control in the utility's DER SCADA system,"}]
[{"$f":"'Source Data'!A634","v":"der.16"},{"$f":"'Source Data'!B634","v":"m"},{"$f":"'Source Data'!C634","v":0.91147599999999995},{"$f":"'Source Data'!D634","v":"validate inputs"},{"$f":"'Source Data'!E634","v":" that the DER system receives from the DER SCADA system"},{"$f":"'Source Data'!F634","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate inputs that the DER system receives from the DER SCADA system"}]
[{"$f":"'Source Data'!A635","v":"der.16"},{"$f":"'Source Data'!B635","v":"m"},{"$f":"'Source Data'!C635","v":0.62756299999999998},{"$f":"'Source Data'!D635","v":"protect credentials"},{"$f":"'Source Data'!E635","v":" that allow access to the DER SCADA network"},{"$f":"'Source Data'!F635","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials that allow access to the DER SCADA network"}]
[{"$f":"'Source Data'!A636","v":"der.16"},{"$f":"'Source Data'!B636","v":"m"},{"$f":"'Source Data'!C636","v":0.96944699999999995},{"$f":"'Source Data'!D636","v":"protect credentials"},{"$f":"'Source Data'!E636","v":" for DER SCADA application and operating system"},{"$f":"'Source Data'!F636","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for DER SCADA application and operating system"}]
[{"$f":"'Source Data'!A637","v":"der.17"},{"$f":"'Source Data'!B637","v":"t"},{"$f":"'Source Data'!C637","v":0.158607},{"$f":"'Source Data'!D637","v":"Utility DERMS Miscalculates DER Energy/Service Requests"},{"$f":"'Source Data'!E637","v":0},{"$f":"'Source Data'!F637","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility DERMS Miscalculates DER Energy/Service Requests0"}]
[{"$f":"'Source Data'!A638","v":"der.17"},{"$f":"'Source Data'!B638","v":"d"},{"$f":"'Source Data'!C638","v":3.1697299999999998E-2},{"$f":"'Source Data'!D638","v":"A malicious individual modifies the utility DERMS system power flow analysis function (input, output, or power flow configuration) that determines what energy and ancillary services to request from the DER systems. Under these modifications, the results still remain \"reasonable,\" but lead to benefits to some DER systems and to the detriment of others."},{"$f":"'Source Data'!E638","v":0},{"$f":"'Source Data'!F638","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A malicious individual modifies the utility DERMS system power flow analysis function (input, output, or power flow configuration) that determines what energy and ancillary services to request from the DER systems. Under these modifications, the results still remain \"reasonable,\" but lead to benefits to some DER systems and to the detriment of others.0"}]
[{"$f":"'Source Data'!A639","v":"der.17"},{"$f":"'Source Data'!B639","v":"v"},{"$f":"'Source Data'!C639","v":0.72785999999999995},{"$f":"'Source Data'!D639","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E639","v":" to the DERMS system,"},{"$f":"'Source Data'!F639","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the DERMS system,"}]
[{"$f":"'Source Data'!A640","v":"der.17"},{"$f":"'Source Data'!B640","v":"v"},{"$f":"'Source Data'!C640","v":0.79725500000000005},{"$f":"'Source Data'!D640","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Source Data'!E640","v":" in the software application and configuration data that provides DERMS power flow analysis functionality."},{"$f":"'Source Data'!F640","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system assumes data inputs and resulting calculations are accurate in the software application and configuration data that provides DERMS power flow analysis functionality."}]
[{"$f":"'Source Data'!A641","v":"der.17"},{"$f":"'Source Data'!B641","v":"v"},{"$f":"'Source Data'!C641","v":0.87648999999999999},{"$f":"'Source Data'!D641","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E641","v":" to the DERMS system power flow analysis function"},{"$f":"'Source Data'!F641","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the DERMS system power flow analysis function"}]
[{"$f":"'Source Data'!A642","v":"der.17"},{"$f":"'Source Data'!B642","v":"i"},{"$f":"'Source Data'!C642","v":0.167661},{"$f":"'Source Data'!D642","v":"Financial gain for certain DER systems at the expense of the utility and/or other DER owners"},{"$f":"'Source Data'!E642","v":0},{"$f":"'Source Data'!F642","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Financial gain for certain DER systems at the expense of the utility and/or other DER owners0"}]
[{"$f":"'Source Data'!A643","v":"der.17"},{"$f":"'Source Data'!B643","v":"i"},{"$f":"'Source Data'!C643","v":0.51450899999999999},{"$f":"'Source Data'!D643","v":"Legal costs for litigation with adversely affected DER owners"},{"$f":"'Source Data'!E643","v":0},{"$f":"'Source Data'!F643","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Legal costs for litigation with adversely affected DER owners0"}]
[{"$f":"'Source Data'!A644","v":"der.17"},{"$f":"'Source Data'!B644","v":"m"},{"$f":"'Source Data'!C644","v":0.39933200000000002},{"$f":"'Source Data'!D644","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E644","v":" in the utility's DERMS system to limit those users authorized to change pricing signals"},{"$f":"'Source Data'!F644","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control in the utility's DERMS system to limit those users authorized to change pricing signals"}]
[{"$f":"'Source Data'!A645","v":"der.17"},{"$f":"'Source Data'!B645","v":"m"},{"$f":"'Source Data'!C645","v":0.18568200000000001},{"$f":"'Source Data'!D645","v":"require multi-factor authentication"},{"$f":"'Source Data'!E645","v":" for operationally critical modifications"},{"$f":"'Source Data'!F645","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for operationally critical modifications"}]
[{"$f":"'Source Data'!A646","v":"der.17"},{"$f":"'Source Data'!B646","v":"m"},{"$f":"'Source Data'!C646","v":0.34071400000000002},{"$f":"'Source Data'!D646","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E646","v":" as part of the DERMS network and system management capabilities"},{"$f":"'Source Data'!F646","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention as part of the DERMS network and system management capabilities"}]
[{"$f":"'Source Data'!A647","v":"der.17"},{"$f":"'Source Data'!B647","v":"m"},{"$f":"'Source Data'!C647","v":4.9983E-2},{"$f":"'Source Data'!D647","v":"create audit logs"},{"$f":"'Source Data'!E647","v":" for changes to DERMS power flow analysis configuration data"},{"$f":"'Source Data'!F647","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs for changes to DERMS power flow analysis configuration data"}]
[{"$f":"'Source Data'!A648","v":"der.17"},{"$f":"'Source Data'!B648","v":"m"},{"$f":"'Source Data'!C648","v":0.49414799999999998},{"$f":"'Source Data'!D648","v":"generate alerts"},{"$f":"'Source Data'!E648","v":" if DERMS power flow analysis configuration data or DERMS software is changed, or is changed at an unexpected time or to an unexpected value (based on the logging information)"},{"$f":"'Source Data'!F648","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts if DERMS power flow analysis configuration data or DERMS software is changed, or is changed at an unexpected time or to an unexpected value (based on the logging information)"}]
[{"$f":"'Source Data'!A649","v":"der.18"},{"$f":"'Source Data'!B649","v":"t"},{"$f":"'Source Data'!C649","v":4.0426900000000002E-2},{"$f":"'Source Data'!D649","v":"Microgrid Disconnect Process Compromised via DERMS"},{"$f":"'Source Data'!E649","v":0},{"$f":"'Source Data'!F649","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Microgrid Disconnect Process Compromised via DERMS0"}]
[{"$f":"'Source Data'!A650","v":"der.18"},{"$f":"'Source Data'!B650","v":"d"},{"$f":"'Source Data'!C650","v":0.760046},{"$f":"'Source Data'!D650","v":"A threat agent gains access to the utility DERMS system and alters the conditions that determine when a utility has permission to disconnect a pre-established microgrid from the grid. This modification causes the microgrid either to disconnect at some random time in the future, or to prevent it from disconnecting even when it is supposed to disconnect (e.g., in the case of an outage)."},{"$f":"'Source Data'!E650","v":0},{"$f":"'Source Data'!F650","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent gains access to the utility DERMS system and alters the conditions that determine when a utility has permission to disconnect a pre-established microgrid from the grid. This modification causes the microgrid either to disconnect at some random time in the future, or to prevent it from disconnecting even when it is supposed to disconnect (e.g., in the case of an outage).0"}]
[{"$f":"'Source Data'!A651","v":"der.18"},{"$f":"'Source Data'!B651","v":"v"},{"$f":"'Source Data'!C651","v":0.518146},{"$f":"'Source Data'!D651","v":"unnecessary access is permitted to system functions"},{"$f":"'Source Data'!E651","v":" in the DERMS system,"},{"$f":"'Source Data'!F651","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to system functions in the DERMS system,"}]
[{"$f":"'Source Data'!A652","v":"der.18"},{"$f":"'Source Data'!B652","v":"v"},{"$f":"'Source Data'!C652","v":0.61451500000000003},{"$f":"'Source Data'!D652","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E652","v":" to utility permissions for microgrid disconnect,"},{"$f":"'Source Data'!F652","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to utility permissions for microgrid disconnect,"}]
[{"$f":"'Source Data'!A653","v":"der.18"},{"$f":"'Source Data'!B653","v":"v"},{"$f":"'Source Data'!C653","v":0.44534499999999999},{"$f":"'Source Data'!D653","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E653","v":" to convey a command to modify utility permission for microgrid disconnect,"},{"$f":"'Source Data'!F653","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals to convey a command to modify utility permission for microgrid disconnect,"}]
[{"$f":"'Source Data'!A654","v":"der.18"},{"$f":"'Source Data'!B654","v":"v"},{"$f":"'Source Data'!C654","v":0.86839599999999995},{"$f":"'Source Data'!D654","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E654","v":" "},{"$f":"'Source Data'!F654","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message "}]
[{"$f":"'Source Data'!A655","v":"der.18"},{"$f":"'Source Data'!B655","v":"i"},{"$f":"'Source Data'!C655","v":7.3620000000000005E-2},{"$f":"'Source Data'!D655","v":"Since the microgrid may not be prepared to disconnect from the grid or may be brought down during the grid outage, it will experience a complete outage"},{"$f":"'Source Data'!E655","v":0},{"$f":"'Source Data'!F655","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Since the microgrid may not be prepared to disconnect from the grid or may be brought down during the grid outage, it will experience a complete outage0"}]
[{"$f":"'Source Data'!A656","v":"der.18"},{"$f":"'Source Data'!B656","v":"i"},{"$f":"'Source Data'!C656","v":0.80973899999999999},{"$f":"'Source Data'!D656","v":"Legal costs for litigation with the adversely affected customers"},{"$f":"'Source Data'!E656","v":0},{"$f":"'Source Data'!F656","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Legal costs for litigation with the adversely affected customers0"}]
[{"$f":"'Source Data'!A657","v":"der.18"},{"$f":"'Source Data'!B657","v":"m"},{"$f":"'Source Data'!C657","v":0.24324599999999999},{"$f":"'Source Data'!D657","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E657","v":" to limit those users authorized to change microgrid establishment permissions in the utility's DERMS system"},{"$f":"'Source Data'!F657","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit those users authorized to change microgrid establishment permissions in the utility's DERMS system"}]
[{"$f":"'Source Data'!A658","v":"der.18"},{"$f":"'Source Data'!B658","v":"m"},{"$f":"'Source Data'!C658","v":5.2102299999999997E-2},{"$f":"'Source Data'!D658","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E658","v":" as part of DERMS network and system management capabilities"},{"$f":"'Source Data'!F658","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention as part of DERMS network and system management capabilities"}]
[{"$f":"'Source Data'!A659","v":"der.18"},{"$f":"'Source Data'!B659","v":"m"},{"$f":"'Source Data'!C659","v":0.35444599999999998},{"$f":"'Source Data'!D659","v":"require multi-factor authentication"},{"$f":"'Source Data'!E659","v":" for operationally critical functions, such as modifying configuration files"},{"$f":"'Source Data'!F659","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for operationally critical functions, such as modifying configuration files"}]
[{"$f":"'Source Data'!A660","v":"der.18"},{"$f":"'Source Data'!B660","v":"m"},{"$f":"'Source Data'!C660","v":0.225443},{"$f":"'Source Data'!D660","v":"authenticate messages"},{"$f":"'Source Data'!E660","v":" for administrative messages received by the utility DERMS,"},{"$f":"'Source Data'!F660","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages for administrative messages received by the utility DERMS,"}]
[{"$f":"'Source Data'!A661","v":"der.18"},{"$f":"'Source Data'!B661","v":"m"},{"$f":"'Source Data'!C661","v":0.33948600000000001},{"$f":"'Source Data'!D661","v":"check message integrity"},{"$f":"'Source Data'!E661","v":" for administrative messages received by the utility DERMS."},{"$f":"'Source Data'!F661","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check message integrity for administrative messages received by the utility DERMS."}]
[{"$f":"'Source Data'!A662","v":"der.19"},{"$f":"'Source Data'!B662","v":"t"},{"$f":"'Source Data'!C662","v":0.26954400000000001},{"$f":"'Source Data'!D662","v":"Threat Agent Gains Access to Utility DERMS via FDEMS"},{"$f":"'Source Data'!E662","v":0},{"$f":"'Source Data'!F662","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat Agent Gains Access to Utility DERMS via FDEMS0"}]
[{"$f":"'Source Data'!A663","v":"der.19"},{"$f":"'Source Data'!B663","v":"d"},{"$f":"'Source Data'!C663","v":0.44896200000000003},{"$f":"'Source Data'!D663","v":"A threat agent uses a FDEMS to which they have full access, to access the utility's DERMS system. The threat agent is able to modify the DER commands, schedules, and requests sent to other DER systems, making these settings beneficial to their own DER systems, and consequently less beneficial to other DER systems."},{"$f":"'Source Data'!E663","v":0},{"$f":"'Source Data'!F663","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent uses a FDEMS to which they have full access, to access the utility's DERMS system. The threat agent is able to modify the DER commands, schedules, and requests sent to other DER systems, making these settings beneficial to their own DER systems, and consequently less beneficial to other DER systems.0"}]
[{"$f":"'Source Data'!A664","v":"der.19"},{"$f":"'Source Data'!B664","v":"v"},{"$f":"'Source Data'!C664","v":0.37714900000000001},{"$f":"'Source Data'!D664","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E664","v":" to modify the DERMS settings, when communicating using the FDEMS to DERMS protocol,"},{"$f":"'Source Data'!F664","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to modify the DERMS settings, when communicating using the FDEMS to DERMS protocol,"}]
[{"$f":"'Source Data'!A665","v":"der.19"},{"$f":"'Source Data'!B665","v":"v"},{"$f":"'Source Data'!C665","v":3.9237300000000003E-2},{"$f":"'Source Data'!D665","v":"unnecessary access is permitted to system functions"},{"$f":"'Source Data'!E665","v":" in the DERMS system that modify settings that impact individual DER systems,"},{"$f":"'Source Data'!F665","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to system functions in the DERMS system that modify settings that impact individual DER systems,"}]
[{"$f":"'Source Data'!A666","v":"der.19"},{"$f":"'Source Data'!B666","v":"v"},{"$f":"'Source Data'!C666","v":0.74301600000000001},{"$f":"'Source Data'!D666","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E666","v":" so that a message to the DERMS using the FDEMS communications channel appears to come from an entity authorized to change DERMS settings, and contains a request for such changes,"},{"$f":"'Source Data'!F666","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals so that a message to the DERMS using the FDEMS communications channel appears to come from an entity authorized to change DERMS settings, and contains a request for such changes,"}]
[{"$f":"'Source Data'!A667","v":"der.19"},{"$f":"'Source Data'!B667","v":"v"},{"$f":"'Source Data'!C667","v":0.32378600000000002},{"$f":"'Source Data'!D667","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E667","v":" in this case a change to the apparent source of the message as well as its contents,"},{"$f":"'Source Data'!F667","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in this case a change to the apparent source of the message as well as its contents,"}]
[{"$f":"'Source Data'!A668","v":"der.19"},{"$f":"'Source Data'!B668","v":"v"},{"$f":"'Source Data'!C668","v":0.62438499999999997},{"$f":"'Source Data'!D668","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E668","v":" to DERMS functions."},{"$f":"'Source Data'!F668","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made to DERMS functions."}]
[{"$f":"'Source Data'!A669","v":"der.19"},{"$f":"'Source Data'!B669","v":"i"},{"$f":"'Source Data'!C669","v":0.67357299999999998},{"$f":"'Source Data'!D669","v":"Inefficient or cost-ineffective power system operated by the utility"},{"$f":"'Source Data'!E669","v":0},{"$f":"'Source Data'!F669","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inefficient or cost-ineffective power system operated by the utility0"}]
[{"$f":"'Source Data'!A670","v":"der.19"},{"$f":"'Source Data'!B670","v":"i"},{"$f":"'Source Data'!C670","v":0.20737700000000001},{"$f":"'Source Data'!D670","v":"Utility legal costs related to DER owner litigation for unfair practices"},{"$f":"'Source Data'!E670","v":0},{"$f":"'Source Data'!F670","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility legal costs related to DER owner litigation for unfair practices0"}]
[{"$f":"'Source Data'!A671","v":"der.19"},{"$f":"'Source Data'!B671","v":"m"},{"$f":"'Source Data'!C671","v":0.47761999999999999},{"$f":"'Source Data'!D671","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E671","v":" in the utility's DERMS system to limit privilege to modify DERMS settings"},{"$f":"'Source Data'!F671","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control in the utility's DERMS system to limit privilege to modify DERMS settings"}]
[{"$f":"'Source Data'!A672","v":"der.19"},{"$f":"'Source Data'!B672","v":"m"},{"$f":"'Source Data'!C672","v":0.71667800000000004},{"$f":"'Source Data'!D672","v":"validate inputs"},{"$f":"'Source Data'!E672","v":" (for consistency) in the DERMS control commands."},{"$f":"'Source Data'!F672","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate inputs (for consistency) in the DERMS control commands."}]
[{"$f":"'Source Data'!A673","v":"der.19"},{"$f":"'Source Data'!B673","v":"m"},{"$f":"'Source Data'!C673","v":0.47203899999999999},{"$f":"'Source Data'!D673","v":"authenticate messages"},{"$f":"'Source Data'!E673","v":" received by the DERMS from FDEMS systems"},{"$f":"'Source Data'!F673","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages received by the DERMS from FDEMS systems"}]
[{"$f":"'Source Data'!A674","v":"der.19"},{"$f":"'Source Data'!B674","v":"m"},{"$f":"'Source Data'!C674","v":0.33321899999999999},{"$f":"'Source Data'!D674","v":"check message integrity"},{"$f":"'Source Data'!E674","v":" for messages received by the DERMS from an FDEMS"},{"$f":"'Source Data'!F674","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check message integrity for messages received by the DERMS from an FDEMS"}]
[{"$f":"'Source Data'!A675","v":"der.20"},{"$f":"'Source Data'!B675","v":"t"},{"$f":"'Source Data'!C675","v":0.51216600000000001},{"$f":"'Source Data'!D675","v":"Compromised DERMS Weather Data Modifies DER Output Forecasts"},{"$f":"'Source Data'!E675","v":0},{"$f":"'Source Data'!F675","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Compromised DERMS Weather Data Modifies DER Output Forecasts0"}]
[{"$f":"'Source Data'!A676","v":"der.20"},{"$f":"'Source Data'!B676","v":"d"},{"$f":"'Source Data'!C676","v":0.76701299999999994},{"$f":"'Source Data'!D676","v":"A threat agent accesses the DERMS system and modifies the weather data being used to forecast loads and DER generation/storage. Consequently, less than optimal requests are sent to DER systems, causing financial impacts to the utility."},{"$f":"'Source Data'!E676","v":0},{"$f":"'Source Data'!F676","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent accesses the DERMS system and modifies the weather data being used to forecast loads and DER generation/storage. Consequently, less than optimal requests are sent to DER systems, causing financial impacts to the utility.0"}]
[{"$f":"'Source Data'!A677","v":"der.20"},{"$f":"'Source Data'!B677","v":"v"},{"$f":"'Source Data'!C677","v":0.96310099999999998},{"$f":"'Source Data'!D677","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E677","v":" to the DERMS system,"},{"$f":"'Source Data'!F677","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the DERMS system,"}]
[{"$f":"'Source Data'!A678","v":"der.20"},{"$f":"'Source Data'!B678","v":"v"},{"$f":"'Source Data'!C678","v":0.88186399999999998},{"$f":"'Source Data'!D678","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E678","v":" for the DERMS data access from remote locations,"},{"$f":"'Source Data'!F678","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals for the DERMS data access from remote locations,"}]
[{"$f":"'Source Data'!A679","v":"der.20"},{"$f":"'Source Data'!B679","v":"v"},{"$f":"'Source Data'!C679","v":0.93634600000000001},{"$f":"'Source Data'!D679","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E679","v":" for the DERMS data access from remote locations,"},{"$f":"'Source Data'!F679","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message for the DERMS data access from remote locations,"}]
[{"$f":"'Source Data'!A680","v":"der.20"},{"$f":"'Source Data'!B680","v":"v"},{"$f":"'Source Data'!C680","v":0.61380299999999999},{"$f":"'Source Data'!D680","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E680","v":" to DERMS data."},{"$f":"'Source Data'!F680","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made to DERMS data."}]
[{"$f":"'Source Data'!A681","v":"der.20"},{"$f":"'Source Data'!B681","v":"i"},{"$f":"'Source Data'!C681","v":0.162878},{"$f":"'Source Data'!D681","v":"Inefficient or cost-ineffective power system operated by the utility"},{"$f":"'Source Data'!E681","v":0},{"$f":"'Source Data'!F681","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inefficient or cost-ineffective power system operated by the utility0"}]
[{"$f":"'Source Data'!A682","v":"der.20"},{"$f":"'Source Data'!B682","v":"i"},{"$f":"'Source Data'!C682","v":0.16192999999999999},{"$f":"'Source Data'!D682","v":"Financial impact to the utility"},{"$f":"'Source Data'!E682","v":0},{"$f":"'Source Data'!F682","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Financial impact to the utility0"}]
[{"$f":"'Source Data'!A683","v":"der.20"},{"$f":"'Source Data'!B683","v":"i"},{"$f":"'Source Data'!C683","v":9.8295900000000005E-2},{"$f":"'Source Data'!D683","v":"Utility legal costs related to DER owner litigation for unfair practices"},{"$f":"'Source Data'!E683","v":0},{"$f":"'Source Data'!F683","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility legal costs related to DER owner litigation for unfair practices0"}]
[{"$f":"'Source Data'!A684","v":"der.20"},{"$f":"'Source Data'!B684","v":"m"},{"$f":"'Source Data'!C684","v":0.40834599999999999},{"$f":"'Source Data'!D684","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E684","v":" in the utility's DERMS system to limit privilege to access weather data"},{"$f":"'Source Data'!F684","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control in the utility's DERMS system to limit privilege to access weather data"}]
[{"$f":"'Source Data'!A685","v":"der.20"},{"$f":"'Source Data'!B685","v":"m"},{"$f":"'Source Data'!C685","v":0.62534400000000001},{"$f":"'Source Data'!D685","v":"authenticate messages"},{"$f":"'Source Data'!E685","v":" in the DERMS communication protocols"},{"$f":"'Source Data'!F685","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages in the DERMS communication protocols"}]
[{"$f":"'Source Data'!A686","v":"der.20"},{"$f":"'Source Data'!B686","v":"m"},{"$f":"'Source Data'!C686","v":0.75583199999999995},{"$f":"'Source Data'!D686","v":"check message integrity"},{"$f":"'Source Data'!E686","v":" for DERMS control commands"},{"$f":"'Source Data'!F686","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check message integrity for DERMS control commands"}]
[{"$f":"'Source Data'!A687","v":"der.20"},{"$f":"'Source Data'!B687","v":"m"},{"$f":"'Source Data'!C687","v":0.92905499999999996},{"$f":"'Source Data'!D687","v":"validate inputs"},{"$f":"'Source Data'!E687","v":" (for consistency) in the DERMS control commands"},{"$f":"'Source Data'!F687","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate inputs (for consistency) in the DERMS control commands"}]
[{"$f":"'Source Data'!A688","v":"der.21"},{"$f":"'Source Data'!B688","v":"t"},{"$f":"'Source Data'!C688","v":0.22281000000000001},{"$f":"'Source Data'!D688","v":"DER System Registration Information Stolen from DERMS"},{"$f":"'Source Data'!E688","v":0},{"$f":"'Source Data'!F688","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"DER System Registration Information Stolen from DERMS0"}]
[{"$f":"'Source Data'!A689","v":"der.21"},{"$f":"'Source Data'!B689","v":"d"},{"$f":"'Source Data'!C689","v":0.51490100000000005},{"$f":"'Source Data'!D689","v":"A threat agent accesses the DERMS systems and steals the customer DER registration information, using it for industrial espionage or other purposes, causing confidentiality impacts to these utility customers. For example, if stolen, this information could allow other DER owners to manipulate the retail (or wholesale) energy markets, for instance by bidding in prices or energy products that make it less likely the DER system (whose data was stolen) would be willing/able to bid, or if they did bid, making it less cost-effective for them."},{"$f":"'Source Data'!E689","v":0},{"$f":"'Source Data'!F689","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent accesses the DERMS systems and steals the customer DER registration information, using it for industrial espionage or other purposes, causing confidentiality impacts to these utility customers. For example, if stolen, this information could allow other DER owners to manipulate the retail (or wholesale) energy markets, for instance by bidding in prices or energy products that make it less likely the DER system (whose data was stolen) would be willing/able to bid, or if they did bid, making it less cost-effective for them.0"}]
[{"$f":"'Source Data'!A690","v":"der.21"},{"$f":"'Source Data'!B690","v":"v"},{"$f":"'Source Data'!C690","v":0.60906000000000005},{"$f":"'Source Data'!D690","v":"unnecessary access is permitted to system functions"},{"$f":"'Source Data'!E690","v":" in the DERMS system,"},{"$f":"'Source Data'!F690","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to system functions in the DERMS system,"}]
[{"$f":"'Source Data'!A691","v":"der.21"},{"$f":"'Source Data'!B691","v":"v"},{"$f":"'Source Data'!C691","v":0.22952700000000001},{"$f":"'Source Data'!D691","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Source Data'!E691","v":" while at rest."},{"$f":"'Source Data'!F691","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes private data accessible to unauthorized individuals while at rest."}]
[{"$f":"'Source Data'!A692","v":"der.21"},{"$f":"'Source Data'!B692","v":"v"},{"$f":"'Source Data'!C692","v":0.85305200000000003},{"$f":"'Source Data'!D692","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E692","v":" to customer DER registration information"},{"$f":"'Source Data'!F692","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to customer DER registration information"}]
[{"$f":"'Source Data'!A693","v":"der.21"},{"$f":"'Source Data'!B693","v":"i"},{"$f":"'Source Data'!C693","v":0.67948200000000003},{"$f":"'Source Data'!D693","v":"Breach of utility confidential information"},{"$f":"'Source Data'!E693","v":0},{"$f":"'Source Data'!F693","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Breach of utility confidential information0"}]
[{"$f":"'Source Data'!A694","v":"der.21"},{"$f":"'Source Data'!B694","v":"i"},{"$f":"'Source Data'!C694","v":0.28055799999999997},{"$f":"'Source Data'!D694","v":"Financial losses due to the security breach"},{"$f":"'Source Data'!E694","v":0},{"$f":"'Source Data'!F694","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Financial losses due to the security breach0"}]
[{"$f":"'Source Data'!A695","v":"der.21"},{"$f":"'Source Data'!B695","v":"m"},{"$f":"'Source Data'!C695","v":4.6817400000000002E-2},{"$f":"'Source Data'!D695","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E695","v":" in the utility's DERMS system"},{"$f":"'Source Data'!F695","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control in the utility's DERMS system"}]
[{"$f":"'Source Data'!A696","v":"der.21"},{"$f":"'Source Data'!B696","v":"m"},{"$f":"'Source Data'!C696","v":0.61727699999999996},{"$f":"'Source Data'!D696","v":"encrypt data at rest"},{"$f":"'Source Data'!E696","v":" specifically DER registration data"},{"$f":"'Source Data'!F696","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt data at rest specifically DER registration data"}]
[{"$f":"'Source Data'!A697","v":"der.21"},{"$f":"'Source Data'!B697","v":"m"},{"$f":"'Source Data'!C697","v":0.90803900000000004},{"$f":"'Source Data'!D697","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E697","v":" for encrypting DER registration data"},{"$f":"'Source Data'!F697","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms for encrypting DER registration data"}]
[{"$f":"'Source Data'!A698","v":"der.21"},{"$f":"'Source Data'!B698","v":"m"},{"$f":"'Source Data'!C698","v":0.81951499999999999},{"$f":"'Source Data'!D698","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E698","v":" as part of the DERMS network and system management capabilities"},{"$f":"'Source Data'!F698","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention as part of the DERMS network and system management capabilities"}]
[{"$f":"'Source Data'!A699","v":"der.21"},{"$f":"'Source Data'!B699","v":"m"},{"$f":"'Source Data'!C699","v":0.97812200000000005},{"$f":"'Source Data'!D699","v":"create audit logs"},{"$f":"'Source Data'!E699","v":" that records accesses to the registration data files"},{"$f":"'Source Data'!F699","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs that records accesses to the registration data files"}]
[{"$f":"'Source Data'!A700","v":"der.21"},{"$f":"'Source Data'!B700","v":"m"},{"$f":"'Source Data'!C700","v":0.35366999999999998},{"$f":"'Source Data'!D700","v":"protect credentials"},{"$f":"'Source Data'!E700","v":" that permit access to customer DER registration data"},{"$f":"'Source Data'!F700","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials that permit access to customer DER registration data"}]
[{"$f":"'Source Data'!A701","v":"der.22"},{"$f":"'Source Data'!B701","v":"t"},{"$f":"'Source Data'!C701","v":9.8194000000000007E-3},{"$f":"'Source Data'!D701","v":"DELETED"},{"$f":"'Source Data'!E701","v":0},{"$f":"'Source Data'!F701","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"DELETED0"}]
[{"$f":"'Source Data'!A702","v":"der.23"},{"$f":"'Source Data'!B702","v":"t"},{"$f":"'Source Data'!C702","v":0.73768},{"$f":"'Source Data'!D702","v":"Utility Makes Incorrect Decisions Based on Invalid DER Information"},{"$f":"'Source Data'!E702","v":0},{"$f":"'Source Data'!F702","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility Makes Incorrect Decisions Based on Invalid DER Information0"}]
[{"$f":"'Source Data'!A703","v":"der.23"},{"$f":"'Source Data'!B703","v":"d"},{"$f":"'Source Data'!C703","v":0.53493500000000005},{"$f":"'Source Data'!D703","v":"A threat agent obtains control of the DER management system of a Retail Energy Provider (REP) (who might be a department within a utility or could be a Third Party). The REP then provides invalid information to the utility grid operators on the future availability of large amounts of DER energy and ancillary services. This causes the grid operator to make less-than-optimal market decisions on purchasing energy and ancillary services."},{"$f":"'Source Data'!E703","v":0},{"$f":"'Source Data'!F703","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent obtains control of the DER management system of a Retail Energy Provider (REP) (who might be a department within a utility or could be a Third Party). The REP then provides invalid information to the utility grid operators on the future availability of large amounts of DER energy and ancillary services. This causes the grid operator to make less-than-optimal market decisions on purchasing energy and ancillary services.0"}]
[{"$f":"'Source Data'!A704","v":"der.23"},{"$f":"'Source Data'!B704","v":"v"},{"$f":"'Source Data'!C704","v":0.70259499999999997},{"$f":"'Source Data'!D704","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E704","v":" to the DER system"},{"$f":"'Source Data'!F704","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the DER system"}]
[{"$f":"'Source Data'!A705","v":"der.23"},{"$f":"'Source Data'!B705","v":"i"},{"$f":"'Source Data'!C705","v":0.21710499999999999},{"$f":"'Source Data'!D705","v":"Potential financial losses (or gains) for the customers owning the DER systems"},{"$f":"'Source Data'!E705","v":0},{"$f":"'Source Data'!F705","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential financial losses (or gains) for the customers owning the DER systems0"}]
[{"$f":"'Source Data'!A706","v":"der.23"},{"$f":"'Source Data'!B706","v":"i"},{"$f":"'Source Data'!C706","v":0.61643700000000001},{"$f":"'Source Data'!D706","v":"Major financial and reputation losses for the REP"},{"$f":"'Source Data'!E706","v":0},{"$f":"'Source Data'!F706","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Major financial and reputation losses for the REP0"}]
[{"$f":"'Source Data'!A707","v":"der.23"},{"$f":"'Source Data'!B707","v":"m"},{"$f":"'Source Data'!C707","v":0.802118},{"$f":"'Source Data'!D707","v":"protect credentials"},{"$f":"'Source Data'!E707","v":" for modification of planning data to be provided to the utility from the REP"},{"$f":"'Source Data'!F707","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for modification of planning data to be provided to the utility from the REP"}]
[{"$f":"'Source Data'!A708","v":"der.23"},{"$f":"'Source Data'!B708","v":"m"},{"$f":"'Source Data'!C708","v":0.14283199999999999},{"$f":"'Source Data'!D708","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E708","v":" to limit privilege to modify planning data to be provided to the utility from REP"},{"$f":"'Source Data'!F708","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privilege to modify planning data to be provided to the utility from REP"}]
[{"$f":"'Source Data'!A709","v":"der.23"},{"$f":"'Source Data'!B709","v":"m"},{"$f":"'Source Data'!C709","v":0.19281499999999999},{"$f":"'Source Data'!D709","v":"create audit logs"},{"$f":"'Source Data'!E709","v":" of interactions with the DERMS system that would have impact on the data ultimately sent to the utility"},{"$f":"'Source Data'!F709","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of interactions with the DERMS system that would have impact on the data ultimately sent to the utility"}]
[{"$f":"'Source Data'!A710","v":"der.23"},{"$f":"'Source Data'!B710","v":"m"},{"$f":"'Source Data'!C710","v":0.54718100000000003},{"$f":"'Source Data'!D710","v":"require strong passwords"},{"$f":"'Source Data'!E710","v":" for modification of planning data to be provided to utility from the REP"},{"$f":"'Source Data'!F710","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require strong passwords for modification of planning data to be provided to utility from the REP"}]
[{"$f":"'Source Data'!A711","v":"der.23"},{"$f":"'Source Data'!B711","v":"m"},{"$f":"'Source Data'!C711","v":0.64986299999999997},{"$f":"'Source Data'!D711","v":"require multi-factor authentication"},{"$f":"'Source Data'!E711","v":" for modification of planning data to be provided to utility from the REP"},{"$f":"'Source Data'!F711","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for modification of planning data to be provided to utility from the REP"}]
[{"$f":"'Source Data'!A712","v":"der.23"},{"$f":"'Source Data'!B712","v":"m"},{"$f":"'Source Data'!C712","v":0.12798200000000001},{"$f":"'Source Data'!D712","v":"require non-repudiation"},{"$f":"'Source Data'!E712","v":" for data communicated to the utility from the REP"},{"$f":"'Source Data'!F712","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require non-repudiation for data communicated to the utility from the REP"}]
[{"$f":"'Source Data'!A713","v":"der.24"},{"$f":"'Source Data'!B713","v":"t"},{"$f":"'Source Data'!C713","v":0.68696400000000002},{"$f":"'Source Data'!D713","v":"Retail Energy Provider Misuses Confidential/Private Information from DERMS"},{"$f":"'Source Data'!E713","v":0},{"$f":"'Source Data'!F713","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Retail Energy Provider Misuses Confidential/Private Information from DERMS0"}]
[{"$f":"'Source Data'!A714","v":"der.24"},{"$f":"'Source Data'!B714","v":"d"},{"$f":"'Source Data'!C714","v":0.72739100000000001},{"$f":"'Source Data'!D714","v":"A Retail Energy Provider (REP) that manages a group of DER systems normally receives commands from the DERMS on what energy levels and ancillary services that group of DER systems should provide. A threat agent accesses confidential or private information in the DERMS DER database on customers who own DER systems, and uses that information to \"market\" to those customers."},{"$f":"'Source Data'!E714","v":0},{"$f":"'Source Data'!F714","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A Retail Energy Provider (REP) that manages a group of DER systems normally receives commands from the DERMS on what energy levels and ancillary services that group of DER systems should provide. A threat agent accesses confidential or private information in the DERMS DER database on customers who own DER systems, and uses that information to \"market\" to those customers.0"}]
[{"$f":"'Source Data'!A715","v":"der.24"},{"$f":"'Source Data'!B715","v":"v"},{"$f":"'Source Data'!C715","v":0.48743599999999998},{"$f":"'Source Data'!D715","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Source Data'!E715","v":" while in storage,"},{"$f":"'Source Data'!F715","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes private data accessible to unauthorized individuals while in storage,"}]
[{"$f":"'Source Data'!A716","v":"der.24"},{"$f":"'Source Data'!B716","v":"v"},{"$f":"'Source Data'!C716","v":5.5828500000000003E-3},{"$f":"'Source Data'!D716","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E716","v":" to read private DER data, when communicating using the REP to DERMS protocol"},{"$f":"'Source Data'!F716","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to read private DER data, when communicating using the REP to DERMS protocol"}]
[{"$f":"'Source Data'!A717","v":"der.24"},{"$f":"'Source Data'!B717","v":"v"},{"$f":"'Source Data'!C717","v":0.62009700000000001},{"$f":"'Source Data'!D717","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E717","v":" in the DERMS communication protocols used to access REP systems,"},{"$f":"'Source Data'!F717","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in the DERMS communication protocols used to access REP systems,"}]
[{"$f":"'Source Data'!A718","v":"der.24"},{"$f":"'Source Data'!B718","v":"v"},{"$f":"'Source Data'!C718","v":6.5442799999999995E-2},{"$f":"'Source Data'!D718","v":"unnecessary access is permitted to system functions"},{"$f":"'Source Data'!E718","v":" in the DERMS."},{"$f":"'Source Data'!F718","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to system functions in the DERMS."}]
[{"$f":"'Source Data'!A719","v":"der.24"},{"$f":"'Source Data'!B719","v":"i"},{"$f":"'Source Data'!C719","v":0.93383899999999997},{"$f":"'Source Data'!D719","v":"Utility legal costs related to DER owner litigation for loss of confidential and private information"},{"$f":"'Source Data'!E719","v":0},{"$f":"'Source Data'!F719","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility legal costs related to DER owner litigation for loss of confidential and private information0"}]
[{"$f":"'Source Data'!A720","v":"der.24"},{"$f":"'Source Data'!B720","v":"m"},{"$f":"'Source Data'!C720","v":7.4588700000000003E-3},{"$f":"'Source Data'!D720","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E720","v":" at the REP and in the utility's DERMS system"},{"$f":"'Source Data'!F720","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control at the REP and in the utility's DERMS system"}]
[{"$f":"'Source Data'!A721","v":"der.24"},{"$f":"'Source Data'!B721","v":"m"},{"$f":"'Source Data'!C721","v":0.81719799999999998},{"$f":"'Source Data'!D721","v":"authenticate messages"},{"$f":"'Source Data'!E721","v":" in the DERMS protocols"},{"$f":"'Source Data'!F721","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages in the DERMS protocols"}]
[{"$f":"'Source Data'!A722","v":"der.24"},{"$f":"'Source Data'!B722","v":"m"},{"$f":"'Source Data'!C722","v":0.11254599999999999},{"$f":"'Source Data'!D722","v":"create audit logs"},{"$f":"'Source Data'!E722","v":" of all accesses to confidential information in the DERMS system"},{"$f":"'Source Data'!F722","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all accesses to confidential information in the DERMS system"}]
[{"$f":"'Source Data'!A723","v":"der.24"},{"$f":"'Source Data'!B723","v":"m"},{"$f":"'Source Data'!C723","v":0.573604},{"$f":"'Source Data'!D723","v":"generate alerts"},{"$f":"'Source Data'!E723","v":" in the case of unauthorized access to confidential information for the DERMS and send them to the affected parties"},{"$f":"'Source Data'!F723","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts in the case of unauthorized access to confidential information for the DERMS and send them to the affected parties"}]
[{"$f":"'Source Data'!A724","v":"der.24"},{"$f":"'Source Data'!B724","v":"m"},{"$f":"'Source Data'!C724","v":0.26730500000000001},{"$f":"'Source Data'!D724","v":"isolate functions"},{"$f":"'Source Data'!E724","v":" for retrieval of DER data required by an REP from the DERMS and for retrieval of private data associated with a DER"},{"$f":"'Source Data'!F724","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate functions for retrieval of DER data required by an REP from the DERMS and for retrieval of private data associated with a DER"}]
[{"$f":"'Source Data'!A725","v":"der.25"},{"$f":"'Source Data'!B725","v":"t"},{"$f":"'Source Data'!C725","v":0.92805000000000004},{"$f":"'Source Data'!D725","v":"Threat Agent Unexpectedly Reduces Retail Energy Provider Output"},{"$f":"'Source Data'!E725","v":0},{"$f":"'Source Data'!F725","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat Agent Unexpectedly Reduces Retail Energy Provider Output0"}]
[{"$f":"'Source Data'!A726","v":"der.25"},{"$f":"'Source Data'!B726","v":"d"},{"$f":"'Source Data'!C726","v":0.15349199999999999},{"$f":"'Source Data'!D726","v":"A threat agent obtains control of the DER management system of a REP (who might be a department within a utility or could be a Third Party). The REP provides information to the utility grid operators that all DER systems will continue to function normally but then the compromised DER management system shuts down large amounts of DER energy and ancillary services."},{"$f":"'Source Data'!E726","v":0},{"$f":"'Source Data'!F726","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent obtains control of the DER management system of a REP (who might be a department within a utility or could be a Third Party). The REP provides information to the utility grid operators that all DER systems will continue to function normally but then the compromised DER management system shuts down large amounts of DER energy and ancillary services.0"}]
[{"$f":"'Source Data'!A727","v":"der.25"},{"$f":"'Source Data'!B727","v":"v"},{"$f":"'Source Data'!C727","v":0.49297800000000003},{"$f":"'Source Data'!D727","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E727","v":" to the DER management system,"},{"$f":"'Source Data'!F727","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the DER management system,"}]
[{"$f":"'Source Data'!A728","v":"der.25"},{"$f":"'Source Data'!B728","v":"v"},{"$f":"'Source Data'!C728","v":0.76252299999999995},{"$f":"'Source Data'!D728","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Source Data'!E728","v":" in the data from the REP."},{"$f":"'Source Data'!F728","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system assumes data inputs and resulting calculations are accurate in the data from the REP."}]
[{"$f":"'Source Data'!A729","v":"der.25"},{"$f":"'Source Data'!B729","v":"i"},{"$f":"'Source Data'!C729","v":0.21148500000000001},{"$f":"'Source Data'!D729","v":"Potential power outages for the grid operator"},{"$f":"'Source Data'!E729","v":0},{"$f":"'Source Data'!F729","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential power outages for the grid operator0"}]
[{"$f":"'Source Data'!A730","v":"der.25"},{"$f":"'Source Data'!B730","v":"i"},{"$f":"'Source Data'!C730","v":0.58863299999999996},{"$f":"'Source Data'!D730","v":"Potential financial losses for customers owning the DER systems"},{"$f":"'Source Data'!E730","v":0},{"$f":"'Source Data'!F730","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential financial losses for customers owning the DER systems0"}]
[{"$f":"'Source Data'!A731","v":"der.25"},{"$f":"'Source Data'!B731","v":"i"},{"$f":"'Source Data'!C731","v":0.62787099999999996},{"$f":"'Source Data'!D731","v":"Potential major financial and reputation losses for the REP"},{"$f":"'Source Data'!E731","v":0},{"$f":"'Source Data'!F731","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential major financial and reputation losses for the REP0"}]
[{"$f":"'Source Data'!A732","v":"der.25"},{"$f":"'Source Data'!B732","v":"m"},{"$f":"'Source Data'!C732","v":0.37088700000000002},{"$f":"'Source Data'!D732","v":"restrict application access"},{"$f":"'Source Data'!E732","v":" to the DER management system"},{"$f":"'Source Data'!F732","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict application access to the DER management system"}]
[{"$f":"'Source Data'!A733","v":"der.25"},{"$f":"'Source Data'!B733","v":"m"},{"$f":"'Source Data'!C733","v":0.69467299999999998},{"$f":"'Source Data'!D733","v":"protect credentials"},{"$f":"'Source Data'!E733","v":" for access to functions that determine the energy to be available from an REP"},{"$f":"'Source Data'!F733","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials for access to functions that determine the energy to be available from an REP"}]
[{"$f":"'Source Data'!A734","v":"der.25"},{"$f":"'Source Data'!B734","v":"m"},{"$f":"'Source Data'!C734","v":0.31905800000000001},{"$f":"'Source Data'!D734","v":"cross check"},{"$f":"'Source Data'!E734","v":" the DER data provided to the utility with the DER system performance."},{"$f":"'Source Data'!F734","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check the DER data provided to the utility with the DER system performance."}]
[{"$f":"'Source Data'!A735","v":"der.25"},{"$f":"'Source Data'!B735","v":"m"},{"$f":"'Source Data'!C735","v":0.29428199999999999},{"$f":"'Source Data'!D735","v":"require strong passwords"},{"$f":"'Source Data'!E735","v":" for access to functions that determine the energy to be available from an REP"},{"$f":"'Source Data'!F735","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require strong passwords for access to functions that determine the energy to be available from an REP"}]
[{"$f":"'Source Data'!A736","v":"der.25"},{"$f":"'Source Data'!B736","v":"m"},{"$f":"'Source Data'!C736","v":0.43103000000000002},{"$f":"'Source Data'!D736","v":"require multi-factor authentication"},{"$f":"'Source Data'!E736","v":" for access to functions that determine the energy to be available from an REP"},{"$f":"'Source Data'!F736","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for access to functions that determine the energy to be available from an REP"}]
[{"$f":"'Source Data'!A737","v":"der.26"},{"$f":"'Source Data'!B737","v":"t"},{"$f":"'Source Data'!C737","v":0.99263100000000004},{"$f":"'Source Data'!D737","v":"Spoofed Microgrid Status Messages Cause Disconnect from Grid"},{"$f":"'Source Data'!E737","v":0},{"$f":"'Source Data'!F737","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Spoofed Microgrid Status Messages Cause Disconnect from Grid0"}]
[{"$f":"'Source Data'!A738","v":"der.26"},{"$f":"'Source Data'!B738","v":"d"},{"$f":"'Source Data'!C738","v":0.20000799999999999},{"$f":"'Source Data'!D738","v":"A threat agent spoofs messages that appear to come from a microgrid to the utility. The messages indicate that the pre-established conditions have been met for the utility to disconnect from the microgrid. The utility disconnects from the microgrid, even though these conditions are not actually met."},{"$f":"'Source Data'!E738","v":0},{"$f":"'Source Data'!F738","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent spoofs messages that appear to come from a microgrid to the utility. The messages indicate that the pre-established conditions have been met for the utility to disconnect from the microgrid. The utility disconnects from the microgrid, even though these conditions are not actually met.0"}]
[{"$f":"'Source Data'!A739","v":"der.26"},{"$f":"'Source Data'!B739","v":"v"},{"$f":"'Source Data'!C739","v":0.67762900000000004},{"$f":"'Source Data'!D739","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E739","v":" (e.g., status messages from the microgrid)."},{"$f":"'Source Data'!F739","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals (e.g., status messages from the microgrid)."}]
[{"$f":"'Source Data'!A740","v":"der.26"},{"$f":"'Source Data'!B740","v":"v"},{"$f":"'Source Data'!C740","v":0.77966100000000005},{"$f":"'Source Data'!D740","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E740","v":" (e.g., status messages from the microgrid)."},{"$f":"'Source Data'!F740","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message (e.g., status messages from the microgrid)."}]
[{"$f":"'Source Data'!A741","v":"der.26"},{"$f":"'Source Data'!B741","v":"i"},{"$f":"'Source Data'!C741","v":0.49633899999999997},{"$f":"'Source Data'!D741","v":"Since the microgrid may not be prepared to disconnect from the grid or may be brought down during the grid outage, it will experience a complete outage"},{"$f":"'Source Data'!E741","v":0},{"$f":"'Source Data'!F741","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Since the microgrid may not be prepared to disconnect from the grid or may be brought down during the grid outage, it will experience a complete outage0"}]
[{"$f":"'Source Data'!A742","v":"der.26"},{"$f":"'Source Data'!B742","v":"i"},{"$f":"'Source Data'!C742","v":0.96837899999999999},{"$f":"'Source Data'!D742","v":"Legal costs for litigation with the adversely affected customers"},{"$f":"'Source Data'!E742","v":0},{"$f":"'Source Data'!F742","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Legal costs for litigation with the adversely affected customers0"}]
[{"$f":"'Source Data'!A743","v":"der.26"},{"$f":"'Source Data'!B743","v":"m"},{"$f":"'Source Data'!C743","v":0.30159799999999998},{"$f":"'Source Data'!D743","v":"authenticate messages"},{"$f":"'Source Data'!E743","v":" that communicate microgrid status to the utility, where that status communicates whether or not pre-established disconnect conditions have been met,"},{"$f":"'Source Data'!F743","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages that communicate microgrid status to the utility, where that status communicates whether or not pre-established disconnect conditions have been met,"}]
[{"$f":"'Source Data'!A744","v":"der.26"},{"$f":"'Source Data'!B744","v":"m"},{"$f":"'Source Data'!C744","v":0.81376400000000004},{"$f":"'Source Data'!D744","v":"confirm action"},{"$f":"'Source Data'!E744","v":" to disconnect microgrid with the microgrid operator, if microgrid status indicates that pre-established disconnect conditions have been met."},{"$f":"'Source Data'!F744","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"confirm action to disconnect microgrid with the microgrid operator, if microgrid status indicates that pre-established disconnect conditions have been met."}]
[{"$f":"'Source Data'!A745","v":"wampac.1"},{"$f":"'Source Data'!B745","v":"t"},{"$f":"'Source Data'!C745","v":0.58077699999999999},{"$f":"'Source Data'!D745","v":"Denial of Service Attack Impairs PTP Service"},{"$f":"'Source Data'!E745","v":0},{"$f":"'Source Data'!F745","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Denial of Service Attack Impairs PTP Service0"}]
[{"$f":"'Source Data'!A746","v":"wampac.1"},{"$f":"'Source Data'!B746","v":"d"},{"$f":"'Source Data'!C746","v":0.75895500000000005},{"$f":"'Source Data'!D746","v":"A set of Phasor Measurement Units (PMUs) receive their time via network communication from a Precision Time Protocol (PTP) server. A threat agent is able to perform a denial of service attack against PTP either by leveraging vulnerabilities in the PTP service itself or by flooding it with high volume of traffic or malformed packets targeting open ports that are not required by PTP. This leads to delays or lack of functionality of the PTP service, translating into the inability of the PMUs to correctly timestamp their measurements."},{"$f":"'Source Data'!E746","v":0},{"$f":"'Source Data'!F746","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A set of Phasor Measurement Units (PMUs) receive their time via network communication from a Precision Time Protocol (PTP) server. A threat agent is able to perform a denial of service attack against PTP either by leveraging vulnerabilities in the PTP service itself or by flooding it with high volume of traffic or malformed packets targeting open ports that are not required by PTP. This leads to delays or lack of functionality of the PTP service, translating into the inability of the PMUs to correctly timestamp their measurements.0"}]
[{"$f":"'Source Data'!A747","v":"wampac.1"},{"$f":"'Source Data'!B747","v":"v"},{"$f":"'Source Data'!C747","v":0.72205600000000003},{"$f":"'Source Data'!D747","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Source Data'!E747","v":" for the network hosting the PTP server,"},{"$f":"'Source Data'!F747","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interfaces permit unnecessary traffic flows for the network hosting the PTP server,"}]
[{"$f":"'Source Data'!A748","v":"wampac.1"},{"$f":"'Source Data'!B748","v":"v"},{"$f":"'Source Data'!C748","v":0.60391899999999998},{"$f":"'Source Data'!D748","v":"unnecessary system services are configured to run"},{"$f":"'Source Data'!E748","v":" on the PTP server"},{"$f":"'Source Data'!F748","v":"Unneeded Services Running (6.4.3.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary system services are configured to run on the PTP server"}]
[{"$f":"'Source Data'!A749","v":"wampac.1"},{"$f":"'Source Data'!B749","v":"v"},{"$f":"'Source Data'!C749","v":0.54026600000000002},{"$f":"'Source Data'!D749","v":"system may become overwhelmed by traffic flooding or malformed traffic"},{"$f":"'Source Data'!E749","v":" because of deficiencies in the network stack, PTP implementation or required auxiliary services,"},{"$f":"'Source Data'!F749","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system may become overwhelmed by traffic flooding or malformed traffic because of deficiencies in the network stack, PTP implementation or required auxiliary services,"}]
[{"$f":"'Source Data'!A750","v":"wampac.1"},{"$f":"'Source Data'!B750","v":"v"},{"$f":"'Source Data'!C750","v":0.15406800000000001},{"$f":"'Source Data'!D750","v":"unnecessary access is permitted to critical functions"},{"$f":"'Source Data'!E750","v":" in the PTP service."},{"$f":"'Source Data'!F750","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to critical functions in the PTP service."}]
[{"$f":"'Source Data'!A751","v":"wampac.1"},{"$f":"'Source Data'!B751","v":"i"},{"$f":"'Source Data'!C751","v":0.31694600000000001},{"$f":"'Source Data'!D751","v":"All impacts presented in Table 7, as potentially caused by loss of measurements due to lack of time synchronization"},{"$f":"'Source Data'!E751","v":0},{"$f":"'Source Data'!F751","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by loss of measurements due to lack of time synchronization0"}]
[{"$f":"'Source Data'!A752","v":"wampac.1"},{"$f":"'Source Data'!B752","v":"m"},{"$f":"'Source Data'!C752","v":0.47887600000000002},{"$f":"'Source Data'!D752","v":"restrict network service access"},{"$f":"'Source Data'!E752","v":" to the PTP service"},{"$f":"'Source Data'!F752","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network service access to the PTP service"}]
[{"$f":"'Source Data'!A753","v":"wampac.1"},{"$f":"'Source Data'!B753","v":"m"},{"$f":"'Source Data'!C753","v":0.57717200000000002},{"$f":"'Source Data'!D753","v":"isolate functions"},{"$f":"'Source Data'!E753","v":" between the PTP service and the auxiliary services running on the same server (e.g., resource prioritization)"},{"$f":"'Source Data'!F753","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate functions between the PTP service and the auxiliary services running on the same server (e.g., resource prioritization)"}]
[{"$f":"'Source Data'!A754","v":"wampac.1"},{"$f":"'Source Data'!B754","v":"m"},{"$f":"'Source Data'!C754","v":0.98551800000000001},{"$f":"'Source Data'!D754","v":"configure for least functionality"},{"$f":"'Source Data'!E754","v":" the PTP server"},{"$f":"'Source Data'!F754","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality the PTP server"}]
[{"$f":"'Source Data'!A755","v":"wampac.1"},{"$f":"'Source Data'!B755","v":"m"},{"$f":"'Source Data'!C755","v":0.61086099999999999},{"$f":"'Source Data'!D755","v":"verify correct operation"},{"$f":"'Source Data'!E755","v":" of the PTP server in order to remain operational when subjected to erroneous traffic and large amounts of traffic in the network stack, PTP and required auxiliary services"},{"$f":"'Source Data'!F755","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify correct operation of the PTP server in order to remain operational when subjected to erroneous traffic and large amounts of traffic in the network stack, PTP and required auxiliary services"}]
[{"$f":"'Source Data'!A756","v":"wampac.1"},{"$f":"'Source Data'!B756","v":"m"},{"$f":"'Source Data'!C756","v":0.36669299999999999},{"$f":"'Source Data'!D756","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E756","v":" "},{"$f":"'Source Data'!F756","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention "}]
[{"$f":"'Source Data'!A757","v":"wampac.1"},{"$f":"'Source Data'!B757","v":"m"},{"$f":"'Source Data'!C757","v":0.29574800000000001},{"$f":"'Source Data'!D757","v":"test before installation"},{"$f":"'Source Data'!E757","v":" to verify that the IDS/IPS solution does not compromise normal operation of the system"},{"$f":"'Source Data'!F757","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test before installation to verify that the IDS/IPS solution does not compromise normal operation of the system"}]
[{"$f":"'Source Data'!A758","v":"wampac.1"},{"$f":"'Source Data'!B758","v":"m"},{"$f":"'Source Data'!C758","v":0.51855799999999996},{"$f":"'Source Data'!D758","v":"restrict access"},{"$f":"'Source Data'!E758","v":" to the GPS clock (locally or via the network)."},{"$f":"'Source Data'!F758","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict access to the GPS clock (locally or via the network)."}]
[{"$f":"'Source Data'!A759","v":"wampac.1"},{"$f":"'Source Data'!B759","v":"m"},{"$f":"'Source Data'!C759","v":0.71640400000000004},{"$f":"'Source Data'!D759","v":"restrict network access"},{"$f":"'Source Data'!E759","v":" to the network hosting the PTP server"},{"$f":"'Source Data'!F759","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the network hosting the PTP server"}]
[{"$f":"'Source Data'!A760","v":"wampac.2"},{"$f":"'Source Data'!B760","v":"t"},{"$f":"'Source Data'!C760","v":3.34582E-2},{"$f":"'Source Data'!D760","v":"Network Equipment used to Spoof WAMPAC Messages"},{"$f":"'Source Data'!E760","v":0},{"$f":"'Source Data'!F760","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Network Equipment used to Spoof WAMPAC Messages0"}]
[{"$f":"'Source Data'!A761","v":"wampac.2"},{"$f":"'Source Data'!B761","v":"d"},{"$f":"'Source Data'!C761","v":0.64251800000000003},{"$f":"'Source Data'!D761","v":"A threat agent leverages vulnerabilities to perform a spoofing attack and inject messages in WAMPAC network equipment (router, switch, etc.). The altered messages might be either measurements used as input to the WAMPAC algorithms, or commands to phasor measurement units (PMUs) or phasor data concentrators (PDCs)."},{"$f":"'Source Data'!E761","v":0},{"$f":"'Source Data'!F761","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent leverages vulnerabilities to perform a spoofing attack and inject messages in WAMPAC network equipment (router, switch, etc.). The altered messages might be either measurements used as input to the WAMPAC algorithms, or commands to phasor measurement units (PMUs) or phasor data concentrators (PDCs).0"}]
[{"$f":"'Source Data'!A762","v":"wampac.2"},{"$f":"'Source Data'!B762","v":"v"},{"$f":"'Source Data'!C762","v":0.87204499999999996},{"$f":"'Source Data'!D762","v":"unnecessary access is permitted to networking components"},{"$f":"'Source Data'!E762","v":" for WAMPAC networking devices,"},{"$f":"'Source Data'!F762","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to networking components for WAMPAC networking devices,"}]
[{"$f":"'Source Data'!A763","v":"wampac.2"},{"$f":"'Source Data'!B763","v":"v"},{"$f":"'Source Data'!C763","v":0.55152800000000002},{"$f":"'Source Data'!D763","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E763","v":" in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),"},{"$f":"'Source Data'!F763","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),"}]
[{"$f":"'Source Data'!A764","v":"wampac.2"},{"$f":"'Source Data'!B764","v":"v"},{"$f":"'Source Data'!C764","v":0.83208599999999999},{"$f":"'Source Data'!D764","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E764","v":" in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),"},{"$f":"'Source Data'!F764","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),"}]
[{"$f":"'Source Data'!A765","v":"wampac.2"},{"$f":"'Source Data'!B765","v":"v"},{"$f":"'Source Data'!C765","v":0.87890299999999999},{"$f":"'Source Data'!D765","v":"commands or other messages may be inserted on the network by unauthorized individuals"},{"$f":"'Source Data'!E765","v":" in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),"},{"$f":"'Source Data'!F765","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"commands or other messages may be inserted on the network by unauthorized individuals in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),"}]
[{"$f":"'Source Data'!A766","v":"wampac.2"},{"$f":"'Source Data'!B766","v":"v"},{"$f":"'Source Data'!C766","v":0.49617899999999998},{"$f":"'Source Data'!D766","v":"system permits networking components to be accessed by unauthorized individuals"},{"$f":"'Source Data'!E766","v":" (e.g., routers, switches, etc.),"},{"$f":"'Source Data'!F766","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits networking components to be accessed by unauthorized individuals (e.g., routers, switches, etc.),"}]
[{"$f":"'Source Data'!A767","v":"wampac.2"},{"$f":"'Source Data'!B767","v":"v"},{"$f":"'Source Data'!C767","v":0.40421800000000002},{"$f":"'Source Data'!D767","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Source Data'!E767","v":" on the network components (e.g., routers, switches, etc.)."},{"$f":"'Source Data'!F767","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"software patches are not checked regularly to ensure that they are current on the network components (e.g., routers, switches, etc.)."}]
[{"$f":"'Source Data'!A768","v":"wampac.2"},{"$f":"'Source Data'!B768","v":"i"},{"$f":"'Source Data'!C768","v":0.22373299999999999},{"$f":"'Source Data'!D768","v":"All impacts presented in Table 7, as potentially caused by altered measurements or loss of measurements"},{"$f":"'Source Data'!E768","v":0},{"$f":"'Source Data'!F768","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by altered measurements or loss of measurements0"}]
[{"$f":"'Source Data'!A769","v":"wampac.2"},{"$f":"'Source Data'!B769","v":"m"},{"$f":"'Source Data'!C769","v":0.20185500000000001},{"$f":"'Source Data'!D769","v":"encrypt link layer"},{"$f":"'Source Data'!E769","v":" on the WAMPAC network"},{"$f":"'Source Data'!F769","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt link layer on the WAMPAC network"}]
[{"$f":"'Source Data'!A770","v":"wampac.2"},{"$f":"'Source Data'!B770","v":"m"},{"$f":"'Source Data'!C770","v":0.211675},{"$f":"'Source Data'!D770","v":"encrypt application layer"},{"$f":"'Source Data'!E770","v":" on the WAMPAC network"},{"$f":"'Source Data'!F770","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt application layer on the WAMPAC network"}]
[{"$f":"'Source Data'!A771","v":"wampac.2"},{"$f":"'Source Data'!B771","v":"m"},{"$f":"'Source Data'!C771","v":0.94935400000000003},{"$f":"'Source Data'!D771","v":"check message integrity"},{"$f":"'Source Data'!E771","v":" (digital signatures) of commands and data received by the WAMPAC components"},{"$f":"'Source Data'!F771","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check message integrity (digital signatures) of commands and data received by the WAMPAC components"}]
[{"$f":"'Source Data'!A772","v":"wampac.2"},{"$f":"'Source Data'!B772","v":"m"},{"$f":"'Source Data'!C772","v":0.48428900000000003},{"$f":"'Source Data'!D772","v":"restrict network access"},{"$f":"'Source Data'!E772","v":" to the WAMPAC network"},{"$f":"'Source Data'!F772","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the WAMPAC network"}]
[{"$f":"'Source Data'!A773","v":"wampac.2"},{"$f":"'Source Data'!B773","v":"m"},{"$f":"'Source Data'!C773","v":0.18688399999999999},{"$f":"'Source Data'!D773","v":"detect unauthorized devices"},{"$f":"'Source Data'!E773","v":" in the WAMPAC network"},{"$f":"'Source Data'!F773","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized devices in the WAMPAC network"}]
[{"$f":"'Source Data'!A774","v":"wampac.2"},{"$f":"'Source Data'!B774","v":"m"},{"$f":"'Source Data'!C774","v":0.40398899999999999},{"$f":"'Source Data'!D774","v":"detect unusual patterns"},{"$f":"'Source Data'!E774","v":" in WAMPAC components traffic communications"},{"$f":"'Source Data'!F774","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns in WAMPAC components traffic communications"}]
[{"$f":"'Source Data'!A775","v":"wampac.2"},{"$f":"'Source Data'!B775","v":"m"},{"$f":"'Source Data'!C775","v":5.4105300000000002E-2},{"$f":"'Source Data'!D775","v":"maintain patches"},{"$f":"'Source Data'!E775","v":" on WAMPAC networking components"},{"$f":"'Source Data'!F775","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches on WAMPAC networking components"}]
[{"$f":"'Source Data'!A776","v":"wampac.2"},{"$f":"'Source Data'!B776","v":"m"},{"$f":"'Source Data'!C776","v":0.88653099999999996},{"$f":"'Source Data'!D776","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E776","v":" to limit privileges to access WAMPAC networking components"},{"$f":"'Source Data'!F776","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privileges to access WAMPAC networking components"}]
[{"$f":"'Source Data'!A777","v":"wampac.2"},{"$f":"'Source Data'!B777","v":"m"},{"$f":"'Source Data'!C777","v":0.70285399999999998},{"$f":"'Source Data'!D777","v":"authenticate users"},{"$f":"'Source Data'!E777","v":" of WAMPAC networking components"},{"$f":"'Source Data'!F777","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users of WAMPAC networking components"}]
[{"$f":"'Source Data'!A778","v":"wampac.3"},{"$f":"'Source Data'!B778","v":"t"},{"$f":"'Source Data'!C778","v":2.0425599999999999E-2},{"$f":"'Source Data'!D778","v":"Improper PDC Configuration Interferes with Transmission of Measurement Data"},{"$f":"'Source Data'!E778","v":0},{"$f":"'Source Data'!F778","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Improper PDC Configuration Interferes with Transmission of Measurement Data0"}]
[{"$f":"'Source Data'!A779","v":"wampac.3"},{"$f":"'Source Data'!B779","v":"d"},{"$f":"'Source Data'!C779","v":0.82254400000000005},{"$f":"'Source Data'!D779","v":"An insider is able to gain access to the network to which a PDC is connected and to the PDC's credentials, assuming credentials are in place. This individual compromises (malicious intent) or misconfigures (accidentally) the PDC. Consequently, the PDC does not recognize certain PDCs/PMUs and sends incomplete measurement data up in the WAMPAC hierarchy."},{"$f":"'Source Data'!E779","v":0},{"$f":"'Source Data'!F779","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An insider is able to gain access to the network to which a PDC is connected and to the PDC's credentials, assuming credentials are in place. This individual compromises (malicious intent) or misconfigures (accidentally) the PDC. Consequently, the PDC does not recognize certain PDCs/PMUs and sends incomplete measurement data up in the WAMPAC hierarchy.0"}]
[{"$f":"'Source Data'!A780","v":"wampac.3"},{"$f":"'Source Data'!B780","v":"v"},{"$f":"'Source Data'!C780","v":0.96537600000000001},{"$f":"'Source Data'!D780","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Source Data'!E780","v":" to the PDC,"},{"$f":"'Source Data'!F780","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interfaces permit unnecessary traffic flows to the PDC,"}]
[{"$f":"'Source Data'!A781","v":"wampac.3"},{"$f":"'Source Data'!B781","v":"v"},{"$f":"'Source Data'!C781","v":0.158192},{"$f":"'Source Data'!D781","v":"design permits unnecessary privileges"},{"$f":"'Source Data'!E781","v":" to the PDC,"},{"$f":"'Source Data'!F781","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design permits unnecessary privileges to the PDC,"}]
[{"$f":"'Source Data'!A782","v":"wampac.3"},{"$f":"'Source Data'!B782","v":"v"},{"$f":"'Source Data'!C782","v":0.84515600000000002},{"$f":"'Source Data'!D782","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E782","v":" to the PDC configuration,"},{"$f":"'Source Data'!F782","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made to the PDC configuration,"}]
[{"$f":"'Source Data'!A783","v":"wampac.3"},{"$f":"'Source Data'!B783","v":"v"},{"$f":"'Source Data'!C783","v":0.572546},{"$f":"'Source Data'!D783","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E783","v":" to configuration and programming software on the PDC,"},{"$f":"'Source Data'!F783","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to configuration and programming software on the PDC,"}]
[{"$f":"'Source Data'!A784","v":"wampac.3"},{"$f":"'Source Data'!B784","v":"v"},{"$f":"'Source Data'!C784","v":5.9982800000000003E-2},{"$f":"'Source Data'!D784","v":"remote access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E784","v":" to the PDC,"},{"$f":"'Source Data'!F784","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"remote access may be obtained by unauthorized individuals to the PDC,"}]
[{"$f":"'Source Data'!A785","v":"wampac.3"},{"$f":"'Source Data'!B785","v":"i"},{"$f":"'Source Data'!C785","v":6.5565600000000002E-2},{"$f":"'Source Data'!D785","v":"All impacts presented in Table 7, as potentially caused by loss of measurements"},{"$f":"'Source Data'!E785","v":0},{"$f":"'Source Data'!F785","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by loss of measurements0"}]
[{"$f":"'Source Data'!A786","v":"wampac.3"},{"$f":"'Source Data'!B786","v":"m"},{"$f":"'Source Data'!C786","v":0.68566300000000002},{"$f":"'Source Data'!D786","v":"require redundancy"},{"$f":"'Source Data'!E786","v":" in PDCs using vendor diversity"},{"$f":"'Source Data'!F786","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy in PDCs using vendor diversity"}]
[{"$f":"'Source Data'!A787","v":"wampac.3"},{"$f":"'Source Data'!B787","v":"m"},{"$f":"'Source Data'!C787","v":0.75110600000000005},{"$f":"'Source Data'!D787","v":"restrict network service access"},{"$f":"'Source Data'!E787","v":" at multiple layers to prevent unauthorized individuals from gaining access to the PDC"},{"$f":"'Source Data'!F787","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network service access at multiple layers to prevent unauthorized individuals from gaining access to the PDC"}]
[{"$f":"'Source Data'!A788","v":"wampac.3"},{"$f":"'Source Data'!B788","v":"m"},{"$f":"'Source Data'!C788","v":0.68494500000000003},{"$f":"'Source Data'!D788","v":"restrict remote access"},{"$f":"'Source Data'!E788","v":" to the PDC"},{"$f":"'Source Data'!F788","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to the PDC"}]
[{"$f":"'Source Data'!A789","v":"wampac.3"},{"$f":"'Source Data'!B789","v":"m"},{"$f":"'Source Data'!C789","v":0.69240400000000002},{"$f":"'Source Data'!D789","v":"detect unauthorized connections"},{"$f":"'Source Data'!E789","v":" captured in the communication patterns to and from the PDC"},{"$f":"'Source Data'!F789","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized connections captured in the communication patterns to and from the PDC"}]
[{"$f":"'Source Data'!A790","v":"wampac.3"},{"$f":"'Source Data'!B790","v":"m"},{"$f":"'Source Data'!C790","v":0.50960099999999997},{"$f":"'Source Data'!D790","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E790","v":" for authentication and message integrity on the WAMPAC network"},{"$f":"'Source Data'!F790","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms for authentication and message integrity on the WAMPAC network"}]
[{"$f":"'Source Data'!A791","v":"wampac.3"},{"$f":"'Source Data'!B791","v":"m"},{"$f":"'Source Data'!C791","v":0.29155900000000001},{"$f":"'Source Data'!D791","v":"enforce restrictive firewall rules"},{"$f":"'Source Data'!E791","v":" for access to the PDC host network"},{"$f":"'Source Data'!F791","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce restrictive firewall rules for access to the PDC host network"}]
[{"$f":"'Source Data'!A792","v":"wampac.3"},{"$f":"'Source Data'!B792","v":"m"},{"$f":"'Source Data'!C792","v":0.85132099999999999},{"$f":"'Source Data'!D792","v":"require multi-factor authentication"},{"$f":"'Source Data'!E792","v":" for remote access to PDC configuration functions"},{"$f":"'Source Data'!F792","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for remote access to PDC configuration functions"}]
[{"$f":"'Source Data'!A793","v":"wampac.3"},{"$f":"'Source Data'!B793","v":"m"},{"$f":"'Source Data'!C793","v":8.2771700000000004E-2},{"$f":"'Source Data'!D793","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E793","v":" to limit privilege to modify the PDC configuration"},{"$f":"'Source Data'!F793","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privilege to modify the PDC configuration"}]
[{"$f":"'Source Data'!A794","v":"wampac.4"},{"$f":"'Source Data'!B794","v":"t"},{"$f":"'Source Data'!C794","v":0.57004500000000002},{"$f":"'Source Data'!D794","v":"Measurement Data Compromised due to PDC Authentication Compromise"},{"$f":"'Source Data'!E794","v":0},{"$f":"'Source Data'!F794","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Measurement Data Compromised due to PDC Authentication Compromise0"}]
[{"$f":"'Source Data'!A795","v":"wampac.4"},{"$f":"'Source Data'!B795","v":"d"},{"$f":"'Source Data'!C795","v":0.68259199999999998},{"$f":"'Source Data'!D795","v":"Although access control and connection authentication from a PMU into a PDC are in place, these are compromised. This may be due to a backdoor not subject to the usual controls, social engineering, network sniffing to gain credentials or an attack on the authentication database to modify or steal credential information. This allows inadvertent or malicious introduction of false measurement data."},{"$f":"'Source Data'!E795","v":0},{"$f":"'Source Data'!F795","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Although access control and connection authentication from a PMU into a PDC are in place, these are compromised. This may be due to a backdoor not subject to the usual controls, social engineering, network sniffing to gain credentials or an attack on the authentication database to modify or steal credential information. This allows inadvertent or malicious introduction of false measurement data.0"}]
[{"$f":"'Source Data'!A796","v":"wampac.4"},{"$f":"'Source Data'!B796","v":"v"},{"$f":"'Source Data'!C796","v":0.25619599999999998},{"$f":"'Source Data'!D796","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E796","v":" on the network  hosting the authentication database,"},{"$f":"'Source Data'!F796","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted on the network  hosting the authentication database,"}]
[{"$f":"'Source Data'!A797","v":"wampac.4"},{"$f":"'Source Data'!B797","v":"v"},{"$f":"'Source Data'!C797","v":0.18424499999999999},{"$f":"'Source Data'!D797","v":"credentials are accessible in the clear"},{"$f":"'Source Data'!E797","v":" while in transit or at rest,"},{"$f":"'Source Data'!F797","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"credentials are accessible in the clear while in transit or at rest,"}]
[{"$f":"'Source Data'!A798","v":"wampac.4"},{"$f":"'Source Data'!B798","v":"v"},{"$f":"'Source Data'!C798","v":0.33773700000000001},{"$f":"'Source Data'!D798","v":"system permits bypass of access control mechanisms"},{"$f":"'Source Data'!E798","v":" "},{"$f":"'Source Data'!F798","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits bypass of access control mechanisms "}]
[{"$f":"'Source Data'!A799","v":"wampac.4"},{"$f":"'Source Data'!B799","v":"v"},{"$f":"'Source Data'!C799","v":0.83071600000000001},{"$f":"'Source Data'!D799","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E799","v":" to the PDC/PMU configuration, which may include connection information"},{"$f":"'Source Data'!F799","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the PDC/PMU configuration, which may include connection information"}]
[{"$f":"'Source Data'!A800","v":"wampac.4"},{"$f":"'Source Data'!B800","v":"i"},{"$f":"'Source Data'!C800","v":0.59323800000000004},{"$f":"'Source Data'!D800","v":"All impacts presented in Table 7, as potentially caused by altered measurements."},{"$f":"'Source Data'!E800","v":0},{"$f":"'Source Data'!F800","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by altered measurements.0"}]
[{"$f":"'Source Data'!A801","v":"wampac.4"},{"$f":"'Source Data'!B801","v":"m"},{"$f":"'Source Data'!C801","v":0.80472299999999997},{"$f":"'Source Data'!D801","v":"authenticate devices"},{"$f":"'Source Data'!E801","v":" to the PDC, including coverage of all possible paths for communication, including any \"back doors\" remaining from development"},{"$f":"'Source Data'!F801","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate devices to the PDC, including coverage of all possible paths for communication, including any \"back doors\" remaining from development"}]
[{"$f":"'Source Data'!A802","v":"wampac.4"},{"$f":"'Source Data'!B802","v":"m"},{"$f":"'Source Data'!C802","v":0.39335599999999998},{"$f":"'Source Data'!D802","v":"restrict network service access"},{"$f":"'Source Data'!E802","v":" to all interfaces on the PDC,"},{"$f":"'Source Data'!F802","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network service access to all interfaces on the PDC,"}]
[{"$f":"'Source Data'!A803","v":"wampac.4"},{"$f":"'Source Data'!B803","v":"m"},{"$f":"'Source Data'!C803","v":2.1227099999999999E-2},{"$f":"'Source Data'!D803","v":"protect credentials"},{"$f":"'Source Data'!E803","v":" used to authenticate the PMU to the PDC,"},{"$f":"'Source Data'!F803","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials used to authenticate the PMU to the PDC,"}]
[{"$f":"'Source Data'!A804","v":"wampac.4"},{"$f":"'Source Data'!B804","v":"m"},{"$f":"'Source Data'!C804","v":0.39211400000000002},{"$f":"'Source Data'!D804","v":"change default credentials"},{"$f":"'Source Data'!E804","v":" "},{"$f":"'Source Data'!F804","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"change default credentials "}]
[{"$f":"'Source Data'!A805","v":"wampac.4"},{"$f":"'Source Data'!B805","v":"m"},{"$f":"'Source Data'!C805","v":8.67869E-2},{"$f":"'Source Data'!D805","v":"encrypt data at rest"},{"$f":"'Source Data'!E805","v":" specifically credentials"},{"$f":"'Source Data'!F805","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt data at rest specifically credentials"}]
[{"$f":"'Source Data'!A806","v":"wampac.4"},{"$f":"'Source Data'!B806","v":"m"},{"$f":"'Source Data'!C806","v":0.40584500000000001},{"$f":"'Source Data'!D806","v":"encrypt communication paths"},{"$f":"'Source Data'!E806","v":" used to transmit credentials"},{"$f":"'Source Data'!F806","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths used to transmit credentials"}]
[{"$f":"'Source Data'!A807","v":"wampac.4"},{"$f":"'Source Data'!B807","v":"m"},{"$f":"'Source Data'!C807","v":0.398476},{"$f":"'Source Data'!D807","v":"require approved key management"},{"$f":"'Source Data'!E807","v":" "},{"$f":"'Source Data'!F807","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved key management "}]
[{"$f":"'Source Data'!A808","v":"wampac.4"},{"$f":"'Source Data'!B808","v":"m"},{"$f":"'Source Data'!C808","v":0.59848500000000004},{"$f":"'Source Data'!D808","v":"restrict remote access"},{"$f":"'Source Data'!E808","v":" to the network hosting authentication database"},{"$f":"'Source Data'!F808","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to the network hosting authentication database"}]
[{"$f":"'Source Data'!A809","v":"wampac.4"},{"$f":"'Source Data'!B809","v":"m"},{"$f":"'Source Data'!C809","v":0.27611400000000003},{"$f":"'Source Data'!D809","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E809","v":" for the network hosting authentication database"},{"$f":"'Source Data'!F809","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention for the network hosting authentication database"}]
[{"$f":"'Source Data'!A810","v":"wampac.4"},{"$f":"'Source Data'!B810","v":"m"},{"$f":"'Source Data'!C810","v":5.5774600000000001E-2},{"$f":"'Source Data'!D810","v":"authenticate users"},{"$f":"'Source Data'!E810","v":" to the network hosting authentication database"},{"$f":"'Source Data'!F810","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users to the network hosting authentication database"}]
[{"$f":"'Source Data'!A811","v":"wampac.4"},{"$f":"'Source Data'!B811","v":"m"},{"$f":"'Source Data'!C811","v":0.55211399999999999},{"$f":"'Source Data'!D811","v":"detect unauthorized access"},{"$f":"'Source Data'!E811","v":" to the network hosting authentication database"},{"$f":"'Source Data'!F811","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access to the network hosting authentication database"}]
[{"$f":"'Source Data'!A812","v":"wampac.4"},{"$f":"'Source Data'!B812","v":"m"},{"$f":"'Source Data'!C812","v":0.52049299999999998},{"$f":"'Source Data'!D812","v":"protect security configuration"},{"$f":"'Source Data'!E812","v":" that lists the systems permitted to connect to the PDC"},{"$f":"'Source Data'!F812","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect security configuration that lists the systems permitted to connect to the PDC"}]
[{"$f":"'Source Data'!A813","v":"wampac.5"},{"$f":"'Source Data'!B813","v":"t"},{"$f":"'Source Data'!C813","v":0.82208999999999999},{"$f":"'Source Data'!D813","v":"Improper Phasor Gateway Configuration Obscures Cascading Failures"},{"$f":"'Source Data'!E813","v":0},{"$f":"'Source Data'!F813","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Improper Phasor Gateway Configuration Obscures Cascading Failures0"}]
[{"$f":"'Source Data'!A814","v":"wampac.5"},{"$f":"'Source Data'!B814","v":"d"},{"$f":"'Source Data'!C814","v":0.63585400000000003},{"$f":"'Source Data'!D814","v":"An authorized or unauthorized insider (e.g., social-engineered by a threat agent or accidentally) is able to gain access and misconfigures a phasor gateway, allowing less synchrophasor measurement data to be shared with other phasor gateways or altering the tagging of PMU ID associated with the shared data. This action results in a delay in other utilities' visibility to a cascading failure across utilities."},{"$f":"'Source Data'!E814","v":0},{"$f":"'Source Data'!F814","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An authorized or unauthorized insider (e.g., social-engineered by a threat agent or accidentally) is able to gain access and misconfigures a phasor gateway, allowing less synchrophasor measurement data to be shared with other phasor gateways or altering the tagging of PMU ID associated with the shared data. This action results in a delay in other utilities' visibility to a cascading failure across utilities.0"}]
[{"$f":"'Source Data'!A815","v":"wampac.5"},{"$f":"'Source Data'!B815","v":"v"},{"$f":"'Source Data'!C815","v":0.21663099999999999},{"$f":"'Source Data'!D815","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E815","v":" to configuration and programming software on the phase gateway,"},{"$f":"'Source Data'!F815","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to configuration and programming software on the phase gateway,"}]
[{"$f":"'Source Data'!A816","v":"wampac.5"},{"$f":"'Source Data'!B816","v":"v"},{"$f":"'Source Data'!C816","v":0.97558599999999995},{"$f":"'Source Data'!D816","v":"configuration changes are not verified for correctness"},{"$f":"'Source Data'!E816","v":" "},{"$f":"'Source Data'!F816","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configuration changes are not verified for correctness "}]
[{"$f":"'Source Data'!A817","v":"wampac.5"},{"$f":"'Source Data'!B817","v":"v"},{"$f":"'Source Data'!C817","v":0.69764099999999996},{"$f":"'Source Data'!D817","v":"remote access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E817","v":" to the phasor gateway,"},{"$f":"'Source Data'!F817","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"remote access may be obtained by unauthorized individuals to the phasor gateway,"}]
[{"$f":"'Source Data'!A818","v":"wampac.5"},{"$f":"'Source Data'!B818","v":"v"},{"$f":"'Source Data'!C818","v":0.30156100000000002},{"$f":"'Source Data'!D818","v":"critical components exhibit single point of failure"},{"$f":"'Source Data'!E818","v":" such as phasor gateways."},{"$f":"'Source Data'!F818","v":"Insufficient Redundancy (6.5.1.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"critical components exhibit single point of failure such as phasor gateways."}]
[{"$f":"'Source Data'!A819","v":"wampac.5"},{"$f":"'Source Data'!B819","v":"i"},{"$f":"'Source Data'!C819","v":0.84182599999999996},{"$f":"'Source Data'!D819","v":"All impacts presented in Table 7, as potentially caused by altered data or loss of data, for Special Protection applications"},{"$f":"'Source Data'!E819","v":0},{"$f":"'Source Data'!F819","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by altered data or loss of data, for Special Protection applications0"}]
[{"$f":"'Source Data'!A820","v":"wampac.5"},{"$f":"'Source Data'!B820","v":"m"},{"$f":"'Source Data'!C820","v":0.99589499999999997},{"$f":"'Source Data'!D820","v":"require reconfiguration in test mode"},{"$f":"'Source Data'!E820","v":" for gateways"},{"$f":"'Source Data'!F820","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require reconfiguration in test mode for gateways"}]
[{"$f":"'Source Data'!A821","v":"wampac.5"},{"$f":"'Source Data'!B821","v":"m"},{"$f":"'Source Data'!C821","v":0.31284099999999998},{"$f":"'Source Data'!D821","v":"require two-person rule"},{"$f":"'Source Data'!E821","v":" of test results that must be verified and approved by personnel/entities other than those that carried out the reconfiguration"},{"$f":"'Source Data'!F821","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require two-person rule of test results that must be verified and approved by personnel/entities other than those that carried out the reconfiguration"}]
[{"$f":"'Source Data'!A822","v":"wampac.5"},{"$f":"'Source Data'!B822","v":"m"},{"$f":"'Source Data'!C822","v":0.791717},{"$f":"'Source Data'!D822","v":"require redundancy"},{"$f":"'Source Data'!E822","v":" of phasor gateways (vendor diversity)"},{"$f":"'Source Data'!F822","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy of phasor gateways (vendor diversity)"}]
[{"$f":"'Source Data'!A823","v":"wampac.5"},{"$f":"'Source Data'!B823","v":"m"},{"$f":"'Source Data'!C823","v":0.36888900000000002},{"$f":"'Source Data'!D823","v":"detect unauthorized configuration"},{"$f":"'Source Data'!E823","v":" at the gateway level"},{"$f":"'Source Data'!F823","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized configuration at the gateway level"}]
[{"$f":"'Source Data'!A824","v":"wampac.5"},{"$f":"'Source Data'!B824","v":"m"},{"$f":"'Source Data'!C824","v":0.61096799999999996},{"$f":"'Source Data'!D824","v":"require multi-factor authentication"},{"$f":"'Source Data'!E824","v":" for remote access to phasor gateway configuration functions"},{"$f":"'Source Data'!F824","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for remote access to phasor gateway configuration functions"}]
[{"$f":"'Source Data'!A825","v":"wampac.5"},{"$f":"'Source Data'!B825","v":"m"},{"$f":"'Source Data'!C825","v":0.10666100000000001},{"$f":"'Source Data'!D825","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E825","v":" to limit privilege to modify the phasor gateway configuration"},{"$f":"'Source Data'!F825","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privilege to modify the phasor gateway configuration"}]
[{"$f":"'Source Data'!A826","v":"wampac.6"},{"$f":"'Source Data'!B826","v":"t"},{"$f":"'Source Data'!C826","v":0.35440700000000003},{"$f":"'Source Data'!D826","v":"Compromised Communications between PMUs and Control Center"},{"$f":"'Source Data'!E826","v":0},{"$f":"'Source Data'!F826","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Compromised Communications between PMUs and Control Center0"}]
[{"$f":"'Source Data'!A827","v":"wampac.6"},{"$f":"'Source Data'!B827","v":"d"},{"$f":"'Source Data'!C827","v":0.96526800000000001},{"$f":"'Source Data'!D827","v":"WAMPAC communications are slowed down or stopped by manipulating the communications link between the PMUs and the control center. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack."},{"$f":"'Source Data'!E827","v":0},{"$f":"'Source Data'!F827","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"WAMPAC communications are slowed down or stopped by manipulating the communications link between the PMUs and the control center. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack.0"}]
[{"$f":"'Source Data'!A828","v":"wampac.6"},{"$f":"'Source Data'!B828","v":"v"},{"$f":"'Source Data'!C828","v":0.33196100000000001},{"$f":"'Source Data'!D828","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E828","v":" to network components"},{"$f":"'Source Data'!F828","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted to network components"}]
[{"$f":"'Source Data'!A829","v":"wampac.6"},{"$f":"'Source Data'!B829","v":"v"},{"$f":"'Source Data'!C829","v":0.62770800000000004},{"$f":"'Source Data'!D829","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E829","v":" specifically unexpected access to network components or unusual traffic on the network"},{"$f":"'Source Data'!F829","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity specifically unexpected access to network components or unusual traffic on the network"}]
[{"$f":"'Source Data'!A830","v":"wampac.6"},{"$f":"'Source Data'!B830","v":"v"},{"$f":"'Source Data'!C830","v":0.14626600000000001},{"$f":"'Source Data'!D830","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E830","v":" to the WAMPAC network."},{"$f":"'Source Data'!F830","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the WAMPAC network."}]
[{"$f":"'Source Data'!A831","v":"wampac.6"},{"$f":"'Source Data'!B831","v":"i"},{"$f":"'Source Data'!C831","v":0.17972399999999999},{"$f":"'Source Data'!D831","v":"All impacts presented in Table 7, as potentially caused by loss of measurements"},{"$f":"'Source Data'!E831","v":0},{"$f":"'Source Data'!F831","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by loss of measurements0"}]
[{"$f":"'Source Data'!A832","v":"wampac.6"},{"$f":"'Source Data'!B832","v":"m"},{"$f":"'Source Data'!C832","v":0.69428800000000002},{"$f":"'Source Data'!D832","v":"detect unauthorized access"},{"$f":"'Source Data'!E832","v":" in network traffic on the PMU/PDC communication links"},{"$f":"'Source Data'!F832","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access in network traffic on the PMU/PDC communication links"}]
[{"$f":"'Source Data'!A833","v":"wampac.6"},{"$f":"'Source Data'!B833","v":"m"},{"$f":"'Source Data'!C833","v":0.24581500000000001},{"$f":"'Source Data'!D833","v":"restrict network access"},{"$f":"'Source Data'!E833","v":" on the PMU/PDC communication links"},{"$f":"'Source Data'!F833","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access on the PMU/PDC communication links"}]
[{"$f":"'Source Data'!A834","v":"wampac.6"},{"$f":"'Source Data'!B834","v":"m"},{"$f":"'Source Data'!C834","v":7.7900999999999998E-2},{"$f":"'Source Data'!D834","v":"restrict network access"},{"$f":"'Source Data'!E834","v":" through traffic throttling mechanisms such as router access control lists (ACLs) and firewalls"},{"$f":"'Source Data'!F834","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access through traffic throttling mechanisms such as router access control lists (ACLs) and firewalls"}]
[{"$f":"'Source Data'!A835","v":"wampac.6"},{"$f":"'Source Data'!B835","v":"m"},{"$f":"'Source Data'!C835","v":0.95680399999999999},{"$f":"'Source Data'!D835","v":"require redundancy"},{"$f":"'Source Data'!E835","v":" for the stability analysis using SCADA data (using independent communication networks)"},{"$f":"'Source Data'!F835","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy for the stability analysis using SCADA data (using independent communication networks)"}]
[{"$f":"'Source Data'!A836","v":"wampac.6"},{"$f":"'Source Data'!B836","v":"m"},{"$f":"'Source Data'!C836","v":0.45298300000000002},{"$f":"'Source Data'!D836","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E836","v":" "},{"$f":"'Source Data'!F836","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention "}]
[{"$f":"'Source Data'!A837","v":"wampac.6"},{"$f":"'Source Data'!B837","v":"m"},{"$f":"'Source Data'!C837","v":0.85720200000000002},{"$f":"'Source Data'!D837","v":"test before installation"},{"$f":"'Source Data'!E837","v":" of an IDS/IPS solution to verify that it does not compromise normal operation of the system"},{"$f":"'Source Data'!F837","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test before installation of an IDS/IPS solution to verify that it does not compromise normal operation of the system"}]
[{"$f":"'Source Data'!A838","v":"wampac.7"},{"$f":"'Source Data'!B838","v":"t"},{"$f":"'Source Data'!C838","v":8.0934900000000004E-2},{"$f":"'Source Data'!D838","v":"Compromised WAMPAC Historical Data Impacts Grid Stability"},{"$f":"'Source Data'!E838","v":0},{"$f":"'Source Data'!F838","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Compromised WAMPAC Historical Data Impacts Grid Stability0"}]
[{"$f":"'Source Data'!A839","v":"wampac.7"},{"$f":"'Source Data'!B839","v":"d"},{"$f":"'Source Data'!C839","v":0.28278999999999999},{"$f":"'Source Data'!D839","v":"An insider is able to gain unauthorized access to the network to which a WAMPAC historian is connected and to the historian host/database software's credentials, assuming credentials are in place. The insider corrupts or deletes the measurement data from the database."},{"$f":"'Source Data'!E839","v":0},{"$f":"'Source Data'!F839","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An insider is able to gain unauthorized access to the network to which a WAMPAC historian is connected and to the historian host/database software's credentials, assuming credentials are in place. The insider corrupts or deletes the measurement data from the database.0"}]
[{"$f":"'Source Data'!A840","v":"wampac.7"},{"$f":"'Source Data'!B840","v":"v"},{"$f":"'Source Data'!C840","v":0.49446499999999999},{"$f":"'Source Data'!D840","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Source Data'!E840","v":" to the historian,"},{"$f":"'Source Data'!F840","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interfaces permit unnecessary traffic flows to the historian,"}]
[{"$f":"'Source Data'!A841","v":"wampac.7"},{"$f":"'Source Data'!B841","v":"v"},{"$f":"'Source Data'!C841","v":0.44381900000000002},{"$f":"'Source Data'!D841","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E841","v":" allowing access to the historian,"},{"$f":"'Source Data'!F841","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted allowing access to the historian,"}]
[{"$f":"'Source Data'!A842","v":"wampac.7"},{"$f":"'Source Data'!B842","v":"v"},{"$f":"'Source Data'!C842","v":0.92810800000000004},{"$f":"'Source Data'!D842","v":"users lack visibility of unapproved access"},{"$f":"'Source Data'!E842","v":" on the WAMPAC network,"},{"$f":"'Source Data'!F842","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of unapproved access on the WAMPAC network,"}]
[{"$f":"'Source Data'!A843","v":"wampac.7"},{"$f":"'Source Data'!B843","v":"v"},{"$f":"'Source Data'!C843","v":0.114992},{"$f":"'Source Data'!D843","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E843","v":" to the WAMPAC historian database,"},{"$f":"'Source Data'!F843","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made to the WAMPAC historian database,"}]
[{"$f":"'Source Data'!A844","v":"wampac.7"},{"$f":"'Source Data'!B844","v":"v"},{"$f":"'Source Data'!C844","v":0.51898100000000003},{"$f":"'Source Data'!D844","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E844","v":" to configuration and programming software on the historian,"},{"$f":"'Source Data'!F844","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to configuration and programming software on the historian,"}]
[{"$f":"'Source Data'!A845","v":"wampac.7"},{"$f":"'Source Data'!B845","v":"v"},{"$f":"'Source Data'!C845","v":0.53940699999999997},{"$f":"'Source Data'!D845","v":"remote access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E845","v":" to the historian from remote networks."},{"$f":"'Source Data'!F845","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"remote access may be obtained by unauthorized individuals to the historian from remote networks."}]
[{"$f":"'Source Data'!A846","v":"wampac.7"},{"$f":"'Source Data'!B846","v":"i"},{"$f":"'Source Data'!C846","v":0.36194999999999999},{"$f":"'Source Data'!D846","v":"All impacts presented in Table 7, as potentially caused by loss of data, for Monitoring and Control applications"},{"$f":"'Source Data'!E846","v":0},{"$f":"'Source Data'!F846","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by loss of data, for Monitoring and Control applications0"}]
[{"$f":"'Source Data'!A847","v":"wampac.7"},{"$f":"'Source Data'!B847","v":"m"},{"$f":"'Source Data'!C847","v":0.32732699999999998},{"$f":"'Source Data'!D847","v":"restrict remote access"},{"$f":"'Source Data'!E847","v":" to the historian"},{"$f":"'Source Data'!F847","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to the historian"}]
[{"$f":"'Source Data'!A848","v":"wampac.7"},{"$f":"'Source Data'!B848","v":"m"},{"$f":"'Source Data'!C848","v":0.48551800000000001},{"$f":"'Source Data'!D848","v":"restrict application access"},{"$f":"'Source Data'!E848","v":" to prevent unauthorized individuals from gaining access to the historian"},{"$f":"'Source Data'!F848","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict application access to prevent unauthorized individuals from gaining access to the historian"}]
[{"$f":"'Source Data'!A849","v":"wampac.7"},{"$f":"'Source Data'!B849","v":"m"},{"$f":"'Source Data'!C849","v":0.33067400000000002},{"$f":"'Source Data'!D849","v":"require read-only access"},{"$f":"'Source Data'!E849","v":" to historian data"},{"$f":"'Source Data'!F849","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require read-only access to historian data"}]
[{"$f":"'Source Data'!A850","v":"wampac.7"},{"$f":"'Source Data'!B850","v":"m"},{"$f":"'Source Data'!C850","v":0.90322000000000002},{"$f":"'Source Data'!D850","v":"detect unauthorized connections"},{"$f":"'Source Data'!E850","v":" in communications to and from the historian"},{"$f":"'Source Data'!F850","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized connections in communications to and from the historian"}]
[{"$f":"'Source Data'!A851","v":"wampac.7"},{"$f":"'Source Data'!B851","v":"m"},{"$f":"'Source Data'!C851","v":0.96320300000000003},{"$f":"'Source Data'!D851","v":"detect abnormal behavior"},{"$f":"'Source Data'!E851","v":" on the measurement database"},{"$f":"'Source Data'!F851","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal behavior on the measurement database"}]
[{"$f":"'Source Data'!A852","v":"wampac.7"},{"$f":"'Source Data'!B852","v":"m"},{"$f":"'Source Data'!C852","v":2.8768599999999998E-2},{"$f":"'Source Data'!D852","v":"generate alerts"},{"$f":"'Source Data'!E852","v":" for unexpected activity on the measurement database"},{"$f":"'Source Data'!F852","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts for unexpected activity on the measurement database"}]
[{"$f":"'Source Data'!A853","v":"wampac.7"},{"$f":"'Source Data'!B853","v":"m"},{"$f":"'Source Data'!C853","v":0.71443199999999996},{"$f":"'Source Data'!D853","v":"check message integrity"},{"$f":"'Source Data'!E853","v":" (use cryptography) on the WAMPAC network"},{"$f":"'Source Data'!F853","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check message integrity (use cryptography) on the WAMPAC network"}]
[{"$f":"'Source Data'!A854","v":"wampac.7"},{"$f":"'Source Data'!B854","v":"m"},{"$f":"'Source Data'!C854","v":0.27427600000000002},{"$f":"'Source Data'!D854","v":"enforce restrictive firewall rules"},{"$f":"'Source Data'!E854","v":" for access to the historian"},{"$f":"'Source Data'!F854","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce restrictive firewall rules for access to the historian"}]
[{"$f":"'Source Data'!A855","v":"wampac.7"},{"$f":"'Source Data'!B855","v":"m"},{"$f":"'Source Data'!C855","v":0.13696900000000001},{"$f":"'Source Data'!D855","v":"require multi-factor authentication"},{"$f":"'Source Data'!E855","v":" for remote access to modify data managed by the historian"},{"$f":"'Source Data'!F855","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for remote access to modify data managed by the historian"}]
[{"$f":"'Source Data'!A856","v":"wampac.7"},{"$f":"'Source Data'!B856","v":"m"},{"$f":"'Source Data'!C856","v":0.43182199999999998},{"$f":"'Source Data'!D856","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E856","v":" to limit privilege to modify data managed by the historian"},{"$f":"'Source Data'!F856","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privilege to modify data managed by the historian"}]
[{"$f":"'Source Data'!A857","v":"wampac.8"},{"$f":"'Source Data'!B857","v":"t"},{"$f":"'Source Data'!C857","v":0.46553699999999998},{"$f":"'Source Data'!D857","v":"Malware in PMU/PDC Firmware Compromises Data Collection"},{"$f":"'Source Data'!E857","v":0},{"$f":"'Source Data'!F857","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Malware in PMU/PDC Firmware Compromises Data Collection0"}]
[{"$f":"'Source Data'!A858","v":"wampac.8"},{"$f":"'Source Data'!B858","v":"d"},{"$f":"'Source Data'!C858","v":0.150482},{"$f":"'Source Data'!D858","v":"A threat agent inserts firmware into PMU/PDC that alters measurements while they are collected. The altering mechanism can be triggered at all times, randomly or by certain events (e.g., time of day, certain date, etc.) that are assumed to inflict significant damage."},{"$f":"'Source Data'!E858","v":0},{"$f":"'Source Data'!F858","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent inserts firmware into PMU/PDC that alters measurements while they are collected. The altering mechanism can be triggered at all times, randomly or by certain events (e.g., time of day, certain date, etc.) that are assumed to inflict significant damage.0"}]
[{"$f":"'Source Data'!A859","v":"wampac.8"},{"$f":"'Source Data'!B859","v":"v"},{"$f":"'Source Data'!C859","v":0.84288600000000002},{"$f":"'Source Data'!D859","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E859","v":" at the manufacturer."},{"$f":"'Source Data'!F859","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes at the manufacturer."}]
[{"$f":"'Source Data'!A860","v":"wampac.8"},{"$f":"'Source Data'!B860","v":"v"},{"$f":"'Source Data'!C860","v":0.35248699999999999},{"$f":"'Source Data'!D860","v":"users lack visibility that unauthorized firmware has been installed"},{"$f":"'Source Data'!E860","v":" before running it"},{"$f":"'Source Data'!F860","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized firmware has been installed before running it"}]
[{"$f":"'Source Data'!A861","v":"wampac.8"},{"$f":"'Source Data'!B861","v":"v"},{"$f":"'Source Data'!C861","v":0.92253300000000005},{"$f":"'Source Data'!D861","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Source Data'!E861","v":" "},{"$f":"'Source Data'!F861","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized installation of software or firmware "}]
[{"$f":"'Source Data'!A862","v":"wampac.8"},{"$f":"'Source Data'!B862","v":"i"},{"$f":"'Source Data'!C862","v":0.60512500000000002},{"$f":"'Source Data'!D862","v":"All impacts presented in Table 7, as potentially caused by altered measurements"},{"$f":"'Source Data'!E862","v":0},{"$f":"'Source Data'!F862","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by altered measurements0"}]
[{"$f":"'Source Data'!A863","v":"wampac.8"},{"$f":"'Source Data'!B863","v":"i"},{"$f":"'Source Data'!C863","v":0.86131999999999997},{"$f":"'Source Data'!D863","v":"Significant effort/cost invested in troubleshooting the systems given the lack of measurement consistency, followed by equipment replacement"},{"$f":"'Source Data'!E863","v":0},{"$f":"'Source Data'!F863","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Significant effort/cost invested in troubleshooting the systems given the lack of measurement consistency, followed by equipment replacement0"}]
[{"$f":"'Source Data'!A864","v":"wampac.8"},{"$f":"'Source Data'!B864","v":"m"},{"$f":"'Source Data'!C864","v":4.5565599999999998E-2},{"$f":"'Source Data'!D864","v":"implement configuration management"},{"$f":"'Source Data'!E864","v":" for controlling modifications to firmware to ensure that a PMU/PDC is protected against inadequate or improper modifications before, during, and after firmware manufacturing"},{"$f":"'Source Data'!F864","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management for controlling modifications to firmware to ensure that a PMU/PDC is protected against inadequate or improper modifications before, during, and after firmware manufacturing"}]
[{"$f":"'Source Data'!A865","v":"wampac.8"},{"$f":"'Source Data'!B865","v":"m"},{"$f":"'Source Data'!C865","v":0.383303},{"$f":"'Source Data'!D865","v":"check software execution integrity"},{"$f":"'Source Data'!E865","v":" in firmware, since software may be compromised when loaded for execution"},{"$f":"'Source Data'!F865","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity in firmware, since software may be compromised when loaded for execution"}]
[{"$f":"'Source Data'!A866","v":"wampac.8"},{"$f":"'Source Data'!B866","v":"m"},{"$f":"'Source Data'!C866","v":0.21401899999999999},{"$f":"'Source Data'!D866","v":"require redundancy"},{"$f":"'Source Data'!E866","v":" in PMUs/PDCs using vendor diversity"},{"$f":"'Source Data'!F866","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy in PMUs/PDCs using vendor diversity"}]
[{"$f":"'Source Data'!A867","v":"wampac.8"},{"$f":"'Source Data'!B867","v":"m"},{"$f":"'Source Data'!C867","v":0.807257},{"$f":"'Source Data'!D867","v":"restrict system access"},{"$f":"'Source Data'!E867","v":" for firmware install/updates"},{"$f":"'Source Data'!F867","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict system access for firmware install/updates"}]
[{"$f":"'Source Data'!A868","v":"wampac.9"},{"$f":"'Source Data'!B868","v":"t"},{"$f":"'Source Data'!C868","v":0.61197999999999997},{"$f":"'Source Data'!D868","v":"DELETED"},{"$f":"'Source Data'!E868","v":0},{"$f":"'Source Data'!F868","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"DELETED0"}]
[{"$f":"'Source Data'!A869","v":"wampac.10"},{"$f":"'Source Data'!B869","v":"t"},{"$f":"'Source Data'!C869","v":5.33623E-3},{"$f":"'Source Data'!D869","v":"Compromised PMU/PDC/Phasor Gateway Metadata"},{"$f":"'Source Data'!E869","v":0},{"$f":"'Source Data'!F869","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Compromised PMU/PDC/Phasor Gateway Metadata0"}]
[{"$f":"'Source Data'!A870","v":"wampac.10"},{"$f":"'Source Data'!B870","v":"d"},{"$f":"'Source Data'!C870","v":2.6563300000000001E-2},{"$f":"'Source Data'!D870","v":"A threat agent is able to gain unauthorized access to the credentials of the PMU/PDC/Phasor Gateway metadata that describes the data structure, assuming credentials are in place, and corrupts or deletes the associated metadata from the database."},{"$f":"'Source Data'!E870","v":0},{"$f":"'Source Data'!F870","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent is able to gain unauthorized access to the credentials of the PMU/PDC/Phasor Gateway metadata that describes the data structure, assuming credentials are in place, and corrupts or deletes the associated metadata from the database.0"}]
[{"$f":"'Source Data'!A871","v":"wampac.10"},{"$f":"'Source Data'!B871","v":"v"},{"$f":"'Source Data'!C871","v":0.41867700000000002},{"$f":"'Source Data'!D871","v":"users lack visibility of unapproved access"},{"$f":"'Source Data'!E871","v":" on the WAMPAC backend,"},{"$f":"'Source Data'!F871","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of unapproved access on the WAMPAC backend,"}]
[{"$f":"'Source Data'!A872","v":"wampac.10"},{"$f":"'Source Data'!B872","v":"v"},{"$f":"'Source Data'!C872","v":0.91130900000000004},{"$f":"'Source Data'!D872","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E872","v":" to the WAMPAC backend network hosting the gateway metadata database,"},{"$f":"'Source Data'!F872","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted to the WAMPAC backend network hosting the gateway metadata database,"}]
[{"$f":"'Source Data'!A873","v":"wampac.10"},{"$f":"'Source Data'!B873","v":"v"},{"$f":"'Source Data'!C873","v":0.30978600000000001},{"$f":"'Source Data'!D873","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E873","v":" to the gateway metadata database."},{"$f":"'Source Data'!F873","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the gateway metadata database."}]
[{"$f":"'Source Data'!A874","v":"wampac.10"},{"$f":"'Source Data'!B874","v":"i"},{"$f":"'Source Data'!C874","v":0.90827000000000002},{"$f":"'Source Data'!D874","v":"All impacts presented in Table 7, as potentially caused by altered measurements"},{"$f":"'Source Data'!E874","v":0},{"$f":"'Source Data'!F874","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by altered measurements0"}]
[{"$f":"'Source Data'!A875","v":"wampac.10"},{"$f":"'Source Data'!B875","v":"i"},{"$f":"'Source Data'!C875","v":0.18438399999999999},{"$f":"'Source Data'!D875","v":"Significant effort/cost invested in troubleshooting the systems given the inconsistencies in PMU data attribution"},{"$f":"'Source Data'!E875","v":0},{"$f":"'Source Data'!F875","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Significant effort/cost invested in troubleshooting the systems given the inconsistencies in PMU data attribution0"}]
[{"$f":"'Source Data'!A876","v":"wampac.10"},{"$f":"'Source Data'!B876","v":"m"},{"$f":"'Source Data'!C876","v":0.24015900000000001},{"$f":"'Source Data'!D876","v":"detect unauthorized configuration"},{"$f":"'Source Data'!E876","v":" in the configuration databases"},{"$f":"'Source Data'!F876","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized configuration in the configuration databases"}]
[{"$f":"'Source Data'!A877","v":"wampac.10"},{"$f":"'Source Data'!B877","v":"m"},{"$f":"'Source Data'!C877","v":0.79227300000000001},{"$f":"'Source Data'!D877","v":"restrict database access"},{"$f":"'Source Data'!E877","v":" to applications that require access"},{"$f":"'Source Data'!F877","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict database access to applications that require access"}]
[{"$f":"'Source Data'!A878","v":"wampac.10"},{"$f":"'Source Data'!B878","v":"m"},{"$f":"'Source Data'!C878","v":0.31276500000000002},{"$f":"'Source Data'!D878","v":"require multi-factor authentication"},{"$f":"'Source Data'!E878","v":" for local administrators that require access"},{"$f":"'Source Data'!F878","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for local administrators that require access"}]
[{"$f":"'Source Data'!A879","v":"wampac.10"},{"$f":"'Source Data'!B879","v":"m"},{"$f":"'Source Data'!C879","v":0.134856},{"$f":"'Source Data'!D879","v":"encrypt data at rest"},{"$f":"'Source Data'!E879","v":" for database contents related to the PMU configurations"},{"$f":"'Source Data'!F879","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt data at rest for database contents related to the PMU configurations"}]
[{"$f":"'Source Data'!A880","v":"wampac.10"},{"$f":"'Source Data'!B880","v":"m"},{"$f":"'Source Data'!C880","v":0.32464900000000002},{"$f":"'Source Data'!D880","v":"restrict network access"},{"$f":"'Source Data'!E880","v":" to the WAMPAC backend network"},{"$f":"'Source Data'!F880","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the WAMPAC backend network"}]
[{"$f":"'Source Data'!A881","v":"wampac.11"},{"$f":"'Source Data'!B881","v":"t"},{"$f":"'Source Data'!C881","v":0.77071000000000001},{"$f":"'Source Data'!D881","v":"Compromised Communications between Substations"},{"$f":"'Source Data'!E881","v":0},{"$f":"'Source Data'!F881","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Compromised Communications between Substations0"}]
[{"$f":"'Source Data'!A882","v":"wampac.11"},{"$f":"'Source Data'!B882","v":"d"},{"$f":"'Source Data'!C882","v":0.98734100000000002},{"$f":"'Source Data'!D882","v":"An insider delays local measurement data exchange between substations by compromising the integrity of the WAMPAC communication link between substations. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack. Note: The impact of the failure scenario presented below is assessed under the assumption that WAMPAC is used as part of a special protection scheme (SPS)."},{"$f":"'Source Data'!E882","v":0},{"$f":"'Source Data'!F882","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An insider delays local measurement data exchange between substations by compromising the integrity of the WAMPAC communication link between substations. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack. Note: The impact of the failure scenario presented below is assessed under the assumption that WAMPAC is used as part of a special protection scheme (SPS).0"}]
[{"$f":"'Source Data'!A883","v":"wampac.11"},{"$f":"'Source Data'!B883","v":"v"},{"$f":"'Source Data'!C883","v":0.96292699999999998},{"$f":"'Source Data'!D883","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E883","v":" to network components,"},{"$f":"'Source Data'!F883","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted to network components,"}]
[{"$f":"'Source Data'!A884","v":"wampac.11"},{"$f":"'Source Data'!B884","v":"v"},{"$f":"'Source Data'!C884","v":0.66056800000000004},{"$f":"'Source Data'!D884","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E884","v":" specifically unexpected access to network components or unusual traffic on the network,"},{"$f":"'Source Data'!F884","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity specifically unexpected access to network components or unusual traffic on the network,"}]
[{"$f":"'Source Data'!A885","v":"wampac.11"},{"$f":"'Source Data'!B885","v":"v"},{"$f":"'Source Data'!C885","v":0.96212900000000001},{"$f":"'Source Data'!D885","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E885","v":" to the WAMPAC network."},{"$f":"'Source Data'!F885","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the WAMPAC network."}]
[{"$f":"'Source Data'!A886","v":"wampac.11"},{"$f":"'Source Data'!B886","v":"i"},{"$f":"'Source Data'!C886","v":0.80395499999999998},{"$f":"'Source Data'!D886","v":"All impacts presented in Table 7, as potentially caused by altered measurements or loss of data, for Special Protection and Control applications"},{"$f":"'Source Data'!E886","v":0},{"$f":"'Source Data'!F886","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by altered measurements or loss of data, for Special Protection and Control applications0"}]
[{"$f":"'Source Data'!A887","v":"wampac.11"},{"$f":"'Source Data'!B887","v":"m"},{"$f":"'Source Data'!C887","v":0.79984999999999995},{"$f":"'Source Data'!D887","v":"restrict network access"},{"$f":"'Source Data'!E887","v":" to administrative functions of network components,"},{"$f":"'Source Data'!F887","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to administrative functions of network components,"}]
[{"$f":"'Source Data'!A888","v":"wampac.11"},{"$f":"'Source Data'!B888","v":"m"},{"$f":"'Source Data'!C888","v":0.112691},{"$f":"'Source Data'!D888","v":"verify correct operation"},{"$f":"'Source Data'!E888","v":" by using redundant measurements (redundant PDCs) at each substation end transmitted through an independent communication network to double-check the transmitted measurements"},{"$f":"'Source Data'!F888","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify correct operation by using redundant measurements (redundant PDCs) at each substation end transmitted through an independent communication network to double-check the transmitted measurements"}]
[{"$f":"'Source Data'!A889","v":"wampac.11"},{"$f":"'Source Data'!B889","v":"m"},{"$f":"'Source Data'!C889","v":0.90440799999999999},{"$f":"'Source Data'!D889","v":"detect unauthorized access"},{"$f":"'Source Data'!E889","v":" on the substation communication links"},{"$f":"'Source Data'!F889","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access on the substation communication links"}]
[{"$f":"'Source Data'!A890","v":"wampac.11"},{"$f":"'Source Data'!B890","v":"m"},{"$f":"'Source Data'!C890","v":0.27329700000000001},{"$f":"'Source Data'!D890","v":"restrict network access"},{"$f":"'Source Data'!E890","v":" on the substation communication links"},{"$f":"'Source Data'!F890","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access on the substation communication links"}]
[{"$f":"'Source Data'!A891","v":"wampac.11"},{"$f":"'Source Data'!B891","v":"m"},{"$f":"'Source Data'!C891","v":0.62770400000000004},{"$f":"'Source Data'!D891","v":"restrict network access"},{"$f":"'Source Data'!E891","v":" to throttle network traffic, using solutions such as router access control lists (ACLs) and firewalls"},{"$f":"'Source Data'!F891","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to throttle network traffic, using solutions such as router access control lists (ACLs) and firewalls"}]
[{"$f":"'Source Data'!A892","v":"wampac.11"},{"$f":"'Source Data'!B892","v":"m"},{"$f":"'Source Data'!C892","v":0.59297200000000005},{"$f":"'Source Data'!D892","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E892","v":" "},{"$f":"'Source Data'!F892","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention "}]
[{"$f":"'Source Data'!A893","v":"wampac.11"},{"$f":"'Source Data'!B893","v":"m"},{"$f":"'Source Data'!C893","v":0.92493300000000001},{"$f":"'Source Data'!D893","v":"test before installation"},{"$f":"'Source Data'!E893","v":" of IDS/IPS solution to verify that it does not compromise normal operation of the system"},{"$f":"'Source Data'!F893","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test before installation of IDS/IPS solution to verify that it does not compromise normal operation of the system"}]
[{"$f":"'Source Data'!A894","v":"wampac.11"},{"$f":"'Source Data'!B894","v":"m"},{"$f":"'Source Data'!C894","v":0.53358000000000005},{"$f":"'Source Data'!D894","v":"require strong passwords"},{"$f":"'Source Data'!E894","v":" for access to the WAMPAC network"},{"$f":"'Source Data'!F894","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require strong passwords for access to the WAMPAC network"}]
[{"$f":"'Source Data'!A895","v":"wampac.11"},{"$f":"'Source Data'!B895","v":"m"},{"$f":"'Source Data'!C895","v":0.74367799999999995},{"$f":"'Source Data'!D895","v":"require multi-factor authentication"},{"$f":"'Source Data'!E895","v":" for access to the WAMPAC network"},{"$f":"'Source Data'!F895","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for access to the WAMPAC network"}]
[{"$f":"'Source Data'!A896","v":"wampac.11"},{"$f":"'Source Data'!B896","v":"m"},{"$f":"'Source Data'!C896","v":0.41682799999999998},{"$f":"'Source Data'!D896","v":"protect credentials"},{"$f":"'Source Data'!E896","v":" used to access the WAMPAC network in both user and administrative processes"},{"$f":"'Source Data'!F896","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect credentials used to access the WAMPAC network in both user and administrative processes"}]
[{"$f":"'Source Data'!A897","v":"wampac.12"},{"$f":"'Source Data'!B897","v":"t"},{"$f":"'Source Data'!C897","v":0.55264100000000005},{"$f":"'Source Data'!D897","v":"GPS Time Signal Compromise"},{"$f":"'Source Data'!E897","v":0},{"$f":"'Source Data'!F897","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"GPS Time Signal Compromise0"}]
[{"$f":"'Source Data'!A898","v":"wampac.12"},{"$f":"'Source Data'!B898","v":"d"},{"$f":"'Source Data'!C898","v":0.69890699999999994},{"$f":"'Source Data'!D898","v":"An attacker blocks or alters the GPS time signal that is associated with the synchrophasor measurements. The attacker can perform either a GPS spoofing or GPS jamming attack, where the GPS receiver is deceived by a more powerful signal resulting in the GPS signal being intentionally blocked or altered."},{"$f":"'Source Data'!E898","v":0},{"$f":"'Source Data'!F898","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An attacker blocks or alters the GPS time signal that is associated with the synchrophasor measurements. The attacker can perform either a GPS spoofing or GPS jamming attack, where the GPS receiver is deceived by a more powerful signal resulting in the GPS signal being intentionally blocked or altered.0"}]
[{"$f":"'Source Data'!A899","v":"wampac.12"},{"$f":"'Source Data'!B899","v":"v"},{"$f":"'Source Data'!C899","v":0.87863199999999997},{"$f":"'Source Data'!D899","v":"spoofed signal is either difficult or infeasible to distinguish from a legitimate signal"},{"$f":"'Source Data'!E899","v":" that provides GPS-based time synchronization."},{"$f":"'Source Data'!F899","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"spoofed signal is either difficult or infeasible to distinguish from a legitimate signal that provides GPS-based time synchronization."}]
[{"$f":"'Source Data'!A900","v":"wampac.12"},{"$f":"'Source Data'!B900","v":"i"},{"$f":"'Source Data'!C900","v":0.700874},{"$f":"'Source Data'!D900","v":"All impacts presented in Table 7, as potentially caused by altered measurements (in the case of GPS spoofing) or loss of measurements (in the case of GPS jamming)"},{"$f":"'Source Data'!E900","v":0},{"$f":"'Source Data'!F900","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All impacts presented in Table 7, as potentially caused by altered measurements (in the case of GPS spoofing) or loss of measurements (in the case of GPS jamming)0"}]
[{"$f":"'Source Data'!A901","v":"wampac.12"},{"$f":"'Source Data'!B901","v":"i"},{"$f":"'Source Data'!C901","v":0.39516200000000001},{"$f":"'Source Data'!D901","v":"Significant effort/cost invested in troubleshooting the systems given the lack of time signal consistency"},{"$f":"'Source Data'!E901","v":0},{"$f":"'Source Data'!F901","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Significant effort/cost invested in troubleshooting the systems given the lack of time signal consistency0"}]
[{"$f":"'Source Data'!A902","v":"wampac.12"},{"$f":"'Source Data'!B902","v":"m"},{"$f":"'Source Data'!C902","v":0.64097700000000002},{"$f":"'Source Data'!D902","v":"design for trust"},{"$f":"'Source Data'!E902","v":" in the synchronization mechanism for the synchrophasor signals (e.g., use internal clocks rather than GPS for the time signal)"},{"$f":"'Source Data'!F902","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design for trust in the synchronization mechanism for the synchrophasor signals (e.g., use internal clocks rather than GPS for the time signal)"}]
[{"$f":"'Source Data'!A903","v":"wampac.12"},{"$f":"'Source Data'!B903","v":"m"},{"$f":"'Source Data'!C903","v":0.71887800000000002},{"$f":"'Source Data'!D903","v":"validate signal"},{"$f":"'Source Data'!E903","v":" by using a redundant GPS signal transmitted through a communication network to detect the time signal drift in the GPS time signal (e.g., use NTP or PTP)"},{"$f":"'Source Data'!F903","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate signal by using a redundant GPS signal transmitted through a communication network to detect the time signal drift in the GPS time signal (e.g., use NTP or PTP)"}]
[{"$f":"'Source Data'!A904","v":"wampac.12"},{"$f":"'Source Data'!B904","v":"m"},{"$f":"'Source Data'!C904","v":0.675682},{"$f":"'Source Data'!D904","v":"require fail-over"},{"$f":"'Source Data'!E904","v":" for the local GPS signal to either a GPS signal brought from another part of the grid through a communication network or internal clocks for when an intrusion is detected"},{"$f":"'Source Data'!F904","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require fail-over for the local GPS signal to either a GPS signal brought from another part of the grid through a communication network or internal clocks for when an intrusion is detected"}]
[{"$f":"'Source Data'!A905","v":"et.1"},{"$f":"'Source Data'!B905","v":"t"},{"$f":"'Source Data'!C905","v":0.128665},{"$f":"'Source Data'!D905","v":"Custom Malware causes EV Overcharge and Explosion"},{"$f":"'Source Data'!E905","v":0},{"$f":"'Source Data'!F905","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Custom Malware causes EV Overcharge and Explosion0"}]
[{"$f":"'Source Data'!A906","v":"et.1"},{"$f":"'Source Data'!B906","v":"d"},{"$f":"'Source Data'!C906","v":0.98586700000000005},{"$f":"'Source Data'!D906","v":"A threat agent directly accesses and compromises the Electric Vehicle (EV) firmware or inserts a Trojan horse to always indicate the EV is undercharged. Consequently, the battery becomes overcharged and may eventually explode."},{"$f":"'Source Data'!E906","v":0},{"$f":"'Source Data'!F906","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent directly accesses and compromises the Electric Vehicle (EV) firmware or inserts a Trojan horse to always indicate the EV is undercharged. Consequently, the battery becomes overcharged and may eventually explode.0"}]
[{"$f":"'Source Data'!A907","v":"et.1"},{"$f":"'Source Data'!B907","v":"v"},{"$f":"'Source Data'!C907","v":6.6802E-2},{"$f":"'Source Data'!D907","v":"design, implementation, or maintenance permits system to enter a hazardous state"},{"$f":"'Source Data'!E907","v":" by overcharging or draining the battery beyond limits,"},{"$f":"'Source Data'!F907","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design, implementation, or maintenance permits system to enter a hazardous state by overcharging or draining the battery beyond limits,"}]
[{"$f":"'Source Data'!A908","v":"et.1"},{"$f":"'Source Data'!B908","v":"v"},{"$f":"'Source Data'!C908","v":0.34959200000000001},{"$f":"'Source Data'!D908","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E908","v":" to EV firmware using easily accessible interfaces,"},{"$f":"'Source Data'!F908","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to EV firmware using easily accessible interfaces,"}]
[{"$f":"'Source Data'!A909","v":"et.1"},{"$f":"'Source Data'!B909","v":"v"},{"$f":"'Source Data'!C909","v":0.84405699999999995},{"$f":"'Source Data'!D909","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E909","v":" to EV firmware."},{"$f":"'Source Data'!F909","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to EV firmware."}]
[{"$f":"'Source Data'!A910","v":"et.1"},{"$f":"'Source Data'!B910","v":"i"},{"$f":"'Source Data'!C910","v":0.28787600000000002},{"$f":"'Source Data'!D910","v":"Possible loss of life and property damage"},{"$f":"'Source Data'!E910","v":0},{"$f":"'Source Data'!F910","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible loss of life and property damage0"}]
[{"$f":"'Source Data'!A911","v":"et.1"},{"$f":"'Source Data'!B911","v":"i"},{"$f":"'Source Data'!C911","v":0.21598300000000001},{"$f":"'Source Data'!D911","v":"A tragic accident can lead to a loss of public confidence"},{"$f":"'Source Data'!E911","v":0},{"$f":"'Source Data'!F911","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A tragic accident can lead to a loss of public confidence0"}]
[{"$f":"'Source Data'!A912","v":"et.1"},{"$f":"'Source Data'!B912","v":"m"},{"$f":"'Source Data'!C912","v":0.33097599999999999},{"$f":"'Source Data'!D912","v":"protect from overcharge"},{"$f":"'Source Data'!E912","v":" by using a fail-safe battery hardware, providing a physical prevention of such an attack,"},{"$f":"'Source Data'!F912","v":"enforce limits"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect from overcharge by using a fail-safe battery hardware, providing a physical prevention of such an attack,"}]
[{"$f":"'Source Data'!A913","v":"et.1"},{"$f":"'Source Data'!B913","v":"m"},{"$f":"'Source Data'!C913","v":0.84995699999999996},{"$f":"'Source Data'!D913","v":"check software execution integrity"},{"$f":"'Source Data'!E913","v":" in EV firmware, since software may be compromised when loaded for execution,"},{"$f":"'Source Data'!F913","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity in EV firmware, since software may be compromised when loaded for execution,"}]
[{"$f":"'Source Data'!A914","v":"et.1"},{"$f":"'Source Data'!B914","v":"m"},{"$f":"'Source Data'!C914","v":0.38936399999999999},{"$f":"'Source Data'!D914","v":"authenticate users"},{"$f":"'Source Data'!E914","v":" that modify firmware"},{"$f":"'Source Data'!F914","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users that modify firmware"}]
[{"$f":"'Source Data'!A915","v":"et.2"},{"$f":"'Source Data'!B915","v":"t"},{"$f":"'Source Data'!C915","v":0.75131400000000004},{"$f":"'Source Data'!D915","v":"Simultaneous Fast Charges cause Transformer Overload"},{"$f":"'Source Data'!E915","v":0},{"$f":"'Source Data'!F915","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Simultaneous Fast Charges cause Transformer Overload0"}]
[{"$f":"'Source Data'!A916","v":"et.2"},{"$f":"'Source Data'!B916","v":"d"},{"$f":"'Source Data'!C916","v":7.86409E-2},{"$f":"'Source Data'!D916","v":"A threat agent is able to compromise a fast-charging station management system. When a large number of electric vehicles are connected to charging stations, the threat agent modifies the charge-staggering algorithm such that fast-charging begins concurrently for all the EVs, thus overloading the distribution transformer, causing a local outage, and preventing the EVs from being charged."},{"$f":"'Source Data'!E916","v":0},{"$f":"'Source Data'!F916","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent is able to compromise a fast-charging station management system. When a large number of electric vehicles are connected to charging stations, the threat agent modifies the charge-staggering algorithm such that fast-charging begins concurrently for all the EVs, thus overloading the distribution transformer, causing a local outage, and preventing the EVs from being charged.0"}]
[{"$f":"'Source Data'!A917","v":"et.2"},{"$f":"'Source Data'!B917","v":"v"},{"$f":"'Source Data'!C917","v":0.56415899999999997},{"$f":"'Source Data'!D917","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E917","v":" to the fast-charging station management system software and configuration,"},{"$f":"'Source Data'!F917","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the fast-charging station management system software and configuration,"}]
[{"$f":"'Source Data'!A918","v":"et.2"},{"$f":"'Source Data'!B918","v":"v"},{"$f":"'Source Data'!C918","v":0.89483299999999999},{"$f":"'Source Data'!D918","v":"design, implementation, or maintenance permits system to enter a hazardous state"},{"$f":"'Source Data'!E918","v":" by letting circuits become overloaded in the distribution transformer."},{"$f":"'Source Data'!F918","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design, implementation, or maintenance permits system to enter a hazardous state by letting circuits become overloaded in the distribution transformer."}]
[{"$f":"'Source Data'!A919","v":"et.2"},{"$f":"'Source Data'!B919","v":"i"},{"$f":"'Source Data'!C919","v":0.79805300000000001},{"$f":"'Source Data'!D919","v":"Power outage to EVs and the charging station"},{"$f":"'Source Data'!E919","v":0},{"$f":"'Source Data'!F919","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Power outage to EVs and the charging station0"}]
[{"$f":"'Source Data'!A920","v":"et.2"},{"$f":"'Source Data'!B920","v":"i"},{"$f":"'Source Data'!C920","v":0.76125600000000004},{"$f":"'Source Data'!D920","v":"Damage to the distribution transformer"},{"$f":"'Source Data'!E920","v":0},{"$f":"'Source Data'!F920","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Damage to the distribution transformer0"}]
[{"$f":"'Source Data'!A921","v":"et.2"},{"$f":"'Source Data'!B921","v":"m"},{"$f":"'Source Data'!C921","v":0.79002399999999995},{"$f":"'Source Data'!D921","v":"authenticate users"},{"$f":"'Source Data'!E921","v":" for access to configuration and software files for the fast-charging station management system"},{"$f":"'Source Data'!F921","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users for access to configuration and software files for the fast-charging station management system"}]
[{"$f":"'Source Data'!A922","v":"et.2"},{"$f":"'Source Data'!B922","v":"m"},{"$f":"'Source Data'!C922","v":0.50445600000000002},{"$f":"'Source Data'!D922","v":"check software file integrity"},{"$f":"'Source Data'!E922","v":" of fast-charging station management software and configuration files"},{"$f":"'Source Data'!F922","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity of fast-charging station management software and configuration files"}]
[{"$f":"'Source Data'!A923","v":"et.2"},{"$f":"'Source Data'!B923","v":"m"},{"$f":"'Source Data'!C923","v":0.96999299999999999},{"$f":"'Source Data'!D923","v":"generate alarms"},{"$f":"'Source Data'!E923","v":" on changes to settings such as the number of EVs allowed to charge simultaneously in the design of the management system"},{"$f":"'Source Data'!F923","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms on changes to settings such as the number of EVs allowed to charge simultaneously in the design of the management system"}]
[{"$f":"'Source Data'!A924","v":"et.2"},{"$f":"'Source Data'!B924","v":"m"},{"$f":"'Source Data'!C924","v":0.120476},{"$f":"'Source Data'!D924","v":"require circuit breaker"},{"$f":"'Source Data'!E924","v":" to avoid overloading of distribution transformer"},{"$f":"'Source Data'!F924","v":"enforce limits"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require circuit breaker to avoid overloading of distribution transformer"}]
[{"$f":"'Source Data'!A925","v":"et.3"},{"$f":"'Source Data'!B925","v":"t"},{"$f":"'Source Data'!C925","v":0.96336200000000005},{"$f":"'Source Data'!D925","v":"Virus Propagated between EVs and EV Service Equipment (EVSE)"},{"$f":"'Source Data'!E925","v":0},{"$f":"'Source Data'!F925","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Virus Propagated between EVs and EV Service Equipment (EVSE)0"}]
[{"$f":"'Source Data'!A926","v":"et.3"},{"$f":"'Source Data'!B926","v":"d"},{"$f":"'Source Data'!C926","v":0.31584899999999999},{"$f":"'Source Data'!D926","v":"A threat agent such as a disgruntled employee or an employee subjected to social engineering could inject a virus into the computer system of an EV at an EV maintenance center or at a factory. Although not present today, future wireless communication technologies for Vehicle-to-Infrastructure (V2I) could enable a vehicle to establish additional data communications channels through which the virus infects public charging stations. A public charging station may in turn infect other EVs. The virus could harm other key functions for car safety in the EV as well as charging functions in the EV and EVSE (Electric Vehicle Service Equipment)."},{"$f":"'Source Data'!E926","v":0},{"$f":"'Source Data'!F926","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent such as a disgruntled employee or an employee subjected to social engineering could inject a virus into the computer system of an EV at an EV maintenance center or at a factory. Although not present today, future wireless communication technologies for Vehicle-to-Infrastructure (V2I) could enable a vehicle to establish additional data communications channels through which the virus infects public charging stations. A public charging station may in turn infect other EVs. The virus could harm other key functions for car safety in the EV as well as charging functions in the EV and EVSE (Electric Vehicle Service Equipment).0"}]
[{"$f":"'Source Data'!A927","v":"et.3"},{"$f":"'Source Data'!B927","v":"v"},{"$f":"'Source Data'!C927","v":0.23838200000000001},{"$f":"'Source Data'!D927","v":"system permits installation of malware"},{"$f":"'Source Data'!E927","v":" in an EV, at the EV factory and maintenance center,"},{"$f":"'Source Data'!F927","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware in an EV, at the EV factory and maintenance center,"}]
[{"$f":"'Source Data'!A928","v":"et.3"},{"$f":"'Source Data'!B928","v":"v"},{"$f":"'Source Data'!C928","v":0.84350599999999998},{"$f":"'Source Data'!D928","v":"system permits installation of malware"},{"$f":"'Source Data'!E928","v":" in the public charging station system,"},{"$f":"'Source Data'!F928","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware in the public charging station system,"}]
[{"$f":"'Source Data'!A929","v":"et.3"},{"$f":"'Source Data'!B929","v":"v"},{"$f":"'Source Data'!C929","v":0.70482699999999998},{"$f":"'Source Data'!D929","v":"critical communication paths are not isolated from communication paths that require fewer protections to operate"},{"$f":"'Source Data'!E929","v":" specifically, EV charging and conventional data transmission during charging,"},{"$f":"'Source Data'!F929","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"critical communication paths are not isolated from communication paths that require fewer protections to operate specifically, EV charging and conventional data transmission during charging,"}]
[{"$f":"'Source Data'!A930","v":"et.3"},{"$f":"'Source Data'!B930","v":"v"},{"$f":"'Source Data'!C930","v":0.75039199999999995},{"$f":"'Source Data'!D930","v":"system permits installation of malware"},{"$f":"'Source Data'!E930","v":" in the public charging station system or EV being charged, during charging,"},{"$f":"'Source Data'!F930","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware in the public charging station system or EV being charged, during charging,"}]
[{"$f":"'Source Data'!A931","v":"et.3"},{"$f":"'Source Data'!B931","v":"v"},{"$f":"'Source Data'!C931","v":0.34771400000000002},{"$f":"'Source Data'!D931","v":"critical functions are not isolated from those that require fewer protections to operate"},{"$f":"'Source Data'!E931","v":" specifically car safety functions in the EV are not isolated from the more vulnerable battery related functions."},{"$f":"'Source Data'!F931","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"critical functions are not isolated from those that require fewer protections to operate specifically car safety functions in the EV are not isolated from the more vulnerable battery related functions."}]
[{"$f":"'Source Data'!A932","v":"et.3"},{"$f":"'Source Data'!B932","v":"i"},{"$f":"'Source Data'!C932","v":0.154971},{"$f":"'Source Data'!D932","v":"For affected EVs, range from minor nuisances to major safety problems which could cause loss of life"},{"$f":"'Source Data'!E932","v":0},{"$f":"'Source Data'!F932","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"For affected EVs, range from minor nuisances to major safety problems which could cause loss of life0"}]
[{"$f":"'Source Data'!A933","v":"et.3"},{"$f":"'Source Data'!B933","v":"i"},{"$f":"'Source Data'!C933","v":0.76695000000000002},{"$f":"'Source Data'!D933","v":"For affected EVSE's, potential for arbitrary malfunctions and revenue loss due to shutting down charging stations for troubleshooting"},{"$f":"'Source Data'!E933","v":0},{"$f":"'Source Data'!F933","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"For affected EVSE's, potential for arbitrary malfunctions and revenue loss due to shutting down charging stations for troubleshooting0"}]
[{"$f":"'Source Data'!A934","v":"et.3"},{"$f":"'Source Data'!B934","v":"i"},{"$f":"'Source Data'!C934","v":0.77228699999999995},{"$f":"'Source Data'!D934","v":"Negative publicity concerning EVs"},{"$f":"'Source Data'!E934","v":0},{"$f":"'Source Data'!F934","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Negative publicity concerning EVs0"}]
[{"$f":"'Source Data'!A935","v":"et.3"},{"$f":"'Source Data'!B935","v":"i"},{"$f":"'Source Data'!C935","v":0.79884999999999995},{"$f":"'Source Data'!D935","v":"Litigation for owner of charging station"},{"$f":"'Source Data'!E935","v":0},{"$f":"'Source Data'!F935","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Litigation for owner of charging station0"}]
[{"$f":"'Source Data'!A936","v":"et.3"},{"$f":"'Source Data'!B936","v":"m"},{"$f":"'Source Data'!C936","v":0.217527},{"$f":"'Source Data'!D936","v":"implement configuration management"},{"$f":"'Source Data'!E936","v":" of all code changes for EV software at the factory and maintenance center"},{"$f":"'Source Data'!F936","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management of all code changes for EV software at the factory and maintenance center"}]
[{"$f":"'Source Data'!A937","v":"et.3"},{"$f":"'Source Data'!B937","v":"m"},{"$f":"'Source Data'!C937","v":0.72299100000000005},{"$f":"'Source Data'!D937","v":"verify personnel"},{"$f":"'Source Data'!E937","v":" at the factory and maintenance center"},{"$f":"'Source Data'!F937","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify personnel at the factory and maintenance center"}]
[{"$f":"'Source Data'!A938","v":"et.3"},{"$f":"'Source Data'!B938","v":"m"},{"$f":"'Source Data'!C938","v":0.63429999999999997},{"$f":"'Source Data'!D938","v":"conduct code review"},{"$f":"'Source Data'!E938","v":" of EV software at the factory and maintenance center"},{"$f":"'Source Data'!F938","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"conduct code review of EV software at the factory and maintenance center"}]
[{"$f":"'Source Data'!A939","v":"et.3"},{"$f":"'Source Data'!B939","v":"m"},{"$f":"'Source Data'!C939","v":0.94408599999999998},{"$f":"'Source Data'!D939","v":"vulnerability scan before install"},{"$f":"'Source Data'!E939","v":" of EV software at the factory and maintenance center"},{"$f":"'Source Data'!F939","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"vulnerability scan before install of EV software at the factory and maintenance center"}]
[{"$f":"'Source Data'!A940","v":"et.3"},{"$f":"'Source Data'!B940","v":"m"},{"$f":"'Source Data'!C940","v":0.852356},{"$f":"'Source Data'!D940","v":"create audit logs"},{"$f":"'Source Data'!E940","v":" of all code changes to EV software at the factory and maintenance center"},{"$f":"'Source Data'!F940","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all code changes to EV software at the factory and maintenance center"}]
[{"$f":"'Source Data'!A941","v":"et.3"},{"$f":"'Source Data'!B941","v":"m"},{"$f":"'Source Data'!C941","v":3.6740299999999997E-2},{"$f":"'Source Data'!D941","v":"maintain anti-virus"},{"$f":"'Source Data'!E941","v":" to check the public charging station system for any new, unauthorized software already present or detected in communications with the electric vehicles"},{"$f":"'Source Data'!F941","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain anti-virus to check the public charging station system for any new, unauthorized software already present or detected in communications with the electric vehicles"}]
[{"$f":"'Source Data'!A942","v":"et.3"},{"$f":"'Source Data'!B942","v":"m"},{"$f":"'Source Data'!C942","v":0.27689900000000001},{"$f":"'Source Data'!D942","v":"isolate networks"},{"$f":"'Source Data'!E942","v":" within the vehicle to separate the charging signals from other signals"},{"$f":"'Source Data'!F942","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate networks within the vehicle to separate the charging signals from other signals"}]
[{"$f":"'Source Data'!A943","v":"et.3"},{"$f":"'Source Data'!B943","v":"m"},{"$f":"'Source Data'!C943","v":6.9171800000000006E-2},{"$f":"'Source Data'!D943","v":"isolate functions"},{"$f":"'Source Data'!E943","v":" specifically charging functions from safety-related functions within electric vehicles"},{"$f":"'Source Data'!F943","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate functions specifically charging functions from safety-related functions within electric vehicles"}]
[{"$f":"'Source Data'!A944","v":"et.3"},{"$f":"'Source Data'!B944","v":"m"},{"$f":"'Source Data'!C944","v":0.38193700000000003},{"$f":"'Source Data'!D944","v":"check software execution integrity"},{"$f":"'Source Data'!E944","v":" of EV software, since software may be compromised when loaded for execution"},{"$f":"'Source Data'!F944","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity of EV software, since software may be compromised when loaded for execution"}]
[{"$f":"'Source Data'!A945","v":"et.3"},{"$f":"'Source Data'!B945","v":"m"},{"$f":"'Source Data'!C945","v":0.51679299999999995},{"$f":"'Source Data'!D945","v":"detect abnormal functionality"},{"$f":"'Source Data'!E945","v":" (e.g., brake malfunctioning)"},{"$f":"'Source Data'!F945","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal functionality (e.g., brake malfunctioning)"}]
[{"$f":"'Source Data'!A946","v":"et.3"},{"$f":"'Source Data'!B946","v":"m"},{"$f":"'Source Data'!C946","v":0.28750300000000001},{"$f":"'Source Data'!D946","v":"analyze anomalous events"},{"$f":"'Source Data'!E946","v":" to determine if any anomalous behavior is caused by malicious code of EVs"},{"$f":"'Source Data'!F946","v":"analyze"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"analyze anomalous events to determine if any anomalous behavior is caused by malicious code of EVs"}]
[{"$f":"'Source Data'!A947","v":"et.3"},{"$f":"'Source Data'!B947","v":"m"},{"$f":"'Source Data'!C947","v":0.80461099999999997},{"$f":"'Source Data'!D947","v":"detect unusual patterns"},{"$f":"'Source Data'!E947","v":" of data transfer during charging"},{"$f":"'Source Data'!F947","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of data transfer during charging"}]
[{"$f":"'Source Data'!A948","v":"et.4"},{"$f":"'Source Data'!B948","v":"t"},{"$f":"'Source Data'!C948","v":0.27484399999999998},{"$f":"'Source Data'!D948","v":"EV Charging Locations Disclosed via Utility Database"},{"$f":"'Source Data'!E948","v":0},{"$f":"'Source Data'!F948","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"EV Charging Locations Disclosed via Utility Database0"}]
[{"$f":"'Source Data'!A949","v":"et.4"},{"$f":"'Source Data'!B949","v":"d"},{"$f":"'Source Data'!C949","v":0.23777100000000001},{"$f":"'Source Data'!D949","v":"A threat agent cracks through an enterprise firewall and exploits a weak operating system password. Because of a poor database server security configuration, the threat agent is able to obtain confidential utility records regarding charging locations for specific vehicles from the database."},{"$f":"'Source Data'!E949","v":0},{"$f":"'Source Data'!F949","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent cracks through an enterprise firewall and exploits a weak operating system password. Because of a poor database server security configuration, the threat agent is able to obtain confidential utility records regarding charging locations for specific vehicles from the database.0"}]
[{"$f":"'Source Data'!A950","v":"et.4"},{"$f":"'Source Data'!B950","v":"v"},{"$f":"'Source Data'!C950","v":0.898339},{"$f":"'Source Data'!D950","v":"unnecessary access is permitted to the database"},{"$f":"'Source Data'!E950","v":" in the firewall protecting the EV database server"},{"$f":"'Source Data'!F950","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the database in the firewall protecting the EV database server"}]
[{"$f":"'Source Data'!A951","v":"et.4"},{"$f":"'Source Data'!B951","v":"v"},{"$f":"'Source Data'!C951","v":0.86046800000000001},{"$f":"'Source Data'!D951","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E951","v":" to the EV database server"},{"$f":"'Source Data'!F951","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the EV database server"}]
[{"$f":"'Source Data'!A952","v":"et.4"},{"$f":"'Source Data'!B952","v":"v"},{"$f":"'Source Data'!C952","v":0.66442299999999999},{"$f":"'Source Data'!D952","v":"unnecessary access is permitted to the database"},{"$f":"'Source Data'!E952","v":" in the database server,"},{"$f":"'Source Data'!F952","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the database in the database server,"}]
[{"$f":"'Source Data'!A953","v":"et.4"},{"$f":"'Source Data'!B953","v":"i"},{"$f":"'Source Data'!C953","v":0.57696400000000003},{"$f":"'Source Data'!D953","v":"Privacy violation for customers"},{"$f":"'Source Data'!E953","v":0},{"$f":"'Source Data'!F953","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Privacy violation for customers0"}]
[{"$f":"'Source Data'!A954","v":"et.4"},{"$f":"'Source Data'!B954","v":"i"},{"$f":"'Source Data'!C954","v":0.48137200000000002},{"$f":"'Source Data'!D954","v":"Potential cost to the utility because of privacy lawsuits by customers"},{"$f":"'Source Data'!E954","v":0},{"$f":"'Source Data'!F954","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential cost to the utility because of privacy lawsuits by customers0"}]
[{"$f":"'Source Data'!A955","v":"et.4"},{"$f":"'Source Data'!B955","v":"i"},{"$f":"'Source Data'!C955","v":0.75466900000000003},{"$f":"'Source Data'!D955","v":"Potential legal action by government or regulatory agencies against the utility if applicable privacy laws are violated"},{"$f":"'Source Data'!E955","v":0},{"$f":"'Source Data'!F955","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential legal action by government or regulatory agencies against the utility if applicable privacy laws are violated0"}]
[{"$f":"'Source Data'!A956","v":"et.4"},{"$f":"'Source Data'!B956","v":"i"},{"$f":"'Source Data'!C956","v":0.38237300000000002},{"$f":"'Source Data'!D956","v":"Decrease in usage of utility charging stations and public relations issue for the utility"},{"$f":"'Source Data'!E956","v":0},{"$f":"'Source Data'!F956","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Decrease in usage of utility charging stations and public relations issue for the utility0"}]
[{"$f":"'Source Data'!A957","v":"et.4"},{"$f":"'Source Data'!B957","v":"m"},{"$f":"'Source Data'!C957","v":0.97534600000000005},{"$f":"'Source Data'!D957","v":"detect abnormal behavior"},{"$f":"'Source Data'!E957","v":" in enterprise perimeter protections"},{"$f":"'Source Data'!F957","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal behavior in enterprise perimeter protections"}]
[{"$f":"'Source Data'!A958","v":"et.4"},{"$f":"'Source Data'!B958","v":"m"},{"$f":"'Source Data'!C958","v":0.90027900000000005},{"$f":"'Source Data'!D958","v":"require password rule enforcement"},{"$f":"'Source Data'!E958","v":" "},{"$f":"'Source Data'!F958","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require password rule enforcement "}]
[{"$f":"'Source Data'!A959","v":"et.4"},{"$f":"'Source Data'!B959","v":"m"},{"$f":"'Source Data'!C959","v":0.45291999999999999},{"$f":"'Source Data'!D959","v":"encrypt data at rest"},{"$f":"'Source Data'!E959","v":" for database contents containing charging locations"},{"$f":"'Source Data'!F959","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt data at rest for database contents containing charging locations"}]
[{"$f":"'Source Data'!A960","v":"et.4"},{"$f":"'Source Data'!B960","v":"m"},{"$f":"'Source Data'!C960","v":0.15182799999999999},{"$f":"'Source Data'!D960","v":"restrict database access"},{"$f":"'Source Data'!E960","v":" to applications that require them"},{"$f":"'Source Data'!F960","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict database access to applications that require them"}]
[{"$f":"'Source Data'!A961","v":"et.4"},{"$f":"'Source Data'!B961","v":"m"},{"$f":"'Source Data'!C961","v":3.0459199999999999E-2},{"$f":"'Source Data'!D961","v":"restrict database access"},{"$f":"'Source Data'!E961","v":" to local administrators that use strong authentication"},{"$f":"'Source Data'!F961","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict database access to local administrators that use strong authentication"}]
[{"$f":"'Source Data'!A962","v":"et.5"},{"$f":"'Source Data'!B962","v":"t"},{"$f":"'Source Data'!C962","v":0.73133300000000001},{"$f":"'Source Data'!D962","v":"Compromised Protocol Translation Module Enables Control of EVs"},{"$f":"'Source Data'!E962","v":0},{"$f":"'Source Data'!F962","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Compromised Protocol Translation Module Enables Control of EVs0"}]
[{"$f":"'Source Data'!A963","v":"et.5"},{"$f":"'Source Data'!B963","v":"d"},{"$f":"'Source Data'!C963","v":0.126495},{"$f":"'Source Data'!D963","v":"A threat agent is able to hack a protocol translation module that translates demand response messages to an electric vehicle, from the Open Automated Demand Response protocol (OpenADR) as used by the utility, to Smart Energy Profile (SEP) 2.0 as used by the vehicle.  Consequently, the agent is able to send any desired command to a vehicle or possibly to a large number of vehicles."},{"$f":"'Source Data'!E963","v":0},{"$f":"'Source Data'!F963","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent is able to hack a protocol translation module that translates demand response messages to an electric vehicle, from the Open Automated Demand Response protocol (OpenADR) as used by the utility, to Smart Energy Profile (SEP) 2.0 as used by the vehicle.  Consequently, the agent is able to send any desired command to a vehicle or possibly to a large number of vehicles.0"}]
[{"$f":"'Source Data'!A964","v":"et.5"},{"$f":"'Source Data'!B964","v":"v"},{"$f":"'Source Data'!C964","v":0.76747200000000004},{"$f":"'Source Data'!D964","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E964","v":" to code in the protocol translation module."},{"$f":"'Source Data'!F964","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to code in the protocol translation module."}]
[{"$f":"'Source Data'!A965","v":"et.5"},{"$f":"'Source Data'!B965","v":"i"},{"$f":"'Source Data'!C965","v":0.48635},{"$f":"'Source Data'!D965","v":"Potential for turning charging on or off for a large number of vehicles within a short time period"},{"$f":"'Source Data'!E965","v":0},{"$f":"'Source Data'!F965","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential for turning charging on or off for a large number of vehicles within a short time period0"}]
[{"$f":"'Source Data'!A966","v":"et.5"},{"$f":"'Source Data'!B966","v":"i"},{"$f":"'Source Data'!C966","v":0.16203200000000001},{"$f":"'Source Data'!D966","v":"Inconvenience to customers"},{"$f":"'Source Data'!E966","v":0},{"$f":"'Source Data'!F966","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inconvenience to customers0"}]
[{"$f":"'Source Data'!A967","v":"et.5"},{"$f":"'Source Data'!B967","v":"i"},{"$f":"'Source Data'!C967","v":0.29069699999999998},{"$f":"'Source Data'!D967","v":"Cost of customer service situations"},{"$f":"'Source Data'!E967","v":0},{"$f":"'Source Data'!F967","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of customer service situations0"}]
[{"$f":"'Source Data'!A968","v":"et.5"},{"$f":"'Source Data'!B968","v":"i"},{"$f":"'Source Data'!C968","v":0.27656399999999998},{"$f":"'Source Data'!D968","v":"Potential to overpower and damage transformer in a neighborhood"},{"$f":"'Source Data'!E968","v":0},{"$f":"'Source Data'!F968","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential to overpower and damage transformer in a neighborhood0"}]
[{"$f":"'Source Data'!A969","v":"et.5"},{"$f":"'Source Data'!B969","v":"m"},{"$f":"'Source Data'!C969","v":0.343366},{"$f":"'Source Data'!D969","v":"restrict occurrence"},{"$f":"'Source Data'!E969","v":" of charging stations in a neighborhood based upon transformer capabilities"},{"$f":"'Source Data'!F969","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict occurrence of charging stations in a neighborhood based upon transformer capabilities"}]
[{"$f":"'Source Data'!A970","v":"et.5"},{"$f":"'Source Data'!B970","v":"m"},{"$f":"'Source Data'!C970","v":0.69295799999999996},{"$f":"'Source Data'!D970","v":"check software file integrity"},{"$f":"'Source Data'!E970","v":" of translation modules"},{"$f":"'Source Data'!F970","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity of translation modules"}]
[{"$f":"'Source Data'!A971","v":"et.6"},{"$f":"'Source Data'!B971","v":"t"},{"$f":"'Source Data'!C971","v":0.53701500000000002},{"$f":"'Source Data'!D971","v":"EVSE Connects Wirelessly to Wrong Meter and Compromises Billing"},{"$f":"'Source Data'!E971","v":0},{"$f":"'Source Data'!F971","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"EVSE Connects Wirelessly to Wrong Meter and Compromises Billing0"}]
[{"$f":"'Source Data'!A972","v":"et.6"},{"$f":"'Source Data'!B972","v":"d"},{"$f":"'Source Data'!C972","v":0.82489100000000004},{"$f":"'Source Data'!D972","v":"Although this is not currently done, an EVSE in the future may connect wirelessly to a meter for identifying the meter to be responsible for the charge. The EVSE attaches to the incorrect meter. This causes the wrong entity to be billed for any vehicle using the misconfigured EVSE."},{"$f":"'Source Data'!E972","v":0},{"$f":"'Source Data'!F972","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Although this is not currently done, an EVSE in the future may connect wirelessly to a meter for identifying the meter to be responsible for the charge. The EVSE attaches to the incorrect meter. This causes the wrong entity to be billed for any vehicle using the misconfigured EVSE.0"}]
[{"$f":"'Source Data'!A973","v":"et.6"},{"$f":"'Source Data'!B973","v":"v"},{"$f":"'Source Data'!C973","v":4.0873899999999998E-2},{"$f":"'Source Data'!D973","v":"inadequate binding of meter with energy users authorized to charge to that meter"},{"$f":"'Source Data'!E973","v":" "},{"$f":"'Source Data'!F973","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"inadequate binding of meter with energy users authorized to charge to that meter "}]
[{"$f":"'Source Data'!A974","v":"et.6"},{"$f":"'Source Data'!B974","v":"v"},{"$f":"'Source Data'!C974","v":0.37185000000000001},{"$f":"'Source Data'!D974","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E974","v":" in the association between an EVSE and its smart meter."},{"$f":"'Source Data'!F974","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made in the association between an EVSE and its smart meter."}]
[{"$f":"'Source Data'!A975","v":"et.6"},{"$f":"'Source Data'!B975","v":"i"},{"$f":"'Source Data'!C975","v":0.221807},{"$f":"'Source Data'!D975","v":"Cost of billing disputes that could be raised by any customer"},{"$f":"'Source Data'!E975","v":0},{"$f":"'Source Data'!F975","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of billing disputes that could be raised by any customer0"}]
[{"$f":"'Source Data'!A976","v":"et.6"},{"$f":"'Source Data'!B976","v":"i"},{"$f":"'Source Data'!C976","v":0.61116999999999999},{"$f":"'Source Data'!D976","v":"Delay or loss of payment to the utility"},{"$f":"'Source Data'!E976","v":0},{"$f":"'Source Data'!F976","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Delay or loss of payment to the utility0"}]
[{"$f":"'Source Data'!A977","v":"et.6"},{"$f":"'Source Data'!B977","v":"i"},{"$f":"'Source Data'!C977","v":0.362485},{"$f":"'Source Data'!D977","v":"Likely cost to upgrade or replace the smart meter and/or EVSE"},{"$f":"'Source Data'!E977","v":0},{"$f":"'Source Data'!F977","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Likely cost to upgrade or replace the smart meter and/or EVSE0"}]
[{"$f":"'Source Data'!A978","v":"et.6"},{"$f":"'Source Data'!B978","v":"m"},{"$f":"'Source Data'!C978","v":0.44112600000000002},{"$f":"'Source Data'!D978","v":"authenticate devices"},{"$f":"'Source Data'!E978","v":" between the EVSE and the smart meter"},{"$f":"'Source Data'!F978","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate devices between the EVSE and the smart meter"}]
[{"$f":"'Source Data'!A979","v":"et.6"},{"$f":"'Source Data'!B979","v":"m"},{"$f":"'Source Data'!C979","v":5.2845899999999996E-3},{"$f":"'Source Data'!D979","v":"require physical connection"},{"$f":"'Source Data'!E979","v":" specifically a wired connection between the EVSE and smart meter"},{"$f":"'Source Data'!F979","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require physical connection specifically a wired connection between the EVSE and smart meter"}]
[{"$f":"'Source Data'!A980","v":"et.6"},{"$f":"'Source Data'!B980","v":"m"},{"$f":"'Source Data'!C980","v":0.69816999999999996},{"$f":"'Source Data'!D980","v":"prevent modification"},{"$f":"'Source Data'!E980","v":" of the EVSE so that the definition of an associated meter is can only be changed by the customer that owns the meter."},{"$f":"'Source Data'!F980","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"prevent modification of the EVSE so that the definition of an associated meter is can only be changed by the customer that owns the meter."}]
[{"$f":"'Source Data'!A981","v":"et.7"},{"$f":"'Source Data'!B981","v":"t"},{"$f":"'Source Data'!C981","v":0.459426},{"$f":"'Source Data'!D981","v":"Private Information Disclosed in Transit between EV and EVSE"},{"$f":"'Source Data'!E981","v":0},{"$f":"'Source Data'!F981","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Private Information Disclosed in Transit between EV and EVSE0"}]
[{"$f":"'Source Data'!A982","v":"et.7"},{"$f":"'Source Data'!B982","v":"d"},{"$f":"'Source Data'!C982","v":0.24945000000000001},{"$f":"'Source Data'!D982","v":"Private information exchanged between an EV and an EVSE is captured by a threat agent. For example, this might be information related to the EV owner's payment method, current location or home location. Such data exchanges are not currently done but are anticipated in the future."},{"$f":"'Source Data'!E982","v":0},{"$f":"'Source Data'!F982","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Private information exchanged between an EV and an EVSE is captured by a threat agent. For example, this might be information related to the EV owner's payment method, current location or home location. Such data exchanges are not currently done but are anticipated in the future.0"}]
[{"$f":"'Source Data'!A983","v":"et.7"},{"$f":"'Source Data'!B983","v":"v"},{"$f":"'Source Data'!C983","v":0.75390599999999997},{"$f":"'Source Data'!D983","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Source Data'!E983","v":" in the EV/EVSE communications channel."},{"$f":"'Source Data'!F983","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes private data accessible to unauthorized individuals in the EV/EVSE communications channel."}]
[{"$f":"'Source Data'!A984","v":"et.7"},{"$f":"'Source Data'!B984","v":"i"},{"$f":"'Source Data'!C984","v":0.72389999999999999},{"$f":"'Source Data'!D984","v":"Loss of customer privacy"},{"$f":"'Source Data'!E984","v":0},{"$f":"'Source Data'!F984","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of customer privacy0"}]
[{"$f":"'Source Data'!A985","v":"et.7"},{"$f":"'Source Data'!B985","v":"i"},{"$f":"'Source Data'!C985","v":0.84437600000000002},{"$f":"'Source Data'!D985","v":"Decreased acceptance of electric vehicles"},{"$f":"'Source Data'!E985","v":0},{"$f":"'Source Data'!F985","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Decreased acceptance of electric vehicles0"}]
[{"$f":"'Source Data'!A986","v":"et.7"},{"$f":"'Source Data'!B986","v":"m"},{"$f":"'Source Data'!C986","v":0.80773700000000004},{"$f":"'Source Data'!D986","v":"encrypt communication paths"},{"$f":"'Source Data'!E986","v":" between an electric vehicle and the EVSE"},{"$f":"'Source Data'!F986","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths between an electric vehicle and the EVSE"}]
[{"$f":"'Source Data'!A987","v":"et.8"},{"$f":"'Source Data'!B987","v":"t"},{"$f":"'Source Data'!C987","v":0.123586},{"$f":"'Source Data'!D987","v":"Customer Misuses their EV Registration ID to Obtain Preferential Rate"},{"$f":"'Source Data'!E987","v":0},{"$f":"'Source Data'!F987","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Customer Misuses their EV Registration ID to Obtain Preferential Rate0"}]
[{"$f":"'Source Data'!A988","v":"et.8"},{"$f":"'Source Data'!B988","v":"d"},{"$f":"'Source Data'!C988","v":0.36196800000000001},{"$f":"'Source Data'!D988","v":"In a utility service territory where EVs are given preferential or special rates for electricity, a customer may misuse their EV registration identifier to power other electrical devices from the EVSE, thus getting that preferential rate for non-EV uses. In the case of Society of Automotive Engineers (SAE) J1772, the EV responds to the EVSE by clamping a 12V pulse width modulation (PWM) signal to either 3, 6, or 9 volts, depending on its status. A threat agent could plug a non-EV load into the EVSE and mimic the signal by using off-the-shelf resistors and diodes."},{"$f":"'Source Data'!E988","v":0},{"$f":"'Source Data'!F988","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"In a utility service territory where EVs are given preferential or special rates for electricity, a customer may misuse their EV registration identifier to power other electrical devices from the EVSE, thus getting that preferential rate for non-EV uses. In the case of Society of Automotive Engineers (SAE) J1772, the EV responds to the EVSE by clamping a 12V pulse width modulation (PWM) signal to either 3, 6, or 9 volts, depending on its status. A threat agent could plug a non-EV load into the EVSE and mimic the signal by using off-the-shelf resistors and diodes.0"}]
[{"$f":"'Source Data'!A989","v":"et.8"},{"$f":"'Source Data'!B989","v":"v"},{"$f":"'Source Data'!C989","v":0.20547399999999999},{"$f":"'Source Data'!D989","v":"system permits device identifier to be misused"},{"$f":"'Source Data'!E989","v":" to charge non-EV items when charging takes place based upon an EV registration identifier."},{"$f":"'Source Data'!F989","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits device identifier to be misused to charge non-EV items when charging takes place based upon an EV registration identifier."}]
[{"$f":"'Source Data'!A990","v":"et.8"},{"$f":"'Source Data'!B990","v":"i"},{"$f":"'Source Data'!C990","v":0.9103},{"$f":"'Source Data'!D990","v":"Loss of revenue to a utility"},{"$f":"'Source Data'!E990","v":0},{"$f":"'Source Data'!F990","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of revenue to a utility0"}]
[{"$f":"'Source Data'!A991","v":"et.8"},{"$f":"'Source Data'!B991","v":"i"},{"$f":"'Source Data'!C991","v":0.66069299999999997},{"$f":"'Source Data'!D991","v":"The non-EV load may draw too much current and blow the fuse of the EVSE or trip the local circuit breaker"},{"$f":"'Source Data'!E991","v":0},{"$f":"'Source Data'!F991","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The non-EV load may draw too much current and blow the fuse of the EVSE or trip the local circuit breaker0"}]
[{"$f":"'Source Data'!A992","v":"et.8"},{"$f":"'Source Data'!B992","v":"m"},{"$f":"'Source Data'!C992","v":0.79438799999999998},{"$f":"'Source Data'!D992","v":"authenticate devices"},{"$f":"'Source Data'!E992","v":" with charging protocol that uses not easily forgeable data sent by the EV that allows the utility to determine it is an EV, Currrently, an EV does not exchange any data with the EVSE during charging. Future EV systems are expected to have additional communications channels for data exchange with the EVSE usable for this purpose."},{"$f":"'Source Data'!F992","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate devices with charging protocol that uses not easily forgeable data sent by the EV that allows the utility to determine it is an EV, Currrently, an EV does not exchange any data with the EVSE during charging. Future EV systems are expected to have additional communications channels for data exchange with the EVSE usable for this purpose."}]
[{"$f":"'Source Data'!A993","v":"et.8"},{"$f":"'Source Data'!B993","v":"m"},{"$f":"'Source Data'!C993","v":0.14210100000000001},{"$f":"'Source Data'!D993","v":"detect unusual patterns"},{"$f":"'Source Data'!E993","v":" specifically power usage patterns at preferential rates from units that do not appear to be an EV. Potential monitoring methods could use Revenue Protection schemes that identify charging beyond the charging limit of the EV, or note that the real EV is charging at the same time but at a different location from the fake EV,"},{"$f":"'Source Data'!F993","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns specifically power usage patterns at preferential rates from units that do not appear to be an EV. Potential monitoring methods could use Revenue Protection schemes that identify charging beyond the charging limit of the EV, or note that the real EV is charging at the same time but at a different location from the fake EV,"}]
[{"$f":"'Source Data'!A994","v":"et.9"},{"$f":"'Source Data'!B994","v":"t"},{"$f":"'Source Data'!C994","v":0.297072},{"$f":"'Source Data'!D994","v":"EV Registration ID Stolen or Purchased to Obtain Preferential Rate"},{"$f":"'Source Data'!E994","v":0},{"$f":"'Source Data'!F994","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"EV Registration ID Stolen or Purchased to Obtain Preferential Rate0"}]
[{"$f":"'Source Data'!A995","v":"et.9"},{"$f":"'Source Data'!B995","v":"d"},{"$f":"'Source Data'!C995","v":6.4022300000000004E-2},{"$f":"'Source Data'!D995","v":"EV registration identities are stolen and used directly by the thief, or bought and sold in the black market so that they can be used to obtain preferential rates. This is of concern to a utility when the ID is used to identify the customer's payment method and/or the ID is used to charge a non-EV."},{"$f":"'Source Data'!E995","v":0},{"$f":"'Source Data'!F995","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"EV registration identities are stolen and used directly by the thief, or bought and sold in the black market so that they can be used to obtain preferential rates. This is of concern to a utility when the ID is used to identify the customer's payment method and/or the ID is used to charge a non-EV.0"}]
[{"$f":"'Source Data'!A996","v":"et.9"},{"$f":"'Source Data'!B996","v":"v"},{"$f":"'Source Data'!C996","v":0.83630899999999997},{"$f":"'Source Data'!D996","v":"system permits device identifier to be misused"},{"$f":"'Source Data'!E996","v":" to masquerade as valid customer whose EV is being charged when charging takes place based upon the identifier."},{"$f":"'Source Data'!F996","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits device identifier to be misused to masquerade as valid customer whose EV is being charged when charging takes place based upon the identifier."}]
[{"$f":"'Source Data'!A997","v":"et.9"},{"$f":"'Source Data'!B997","v":"i"},{"$f":"'Source Data'!C997","v":0.63515900000000003},{"$f":"'Source Data'!D997","v":"Illegitimate charges billed to legitimate owner of the EV registration ID"},{"$f":"'Source Data'!E997","v":0},{"$f":"'Source Data'!F997","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Illegitimate charges billed to legitimate owner of the EV registration ID0"}]
[{"$f":"'Source Data'!A998","v":"et.9"},{"$f":"'Source Data'!B998","v":"i"},{"$f":"'Source Data'!C998","v":0.85268600000000006},{"$f":"'Source Data'!D998","v":"Cost of associated customer service situation for this owner"},{"$f":"'Source Data'!E998","v":0},{"$f":"'Source Data'!F998","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of associated customer service situation for this owner0"}]
[{"$f":"'Source Data'!A999","v":"et.9"},{"$f":"'Source Data'!B999","v":"i"},{"$f":"'Source Data'!C999","v":0.57567699999999999},{"$f":"'Source Data'!D999","v":"Likely loss of revenue by the utility"},{"$f":"'Source Data'!E999","v":0},{"$f":"'Source Data'!F999","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Likely loss of revenue by the utility0"}]
[{"$f":"'Source Data'!A1000","v":"et.9"},{"$f":"'Source Data'!B1000","v":"m"},{"$f":"'Source Data'!C1000","v":0.209977},{"$f":"'Source Data'!D1000","v":"require PIN"},{"$f":"'Source Data'!E1000","v":" (or verification code) with use of registration identity"},{"$f":"'Source Data'!F1000","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require PIN (or verification code) with use of registration identity"}]
[{"$f":"'Source Data'!A1001","v":"et.9"},{"$f":"'Source Data'!B1001","v":"m"},{"$f":"'Source Data'!C1001","v":0.15406300000000001},{"$f":"'Source Data'!D1001","v":"require lockout"},{"$f":"'Source Data'!E1001","v":" for multiple failed retries"},{"$f":"'Source Data'!F1001","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require lockout for multiple failed retries"}]
[{"$f":"'Source Data'!A1002","v":"et.9"},{"$f":"'Source Data'!B1002","v":"m"},{"$f":"'Source Data'!C1002","v":6.4190799999999998E-3},{"$f":"'Source Data'!D1002","v":"authenticate devices"},{"$f":"'Source Data'!E1002","v":" with charging protocol that authenticates specific vehicles associated with a registration identity. This would require significant administration by the utility,"},{"$f":"'Source Data'!F1002","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate devices with charging protocol that authenticates specific vehicles associated with a registration identity. This would require significant administration by the utility,"}]
[{"$f":"'Source Data'!A1003","v":"et.9"},{"$f":"'Source Data'!B1003","v":"m"},{"$f":"'Source Data'!C1003","v":4.3159400000000001E-2},{"$f":"'Source Data'!D1003","v":"verify EV owner"},{"$f":"'Source Data'!E1003","v":" association with the EV ID (e.g., user ID or license ID)"},{"$f":"'Source Data'!F1003","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify EV owner association with the EV ID (e.g., user ID or license ID)"}]
[{"$f":"'Source Data'!A1004","v":"et.9"},{"$f":"'Source Data'!B1004","v":"m"},{"$f":"'Source Data'!C1004","v":0.32005800000000001},{"$f":"'Source Data'!D1004","v":"create audit logs"},{"$f":"'Source Data'!E1004","v":" for all uses of the EV ID"},{"$f":"'Source Data'!F1004","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs for all uses of the EV ID"}]
[{"$f":"'Source Data'!A1005","v":"et.9"},{"$f":"'Source Data'!B1005","v":"m"},{"$f":"'Source Data'!C1005","v":0.38923000000000002},{"$f":"'Source Data'!D1005","v":"detect unauthorized use"},{"$f":"'Source Data'!E1005","v":" of the EV ID"},{"$f":"'Source Data'!F1005","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized use of the EV ID"}]
[{"$f":"'Source Data'!A1006","v":"et.9"},{"$f":"'Source Data'!B1006","v":"m"},{"$f":"'Source Data'!C1006","v":0.77116700000000005},{"$f":"'Source Data'!D1006","v":"learn from others"},{"$f":"'Source Data'!E1006","v":" such as credit card companies and ATMs when designing processes for EVs: (a) Cancellation of ID and reissuance of a new one, (b) Refunds to customers for fraudulent charges,"},{"$f":"'Source Data'!F1006","v":"learn"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"learn from others such as credit card companies and ATMs when designing processes for EVs: (a) Cancellation of ID and reissuance of a new one, (b) Refunds to customers for fraudulent charges,"}]
[{"$f":"'Source Data'!A1007","v":"et.9"},{"$f":"'Source Data'!B1007","v":"m"},{"$f":"'Source Data'!C1007","v":0.28796100000000002},{"$f":"'Source Data'!D1007","v":"isolate functions"},{"$f":"'Source Data'!E1007","v":" specifically EV registration identity from payment method"},{"$f":"'Source Data'!F1007","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate functions specifically EV registration identity from payment method"}]
[{"$f":"'Source Data'!A1008","v":"et.10"},{"$f":"'Source Data'!B1008","v":"t"},{"$f":"'Source Data'!C1008","v":0.57546399999999998},{"$f":"'Source Data'!D1008","v":"High Priority EV Registration Identity Misused to Obtain Faster Charging"},{"$f":"'Source Data'!E1008","v":0},{"$f":"'Source Data'!F1008","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"High Priority EV Registration Identity Misused to Obtain Faster Charging0"}]
[{"$f":"'Source Data'!A1009","v":"et.10"},{"$f":"'Source Data'!B1009","v":"d"},{"$f":"'Source Data'!C1009","v":0.85030799999999995},{"$f":"'Source Data'!D1009","v":"The registration identity of a high priority EV (such as a fire truck, ambulance, or police car) is copied and used by a normal priority vehicle to get high priority (faster) charging at a charging station."},{"$f":"'Source Data'!E1009","v":0},{"$f":"'Source Data'!F1009","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The registration identity of a high priority EV (such as a fire truck, ambulance, or police car) is copied and used by a normal priority vehicle to get high priority (faster) charging at a charging station.0"}]
[{"$f":"'Source Data'!A1010","v":"et.10"},{"$f":"'Source Data'!B1010","v":"v"},{"$f":"'Source Data'!C1010","v":8.8078299999999998E-2},{"$f":"'Source Data'!D1010","v":"system permits device identifier to be misused"},{"$f":"'Source Data'!E1010","v":" to masquerade as a high priority EV that is being charged."},{"$f":"'Source Data'!F1010","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits device identifier to be misused to masquerade as a high priority EV that is being charged."}]
[{"$f":"'Source Data'!A1011","v":"et.10"},{"$f":"'Source Data'!B1011","v":"i"},{"$f":"'Source Data'!C1011","v":0.98641699999999999},{"$f":"'Source Data'!D1011","v":"Possibility for slower charging of high priority or other normal priority vehicles"},{"$f":"'Source Data'!E1011","v":0},{"$f":"'Source Data'!F1011","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possibility for slower charging of high priority or other normal priority vehicles0"}]
[{"$f":"'Source Data'!A1012","v":"et.10"},{"$f":"'Source Data'!B1012","v":"m"},{"$f":"'Source Data'!C1012","v":0.84688399999999997},{"$f":"'Source Data'!D1012","v":"require PIN"},{"$f":"'Source Data'!E1012","v":" or verification code (VIN number) with use of the EV registration identity"},{"$f":"'Source Data'!F1012","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require PIN or verification code (VIN number) with use of the EV registration identity"}]
[{"$f":"'Source Data'!A1013","v":"et.10"},{"$f":"'Source Data'!B1013","v":"m"},{"$f":"'Source Data'!C1013","v":0.51130699999999996},{"$f":"'Source Data'!D1013","v":"require lockout"},{"$f":"'Source Data'!E1013","v":" for multiple failed retries"},{"$f":"'Source Data'!F1013","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require lockout for multiple failed retries"}]
[{"$f":"'Source Data'!A1014","v":"et.10"},{"$f":"'Source Data'!B1014","v":"m"},{"$f":"'Source Data'!C1014","v":0.97558},{"$f":"'Source Data'!D1014","v":"authenticate devices"},{"$f":"'Source Data'!E1014","v":" with charging protocol that uses not easily forgeable data sent by the EV that allows the utility to determine that a high priority EV is being charged. Such vehicles could have a PKI certificate, for example. This may be feasible for public EVs although difficult for all EVs,"},{"$f":"'Source Data'!F1014","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate devices with charging protocol that uses not easily forgeable data sent by the EV that allows the utility to determine that a high priority EV is being charged. Such vehicles could have a PKI certificate, for example. This may be feasible for public EVs although difficult for all EVs,"}]
[{"$f":"'Source Data'!A1015","v":"et.11"},{"$f":"'Source Data'!B1015","v":"t"},{"$f":"'Source Data'!C1015","v":0.55254400000000004},{"$f":"'Source Data'!D1015","v":"All EV Registration IDs Stolen from Utility"},{"$f":"'Source Data'!E1015","v":0},{"$f":"'Source Data'!F1015","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"All EV Registration IDs Stolen from Utility0"}]
[{"$f":"'Source Data'!A1016","v":"et.11"},{"$f":"'Source Data'!B1016","v":"d"},{"$f":"'Source Data'!C1016","v":3.3916599999999998E-2},{"$f":"'Source Data'!D1016","v":"A utility has all its EV registration identities stolen and must therefore re-issue new registration identities to all EVs."},{"$f":"'Source Data'!E1016","v":0},{"$f":"'Source Data'!F1016","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A utility has all its EV registration identities stolen and must therefore re-issue new registration identities to all EVs.0"}]
[{"$f":"'Source Data'!A1017","v":"et.11"},{"$f":"'Source Data'!B1017","v":"v"},{"$f":"'Source Data'!C1017","v":0.78858600000000001},{"$f":"'Source Data'!D1017","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E1017","v":" for utility networks or databases that store or transmit registration identities,"},{"$f":"'Source Data'!F1017","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted for utility networks or databases that store or transmit registration identities,"}]
[{"$f":"'Source Data'!A1018","v":"et.11"},{"$f":"'Source Data'!B1018","v":"v"},{"$f":"'Source Data'!C1018","v":0.170959},{"$f":"'Source Data'!D1018","v":"unnecessary access is permitted to the database"},{"$f":"'Source Data'!E1018","v":" that stores registration identities,"},{"$f":"'Source Data'!F1018","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the database that stores registration identities,"}]
[{"$f":"'Source Data'!A1019","v":"et.11"},{"$f":"'Source Data'!B1019","v":"v"},{"$f":"'Source Data'!C1019","v":0.14630499999999999},{"$f":"'Source Data'!D1019","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Source Data'!E1019","v":" in the storage of registration identities,"},{"$f":"'Source Data'!F1019","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes private data accessible to unauthorized individuals in the storage of registration identities,"}]
[{"$f":"'Source Data'!A1020","v":"et.11"},{"$f":"'Source Data'!B1020","v":"v"},{"$f":"'Source Data'!C1020","v":4.65835E-2},{"$f":"'Source Data'!D1020","v":"system permits device identifier to be misused"},{"$f":"'Source Data'!E1020","v":" to masquerade as a trustworthy transaction. The ID could be misused by another person if the user's identity is not verified at the point of use. It can be misused for another EV if the EV is not authenticated when charging takes place."},{"$f":"'Source Data'!F1020","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits device identifier to be misused to masquerade as a trustworthy transaction. The ID could be misused by another person if the user's identity is not verified at the point of use. It can be misused for another EV if the EV is not authenticated when charging takes place."}]
[{"$f":"'Source Data'!A1021","v":"et.11"},{"$f":"'Source Data'!B1021","v":"i"},{"$f":"'Source Data'!C1021","v":0.499504},{"$f":"'Source Data'!D1021","v":"Cost of reissuing identities and verifying receipt of new identities so that stolen ones can be cancelled"},{"$f":"'Source Data'!E1021","v":0},{"$f":"'Source Data'!F1021","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of reissuing identities and verifying receipt of new identities so that stolen ones can be cancelled0"}]
[{"$f":"'Source Data'!A1022","v":"et.11"},{"$f":"'Source Data'!B1022","v":"i"},{"$f":"'Source Data'!C1022","v":0.65133099999999999},{"$f":"'Source Data'!D1022","v":"Loss of revenue while any stolen identities remain valid"},{"$f":"'Source Data'!E1022","v":0},{"$f":"'Source Data'!F1022","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of revenue while any stolen identities remain valid0"}]
[{"$f":"'Source Data'!A1023","v":"et.11"},{"$f":"'Source Data'!B1023","v":"i"},{"$f":"'Source Data'!C1023","v":0.68179000000000001},{"$f":"'Source Data'!D1023","v":"Inconvenience to customers"},{"$f":"'Source Data'!E1023","v":0},{"$f":"'Source Data'!F1023","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inconvenience to customers0"}]
[{"$f":"'Source Data'!A1024","v":"et.11"},{"$f":"'Source Data'!B1024","v":"i"},{"$f":"'Source Data'!C1024","v":0.41312300000000002},{"$f":"'Source Data'!D1024","v":"Cost of handling customer service situations"},{"$f":"'Source Data'!E1024","v":0},{"$f":"'Source Data'!F1024","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of handling customer service situations0"}]
[{"$f":"'Source Data'!A1025","v":"et.11"},{"$f":"'Source Data'!B1025","v":"m"},{"$f":"'Source Data'!C1025","v":0.53961800000000004},{"$f":"'Source Data'!D1025","v":"require PIN"},{"$f":"'Source Data'!E1025","v":" or verification code with use of registration identity"},{"$f":"'Source Data'!F1025","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require PIN or verification code with use of registration identity"}]
[{"$f":"'Source Data'!A1026","v":"et.11"},{"$f":"'Source Data'!B1026","v":"m"},{"$f":"'Source Data'!C1026","v":0.30708999999999997},{"$f":"'Source Data'!D1026","v":"require lockout"},{"$f":"'Source Data'!E1026","v":" for multiple failed attempts"},{"$f":"'Source Data'!F1026","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require lockout for multiple failed attempts"}]
[{"$f":"'Source Data'!A1027","v":"et.11"},{"$f":"'Source Data'!B1027","v":"m"},{"$f":"'Source Data'!C1027","v":0.79344000000000003},{"$f":"'Source Data'!D1027","v":"require authentication"},{"$f":"'Source Data'!E1027","v":" using a charging protocol that authenticates the specific EV being charged and that the EV is associated with the registration identity"},{"$f":"'Source Data'!F1027","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require authentication using a charging protocol that authenticates the specific EV being charged and that the EV is associated with the registration identity"}]
[{"$f":"'Source Data'!A1028","v":"et.11"},{"$f":"'Source Data'!B1028","v":"m"},{"$f":"'Source Data'!C1028","v":0.95547199999999999},{"$f":"'Source Data'!D1028","v":"enforce least privilege"},{"$f":"'Source Data'!E1028","v":" by defining the set of insiders authorized to access registration identities"},{"$f":"'Source Data'!F1028","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege by defining the set of insiders authorized to access registration identities"}]
[{"$f":"'Source Data'!A1029","v":"et.11"},{"$f":"'Source Data'!B1029","v":"m"},{"$f":"'Source Data'!C1029","v":0.24617},{"$f":"'Source Data'!D1029","v":"create audit logs"},{"$f":"'Source Data'!E1029","v":" of the individual viewing registration identities"},{"$f":"'Source Data'!F1029","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of the individual viewing registration identities"}]
[{"$f":"'Source Data'!A1030","v":"et.11"},{"$f":"'Source Data'!B1030","v":"m"},{"$f":"'Source Data'!C1030","v":0.52273400000000003},{"$f":"'Source Data'!D1030","v":"restrict remote access"},{"$f":"'Source Data'!E1030","v":" to the database"},{"$f":"'Source Data'!F1030","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to the database"}]
[{"$f":"'Source Data'!A1031","v":"et.11"},{"$f":"'Source Data'!B1031","v":"m"},{"$f":"'Source Data'!C1031","v":0.86610100000000001},{"$f":"'Source Data'!D1031","v":"restrict file access"},{"$f":"'Source Data'!E1031","v":" to database files from the host operating system"},{"$f":"'Source Data'!F1031","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict file access to database files from the host operating system"}]
[{"$f":"'Source Data'!A1032","v":"et.11"},{"$f":"'Source Data'!B1032","v":"m"},{"$f":"'Source Data'!C1032","v":0.55905899999999997},{"$f":"'Source Data'!D1032","v":"restrict network access"},{"$f":"'Source Data'!E1032","v":" to the network hosting the database"},{"$f":"'Source Data'!F1032","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the network hosting the database"}]
[{"$f":"'Source Data'!A1033","v":"et.11"},{"$f":"'Source Data'!B1033","v":"m"},{"$f":"'Source Data'!C1033","v":9.6074300000000001E-2},{"$f":"'Source Data'!D1033","v":"encrypt data at rest"},{"$f":"'Source Data'!E1033","v":" for database files containing EV registration identities"},{"$f":"'Source Data'!F1033","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt data at rest for database files containing EV registration identities"}]
[{"$f":"'Source Data'!A1034","v":"et.11"},{"$f":"'Source Data'!B1034","v":"m"},{"$f":"'Source Data'!C1034","v":0.92096500000000003},{"$f":"'Source Data'!D1034","v":"encrypt communication paths"},{"$f":"'Source Data'!E1034","v":" of network traffic containing EV registration identities"},{"$f":"'Source Data'!F1034","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths of network traffic containing EV registration identities"}]
[{"$f":"'Source Data'!A1035","v":"et.12"},{"$f":"'Source Data'!B1035","v":"t"},{"$f":"'Source Data'!C1035","v":0.961839},{"$f":"'Source Data'!D1035","v":"Unavailable Communication Blocks Customer Use of EV Preferential Rate"},{"$f":"'Source Data'!E1035","v":0},{"$f":"'Source Data'!F1035","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unavailable Communication Blocks Customer Use of EV Preferential Rate0"}]
[{"$f":"'Source Data'!A1036","v":"et.12"},{"$f":"'Source Data'!B1036","v":"d"},{"$f":"'Source Data'!C1036","v":0.33368799999999998},{"$f":"'Source Data'!D1036","v":"An EV owner belongs to utility A and uses the \"utility smart card\" to charge his EV at a utility B's charging station. If the two utilities have a business contract so that the owner must receive a special rate, the communications between the two utilities must be protected. A threat agent could compromise the communication paths or involved systems, so that utility B is unable to obtain information from utility A regarding the EV owner's rate. As a result, the customer may not receive the preferential rate."},{"$f":"'Source Data'!E1036","v":0},{"$f":"'Source Data'!F1036","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An EV owner belongs to utility A and uses the \"utility smart card\" to charge his EV at a utility B's charging station. If the two utilities have a business contract so that the owner must receive a special rate, the communications between the two utilities must be protected. A threat agent could compromise the communication paths or involved systems, so that utility B is unable to obtain information from utility A regarding the EV owner's rate. As a result, the customer may not receive the preferential rate.0"}]
[{"$f":"'Source Data'!A1037","v":"et.12"},{"$f":"'Source Data'!B1037","v":"v"},{"$f":"'Source Data'!C1037","v":0.55549499999999996},{"$f":"'Source Data'!D1037","v":"critical components exhibit single point of failure"},{"$f":"'Source Data'!E1037","v":" such as communication paths or databases used to verify registration identities between utilities."},{"$f":"'Source Data'!F1037","v":"Insufficient Redundancy (6.5.1.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"critical components exhibit single point of failure such as communication paths or databases used to verify registration identities between utilities."}]
[{"$f":"'Source Data'!A1038","v":"et.12"},{"$f":"'Source Data'!B1038","v":"i"},{"$f":"'Source Data'!C1038","v":0.16666500000000001},{"$f":"'Source Data'!D1038","v":"Customer inconvenience"},{"$f":"'Source Data'!E1038","v":0},{"$f":"'Source Data'!F1038","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Customer inconvenience0"}]
[{"$f":"'Source Data'!A1039","v":"et.12"},{"$f":"'Source Data'!B1039","v":"i"},{"$f":"'Source Data'!C1039","v":0.52915000000000001},{"$f":"'Source Data'!D1039","v":"Cost of customer service situation handling complaints and coordinating refunds with servicing utility. It is assumed that customers will still be able to charge their EVs by using standard credit cards so they are not denied service."},{"$f":"'Source Data'!E1039","v":0},{"$f":"'Source Data'!F1039","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of customer service situation handling complaints and coordinating refunds with servicing utility. It is assumed that customers will still be able to charge their EVs by using standard credit cards so they are not denied service.0"}]
[{"$f":"'Source Data'!A1040","v":"et.12"},{"$f":"'Source Data'!B1040","v":"m"},{"$f":"'Source Data'!C1040","v":0.97027600000000003},{"$f":"'Source Data'!D1040","v":"require resiliency"},{"$f":"'Source Data'!E1040","v":" in communication paths for verifying registration identities"},{"$f":"'Source Data'!F1040","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require resiliency in communication paths for verifying registration identities"}]
[{"$f":"'Source Data'!A1041","v":"et.12"},{"$f":"'Source Data'!B1041","v":"m"},{"$f":"'Source Data'!C1041","v":0.97555999999999998},{"$f":"'Source Data'!D1041","v":"learn from others"},{"$f":"'Source Data'!E1041","v":" such as credit card company concepts like using a central verification service that provides redundancy and resiliency"},{"$f":"'Source Data'!F1041","v":"learn"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"learn from others such as credit card company concepts like using a central verification service that provides redundancy and resiliency"}]
[{"$f":"'Source Data'!A1042","v":"et.12"},{"$f":"'Source Data'!B1042","v":"m"},{"$f":"'Source Data'!C1042","v":0.87567700000000004},{"$f":"'Source Data'!D1042","v":"choose own rate"},{"$f":"'Source Data'!E1042","v":" at individual charging stations, regardless of the customers' utility membership (like existing gas stations)"},{"$f":"'Source Data'!F1042","v":"user decision"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"choose own rate at individual charging stations, regardless of the customers' utility membership (like existing gas stations)"}]
[{"$f":"'Source Data'!A1043","v":"et.13"},{"$f":"'Source Data'!B1043","v":"t"},{"$f":"'Source Data'!C1043","v":0.57384800000000002},{"$f":"'Source Data'!D1043","v":"Invalidated EV Registration ID Blocks Customer use of Preferential Rate"},{"$f":"'Source Data'!E1043","v":0},{"$f":"'Source Data'!F1043","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Invalidated EV Registration ID Blocks Customer use of Preferential Rate0"}]
[{"$f":"'Source Data'!A1044","v":"et.13"},{"$f":"'Source Data'!B1044","v":"d"},{"$f":"'Source Data'!C1044","v":3.3273799999999999E-2},{"$f":"'Source Data'!D1044","v":"A threat agent (possibly a disgruntled employee) accesses the utility's EV registration database and invalidates selected EV registration identities. This would prevent those EVs from charging at the preferential rate if they were allowed to charge."},{"$f":"'Source Data'!E1044","v":0},{"$f":"'Source Data'!F1044","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent (possibly a disgruntled employee) accesses the utility's EV registration database and invalidates selected EV registration identities. This would prevent those EVs from charging at the preferential rate if they were allowed to charge.0"}]
[{"$f":"'Source Data'!A1045","v":"et.13"},{"$f":"'Source Data'!B1045","v":"v"},{"$f":"'Source Data'!C1045","v":0.28272399999999998},{"$f":"'Source Data'!D1045","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E1045","v":" to utility networks or databases that store registration identities,"},{"$f":"'Source Data'!F1045","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted to utility networks or databases that store registration identities,"}]
[{"$f":"'Source Data'!A1046","v":"et.13"},{"$f":"'Source Data'!B1046","v":"v"},{"$f":"'Source Data'!C1046","v":3.6630500000000003E-2},{"$f":"'Source Data'!D1046","v":"unnecessary access is permitted to the database"},{"$f":"'Source Data'!E1046","v":" that stores registration identities,"},{"$f":"'Source Data'!F1046","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the database that stores registration identities,"}]
[{"$f":"'Source Data'!A1047","v":"et.13"},{"$f":"'Source Data'!B1047","v":"v"},{"$f":"'Source Data'!C1047","v":0.76053000000000004},{"$f":"'Source Data'!D1047","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E1047","v":" via transactions that impact the EV registration ID database."},{"$f":"'Source Data'!F1047","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made via transactions that impact the EV registration ID database."}]
[{"$f":"'Source Data'!A1048","v":"et.13"},{"$f":"'Source Data'!B1048","v":"i"},{"$f":"'Source Data'!C1048","v":0.60490600000000005},{"$f":"'Source Data'!D1048","v":"Serious inconvenience and embarrassment to customers in any situation where credit cards or other billing methods using the regular electricity rate are not available. One example is a visitor to any non-retail location where the party responsible for the electricity account for the facility visited is not expected to pay the visitor's bills (such as a contractor travelling to a job site or a professor's visit to a colleague)"},{"$f":"'Source Data'!E1048","v":0},{"$f":"'Source Data'!F1048","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Serious inconvenience and embarrassment to customers in any situation where credit cards or other billing methods using the regular electricity rate are not available. One example is a visitor to any non-retail location where the party responsible for the electricity account for the facility visited is not expected to pay the visitor's bills (such as a contractor travelling to a job site or a professor's visit to a colleague)0"}]
[{"$f":"'Source Data'!A1049","v":"et.13"},{"$f":"'Source Data'!B1049","v":"i"},{"$f":"'Source Data'!C1049","v":0.41264299999999998},{"$f":"'Source Data'!D1049","v":"Cost of customer service situations to handle complaints and to coordinate refunds with other utilities. This assumes that in a retail situation the customer will still be able to charge their EV by using standard credit cards so they are not denied service. Also assumed is that when at home, the customer would be billed at the standard rate if their registration identify was invalid"},{"$f":"'Source Data'!E1049","v":0},{"$f":"'Source Data'!F1049","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of customer service situations to handle complaints and to coordinate refunds with other utilities. This assumes that in a retail situation the customer will still be able to charge their EV by using standard credit cards so they are not denied service. Also assumed is that when at home, the customer would be billed at the standard rate if their registration identify was invalid0"}]
[{"$f":"'Source Data'!A1050","v":"et.13"},{"$f":"'Source Data'!B1050","v":"m"},{"$f":"'Source Data'!C1050","v":0.53622899999999996},{"$f":"'Source Data'!D1050","v":"create audit logs"},{"$f":"'Source Data'!E1050","v":" of administrative activity that invalidates a registration identity using the customary user interface"},{"$f":"'Source Data'!F1050","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of administrative activity that invalidates a registration identity using the customary user interface"}]
[{"$f":"'Source Data'!A1051","v":"et.13"},{"$f":"'Source Data'!B1051","v":"m"},{"$f":"'Source Data'!C1051","v":0.89819700000000002},{"$f":"'Source Data'!D1051","v":"generate alarms"},{"$f":"'Source Data'!E1051","v":" for administrative activity that invalidates a registration identity using the customary user interface"},{"$f":"'Source Data'!F1051","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for administrative activity that invalidates a registration identity using the customary user interface"}]
[{"$f":"'Source Data'!A1052","v":"et.13"},{"$f":"'Source Data'!B1052","v":"m"},{"$f":"'Source Data'!C1052","v":0.103671},{"$f":"'Source Data'!D1052","v":"enforce least privilege"},{"$f":"'Source Data'!E1052","v":" for individuals authorized to use this customary user interface"},{"$f":"'Source Data'!F1052","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege for individuals authorized to use this customary user interface"}]
[{"$f":"'Source Data'!A1053","v":"et.13"},{"$f":"'Source Data'!B1053","v":"m"},{"$f":"'Source Data'!C1053","v":1.39715E-2},{"$f":"'Source Data'!D1053","v":"create audit logs"},{"$f":"'Source Data'!E1053","v":" of all methods of access to view the databases"},{"$f":"'Source Data'!F1053","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all methods of access to view the databases"}]
[{"$f":"'Source Data'!A1054","v":"et.13"},{"$f":"'Source Data'!B1054","v":"m"},{"$f":"'Source Data'!C1054","v":0.67466400000000004},{"$f":"'Source Data'!D1054","v":"restrict remote access"},{"$f":"'Source Data'!E1054","v":" to the database"},{"$f":"'Source Data'!F1054","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to the database"}]
[{"$f":"'Source Data'!A1055","v":"et.13"},{"$f":"'Source Data'!B1055","v":"m"},{"$f":"'Source Data'!C1055","v":0.46905200000000002},{"$f":"'Source Data'!D1055","v":"restrict file access"},{"$f":"'Source Data'!E1055","v":" to applicable database files via the host operating system"},{"$f":"'Source Data'!F1055","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict file access to applicable database files via the host operating system"}]
[{"$f":"'Source Data'!A1056","v":"et.13"},{"$f":"'Source Data'!B1056","v":"m"},{"$f":"'Source Data'!C1056","v":0.88505699999999998},{"$f":"'Source Data'!D1056","v":"restrict network access"},{"$f":"'Source Data'!E1056","v":" to the network hosting the EV registration ID database"},{"$f":"'Source Data'!F1056","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the network hosting the EV registration ID database"}]
[{"$f":"'Source Data'!A1057","v":"et.14"},{"$f":"'Source Data'!B1057","v":"t"},{"$f":"'Source Data'!C1057","v":0.61115299999999995},{"$f":"'Source Data'!D1057","v":"EV Charging Process Slowed by Validation Delay of EV Registration ID"},{"$f":"'Source Data'!E1057","v":0},{"$f":"'Source Data'!F1057","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"EV Charging Process Slowed by Validation Delay of EV Registration ID0"}]
[{"$f":"'Source Data'!A1058","v":"et.14"},{"$f":"'Source Data'!B1058","v":"d"},{"$f":"'Source Data'!C1058","v":0.90822499999999995},{"$f":"'Source Data'!D1058","v":"A threat agent (possibly a disgruntled employee who wants to embarrass the utility) modifies the verification software that accesses the utility's EV registration database, and introduces random delays in validating EV identities when the vehicles are trying to charge. This would slow down, but not necessarily prevent charging."},{"$f":"'Source Data'!E1058","v":0},{"$f":"'Source Data'!F1058","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent (possibly a disgruntled employee who wants to embarrass the utility) modifies the verification software that accesses the utility's EV registration database, and introduces random delays in validating EV identities when the vehicles are trying to charge. This would slow down, but not necessarily prevent charging.0"}]
[{"$f":"'Source Data'!A1059","v":"et.14"},{"$f":"'Source Data'!B1059","v":"v"},{"$f":"'Source Data'!C1059","v":0.97224699999999997},{"$f":"'Source Data'!D1059","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1059","v":" to software,"},{"$f":"'Source Data'!F1059","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to software,"}]
[{"$f":"'Source Data'!A1060","v":"et.14"},{"$f":"'Source Data'!B1060","v":"i"},{"$f":"'Source Data'!C1060","v":0.44371500000000003},{"$f":"'Source Data'!D1060","v":"Inconvenience to customers"},{"$f":"'Source Data'!E1060","v":0},{"$f":"'Source Data'!F1060","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inconvenience to customers0"}]
[{"$f":"'Source Data'!A1061","v":"et.14"},{"$f":"'Source Data'!B1061","v":"i"},{"$f":"'Source Data'!C1061","v":0.29640100000000003},{"$f":"'Source Data'!D1061","v":"Cost of handling customer complaints"},{"$f":"'Source Data'!E1061","v":0},{"$f":"'Source Data'!F1061","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of handling customer complaints0"}]
[{"$f":"'Source Data'!A1062","v":"et.14"},{"$f":"'Source Data'!B1062","v":"i"},{"$f":"'Source Data'!C1062","v":0.87207800000000002},{"$f":"'Source Data'!D1062","v":"Cost of troubleshooting problem"},{"$f":"'Source Data'!E1062","v":0},{"$f":"'Source Data'!F1062","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of troubleshooting problem0"}]
[{"$f":"'Source Data'!A1063","v":"et.14"},{"$f":"'Source Data'!B1063","v":"i"},{"$f":"'Source Data'!C1063","v":8.2054699999999994E-2},{"$f":"'Source Data'!D1063","v":"Embarrassment to the utility"},{"$f":"'Source Data'!E1063","v":0},{"$f":"'Source Data'!F1063","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Embarrassment to the utility0"}]
[{"$f":"'Source Data'!A1064","v":"et.14"},{"$f":"'Source Data'!B1064","v":"i"},{"$f":"'Source Data'!C1064","v":0.23611799999999999},{"$f":"'Source Data'!D1064","v":"Creates poor perception of the usability of EVs"},{"$f":"'Source Data'!E1064","v":0},{"$f":"'Source Data'!F1064","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Creates poor perception of the usability of EVs0"}]
[{"$f":"'Source Data'!A1065","v":"et.14"},{"$f":"'Source Data'!B1065","v":"m"},{"$f":"'Source Data'!C1065","v":0.242537},{"$f":"'Source Data'!D1065","v":"create audit logs"},{"$f":"'Source Data'!E1065","v":" of who has made software additions or modifications"},{"$f":"'Source Data'!F1065","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of who has made software additions or modifications"}]
[{"$f":"'Source Data'!A1066","v":"et.14"},{"$f":"'Source Data'!B1066","v":"m"},{"$f":"'Source Data'!C1066","v":0.28569600000000001},{"$f":"'Source Data'!D1066","v":"check software execution integrity"},{"$f":"'Source Data'!E1066","v":" of all live executables, since software may be compromised when loaded for execution"},{"$f":"'Source Data'!F1066","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity of all live executables, since software may be compromised when loaded for execution"}]
[{"$f":"'Source Data'!A1067","v":"et.14"},{"$f":"'Source Data'!B1067","v":"m"},{"$f":"'Source Data'!C1067","v":0.60575400000000001},{"$f":"'Source Data'!D1067","v":"require redundancy"},{"$f":"'Source Data'!E1067","v":" for ways to verify the EV without directly accessing the EV registration system"},{"$f":"'Source Data'!F1067","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy for ways to verify the EV without directly accessing the EV registration system"}]
[{"$f":"'Source Data'!A1068","v":"et.14"},{"$f":"'Source Data'!B1068","v":"m"},{"$f":"'Source Data'!C1068","v":0.99498399999999998},{"$f":"'Source Data'!D1068","v":"isolate functions"},{"$f":"'Source Data'!E1068","v":" of the vehicle charging process from the validation of EVs (such as a driver pumps gas in a gas station)"},{"$f":"'Source Data'!F1068","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate functions of the vehicle charging process from the validation of EVs (such as a driver pumps gas in a gas station)"}]
[{"$f":"'Source Data'!A1069","v":"et.15"},{"$f":"'Source Data'!B1069","v":"t"},{"$f":"'Source Data'!C1069","v":0.76615200000000006},{"$f":"'Source Data'!D1069","v":"Malware Causes Discharge of EV to the Grid"},{"$f":"'Source Data'!E1069","v":0},{"$f":"'Source Data'!F1069","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Malware Causes Discharge of EV to the Grid0"}]
[{"$f":"'Source Data'!A1070","v":"et.15"},{"$f":"'Source Data'!B1070","v":"d"},{"$f":"'Source Data'!C1070","v":5.4112399999999998E-2},{"$f":"'Source Data'!D1070","v":"A threat agent compromises the Vehicle-to-Grid (V2G) protocol that allows bi-directional flows of electricity. The threat agent may hack a protocol translation module directly or insert malware in the charging station management system. The malware could cause vehicles to discharge partially or completely without the owner's consent."},{"$f":"'Source Data'!E1070","v":0},{"$f":"'Source Data'!F1070","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent compromises the Vehicle-to-Grid (V2G) protocol that allows bi-directional flows of electricity. The threat agent may hack a protocol translation module directly or insert malware in the charging station management system. The malware could cause vehicles to discharge partially or completely without the owner's consent.0"}]
[{"$f":"'Source Data'!A1071","v":"et.15"},{"$f":"'Source Data'!B1071","v":"v"},{"$f":"'Source Data'!C1071","v":0.62957600000000002},{"$f":"'Source Data'!D1071","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1071","v":" to code in the charging station management system and protocol translation module,"},{"$f":"'Source Data'!F1071","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to code in the charging station management system and protocol translation module,"}]
[{"$f":"'Source Data'!A1072","v":"et.15"},{"$f":"'Source Data'!B1072","v":"v"},{"$f":"'Source Data'!C1072","v":0.47988399999999998},{"$f":"'Source Data'!D1072","v":"design, implementation, or maintenance permits system to enter a hazardous state"},{"$f":"'Source Data'!E1072","v":" by overloading of the distribution transformer if many EVs are discharged,"},{"$f":"'Source Data'!F1072","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design, implementation, or maintenance permits system to enter a hazardous state by overloading of the distribution transformer if many EVs are discharged,"}]
[{"$f":"'Source Data'!A1073","v":"et.15"},{"$f":"'Source Data'!B1073","v":"v"},{"$f":"'Source Data'!C1073","v":0.56796199999999997},{"$f":"'Source Data'!D1073","v":"system takes action before confirming changes with user"},{"$f":"'Source Data'!E1073","v":" causing EVs to be discharged without owner's consent."},{"$f":"'Source Data'!F1073","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system takes action before confirming changes with user causing EVs to be discharged without owner's consent."}]
[{"$f":"'Source Data'!A1074","v":"et.15"},{"$f":"'Source Data'!B1074","v":"i"},{"$f":"'Source Data'!C1074","v":0.55437899999999996},{"$f":"'Source Data'!D1074","v":"Critical damage to electric vehicles"},{"$f":"'Source Data'!E1074","v":0},{"$f":"'Source Data'!F1074","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Critical damage to electric vehicles0"}]
[{"$f":"'Source Data'!A1075","v":"et.15"},{"$f":"'Source Data'!B1075","v":"i"},{"$f":"'Source Data'!C1075","v":0.40126299999999998},{"$f":"'Source Data'!D1075","v":"Inconvenience to customers"},{"$f":"'Source Data'!E1075","v":0},{"$f":"'Source Data'!F1075","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inconvenience to customers0"}]
[{"$f":"'Source Data'!A1076","v":"et.15"},{"$f":"'Source Data'!B1076","v":"i"},{"$f":"'Source Data'!C1076","v":0.91257100000000002},{"$f":"'Source Data'!D1076","v":"Cost of customer service situations"},{"$f":"'Source Data'!E1076","v":0},{"$f":"'Source Data'!F1076","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost of customer service situations0"}]
[{"$f":"'Source Data'!A1077","v":"et.15"},{"$f":"'Source Data'!B1077","v":"i"},{"$f":"'Source Data'!C1077","v":0.88815100000000002},{"$f":"'Source Data'!D1077","v":"Violation of customer contracts and loss of customer confidence"},{"$f":"'Source Data'!E1077","v":0},{"$f":"'Source Data'!F1077","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Violation of customer contracts and loss of customer confidence0"}]
[{"$f":"'Source Data'!A1078","v":"et.15"},{"$f":"'Source Data'!B1078","v":"i"},{"$f":"'Source Data'!C1078","v":0.440695},{"$f":"'Source Data'!D1078","v":"A sudden, large amount of electricity from EVs could damage a transformer in a neighborhood"},{"$f":"'Source Data'!E1078","v":0},{"$f":"'Source Data'!F1078","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A sudden, large amount of electricity from EVs could damage a transformer in a neighborhood0"}]
[{"$f":"'Source Data'!A1079","v":"et.15"},{"$f":"'Source Data'!B1079","v":"m"},{"$f":"'Source Data'!C1079","v":0.47461199999999998},{"$f":"'Source Data'!D1079","v":"enforce hardware limits"},{"$f":"'Source Data'!E1079","v":" for circuit in EVs that stops discharging below a user-defined threshold"},{"$f":"'Source Data'!F1079","v":"enforce limits"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce hardware limits for circuit in EVs that stops discharging below a user-defined threshold"}]
[{"$f":"'Source Data'!A1080","v":"et.15"},{"$f":"'Source Data'!B1080","v":"m"},{"$f":"'Source Data'!C1080","v":0.26319799999999999},{"$f":"'Source Data'!D1080","v":"generate alarms"},{"$f":"'Source Data'!E1080","v":" for utility on detection of abnormal discharging behaviors in the charging station"},{"$f":"'Source Data'!F1080","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for utility on detection of abnormal discharging behaviors in the charging station"}]
[{"$f":"'Source Data'!A1081","v":"et.15"},{"$f":"'Source Data'!B1081","v":"m"},{"$f":"'Source Data'!C1081","v":0.43415700000000002},{"$f":"'Source Data'!D1081","v":"require circuit breaker"},{"$f":"'Source Data'!E1081","v":" to avoid reverse-directional overpower to the distribution transformer"},{"$f":"'Source Data'!F1081","v":"enforce limits"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require circuit breaker to avoid reverse-directional overpower to the distribution transformer"}]
[{"$f":"'Source Data'!A1082","v":"et.15"},{"$f":"'Source Data'!B1082","v":"m"},{"$f":"'Source Data'!C1082","v":0.58046200000000003},{"$f":"'Source Data'!D1082","v":"authenticate users"},{"$f":"'Source Data'!E1082","v":" seeking access to software files for charging station management system"},{"$f":"'Source Data'!F1082","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users seeking access to software files for charging station management system"}]
[{"$f":"'Source Data'!A1083","v":"et.15"},{"$f":"'Source Data'!B1083","v":"m"},{"$f":"'Source Data'!C1083","v":0.62704599999999999},{"$f":"'Source Data'!D1083","v":"restrict file access"},{"$f":"'Source Data'!E1083","v":" to software files for charging station management system"},{"$f":"'Source Data'!F1083","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict file access to software files for charging station management system"}]
[{"$f":"'Source Data'!A1084","v":"et.15"},{"$f":"'Source Data'!B1084","v":"m"},{"$f":"'Source Data'!C1084","v":0.12654899999999999},{"$f":"'Source Data'!D1084","v":"check software file integrity"},{"$f":"'Source Data'!E1084","v":" of charging station management and protocol translation module software files"},{"$f":"'Source Data'!F1084","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity of charging station management and protocol translation module software files"}]
[{"$f":"'Source Data'!A1085","v":"et.15"},{"$f":"'Source Data'!B1085","v":"m"},{"$f":"'Source Data'!C1085","v":0.92603599999999997},{"$f":"'Source Data'!D1085","v":"confirm action"},{"$f":"'Source Data'!E1085","v":" to discharge the EV with the EV owner"},{"$f":"'Source Data'!F1085","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"confirm action to discharge the EV with the EV owner"}]
[{"$f":"'Source Data'!A1086","v":"et.16"},{"$f":"'Source Data'!B1086","v":"t"},{"$f":"'Source Data'!C1086","v":0.77788000000000002},{"$f":"'Source Data'!D1086","v":"An EV is Exploited to Threaten Transformer or Substation"},{"$f":"'Source Data'!E1086","v":0},{"$f":"'Source Data'!F1086","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An EV is Exploited to Threaten Transformer or Substation0"}]
[{"$f":"'Source Data'!A1087","v":"et.16"},{"$f":"'Source Data'!B1087","v":"d"},{"$f":"'Source Data'!C1087","v":0.459671},{"$f":"'Source Data'!D1087","v":"A threat agent exploits an in-vehicle system at an EV to inject malware to an EVSE in a charging station. In the near future, such systems will be connected both to the battery via a vehicle data bus (e.g., CAN bus) and to the EVSE via wireless channels (e.g., ZigBee). Once compromised, an EVSE may infect other EVSEs, creating a botnet. The compromised EVSEs could simultaneously charge or discharge all the plugged EVs, thus overloading the distribution transformer. Alternatively, they may launch an attack directly to a charging station management system or to a distribution operator system that controls the transformer and the substation."},{"$f":"'Source Data'!E1087","v":0},{"$f":"'Source Data'!F1087","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent exploits an in-vehicle system at an EV to inject malware to an EVSE in a charging station. In the near future, such systems will be connected both to the battery via a vehicle data bus (e.g., CAN bus) and to the EVSE via wireless channels (e.g., ZigBee). Once compromised, an EVSE may infect other EVSEs, creating a botnet. The compromised EVSEs could simultaneously charge or discharge all the plugged EVs, thus overloading the distribution transformer. Alternatively, they may launch an attack directly to a charging station management system or to a distribution operator system that controls the transformer and the substation.0"}]
[{"$f":"'Source Data'!A1088","v":"et.16"},{"$f":"'Source Data'!B1088","v":"v"},{"$f":"'Source Data'!C1088","v":0.87279399999999996},{"$f":"'Source Data'!D1088","v":"system permits installation of malware"},{"$f":"'Source Data'!E1088","v":" in the EVSE during charging between the EV and the EVSE (ET.3),"},{"$f":"'Source Data'!F1088","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware in the EVSE during charging between the EV and the EVSE (ET.3),"}]
[{"$f":"'Source Data'!A1089","v":"et.16"},{"$f":"'Source Data'!B1089","v":"v"},{"$f":"'Source Data'!C1089","v":0.412412},{"$f":"'Source Data'!D1089","v":"system permits installation of malware"},{"$f":"'Source Data'!E1089","v":" due to the malware spreading between EVSEs on the network hosting the EVSEs for the charging station,"},{"$f":"'Source Data'!F1089","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware due to the malware spreading between EVSEs on the network hosting the EVSEs for the charging station,"}]
[{"$f":"'Source Data'!A1090","v":"et.16"},{"$f":"'Source Data'!B1090","v":"v"},{"$f":"'Source Data'!C1090","v":0.719503},{"$f":"'Source Data'!D1090","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1090","v":" to the in-vehicle system,"},{"$f":"'Source Data'!F1090","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the in-vehicle system,"}]
[{"$f":"'Source Data'!A1091","v":"et.16"},{"$f":"'Source Data'!B1091","v":"v"},{"$f":"'Source Data'!C1091","v":0.51294300000000004},{"$f":"'Source Data'!D1091","v":"system permits installation of malware"},{"$f":"'Source Data'!E1091","v":" in public charging station systems,"},{"$f":"'Source Data'!F1091","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits installation of malware in public charging station systems,"}]
[{"$f":"'Source Data'!A1092","v":"et.16"},{"$f":"'Source Data'!B1092","v":"v"},{"$f":"'Source Data'!C1092","v":0.468416},{"$f":"'Source Data'!D1092","v":"shared credentials are used for access"},{"$f":"'Source Data'!E1092","v":" to nearby EVSEs,"},{"$f":"'Source Data'!F1092","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"shared credentials are used for access to nearby EVSEs,"}]
[{"$f":"'Source Data'!A1093","v":"et.16"},{"$f":"'Source Data'!B1093","v":"v"},{"$f":"'Source Data'!C1093","v":0.71458500000000003},{"$f":"'Source Data'!D1093","v":"design, implementation, or maintenance permits system to enter a hazardous state"},{"$f":"'Source Data'!E1093","v":" by allowing overloading of the distribution transformer."},{"$f":"'Source Data'!F1093","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design, implementation, or maintenance permits system to enter a hazardous state by allowing overloading of the distribution transformer."}]
[{"$f":"'Source Data'!A1094","v":"et.16"},{"$f":"'Source Data'!B1094","v":"i"},{"$f":"'Source Data'!C1094","v":0.23732},{"$f":"'Source Data'!D1094","v":"Potential to overpower and damage transformer in a neighborhood"},{"$f":"'Source Data'!E1094","v":0},{"$f":"'Source Data'!F1094","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential to overpower and damage transformer in a neighborhood0"}]
[{"$f":"'Source Data'!A1095","v":"et.16"},{"$f":"'Source Data'!B1095","v":"i"},{"$f":"'Source Data'!C1095","v":0.103421},{"$f":"'Source Data'!D1095","v":"Temporarily loss of capability for charging station to service customers"},{"$f":"'Source Data'!E1095","v":0},{"$f":"'Source Data'!F1095","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Temporarily loss of capability for charging station to service customers0"}]
[{"$f":"'Source Data'!A1096","v":"et.16"},{"$f":"'Source Data'!B1096","v":"i"},{"$f":"'Source Data'!C1096","v":0.66247999999999996},{"$f":"'Source Data'!D1096","v":"Potential damage to electric vehicles"},{"$f":"'Source Data'!E1096","v":0},{"$f":"'Source Data'!F1096","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential damage to electric vehicles0"}]
[{"$f":"'Source Data'!A1097","v":"et.16"},{"$f":"'Source Data'!B1097","v":"i"},{"$f":"'Source Data'!C1097","v":0.75855399999999995},{"$f":"'Source Data'!D1097","v":"Revenue loss of the owner of the charging stations due to their damage"},{"$f":"'Source Data'!E1097","v":0},{"$f":"'Source Data'!F1097","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Revenue loss of the owner of the charging stations due to their damage0"}]
[{"$f":"'Source Data'!A1098","v":"et.16"},{"$f":"'Source Data'!B1098","v":"i"},{"$f":"'Source Data'!C1098","v":0.67951899999999998},{"$f":"'Source Data'!D1098","v":"Violation of customer contracts and loss of customer confidence"},{"$f":"'Source Data'!E1098","v":0},{"$f":"'Source Data'!F1098","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Violation of customer contracts and loss of customer confidence0"}]
[{"$f":"'Source Data'!A1099","v":"et.16"},{"$f":"'Source Data'!B1099","v":"m"},{"$f":"'Source Data'!C1099","v":0.64135799999999998},{"$f":"'Source Data'!D1099","v":"restrict application access"},{"$f":"'Source Data'!E1099","v":" to the charging station management system"},{"$f":"'Source Data'!F1099","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict application access to the charging station management system"}]
[{"$f":"'Source Data'!A1100","v":"et.16"},{"$f":"'Source Data'!B1100","v":"m"},{"$f":"'Source Data'!C1100","v":0.97504599999999997},{"$f":"'Source Data'!D1100","v":"check software execution integrity"},{"$f":"'Source Data'!E1100","v":" of the charging station management system, since software may be compromised when loaded for execution"},{"$f":"'Source Data'!F1100","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity of the charging station management system, since software may be compromised when loaded for execution"}]
[{"$f":"'Source Data'!A1101","v":"et.16"},{"$f":"'Source Data'!B1101","v":"m"},{"$f":"'Source Data'!C1101","v":0.53054100000000004},{"$f":"'Source Data'!D1101","v":"detect abnormal output"},{"$f":"'Source Data'!E1101","v":" containing messages from EVs (ET.3) and EVSEs"},{"$f":"'Source Data'!F1101","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal output containing messages from EVs (ET.3) and EVSEs"}]
[{"$f":"'Source Data'!A1102","v":"et.16"},{"$f":"'Source Data'!B1102","v":"m"},{"$f":"'Source Data'!C1102","v":0.69720599999999999},{"$f":"'Source Data'!D1102","v":"analyze anomalous events"},{"$f":"'Source Data'!E1102","v":" in EVs to detect malicious code"},{"$f":"'Source Data'!F1102","v":"analyze"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"analyze anomalous events in EVs to detect malicious code"}]
[{"$f":"'Source Data'!A1103","v":"et.16"},{"$f":"'Source Data'!B1103","v":"m"},{"$f":"'Source Data'!C1103","v":0.226356},{"$f":"'Source Data'!D1103","v":"maintain patches"},{"$f":"'Source Data'!E1103","v":" in the charging station system"},{"$f":"'Source Data'!F1103","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches in the charging station system"}]
[{"$f":"'Source Data'!A1104","v":"et.16"},{"$f":"'Source Data'!B1104","v":"m"},{"$f":"'Source Data'!C1104","v":0.196632},{"$f":"'Source Data'!D1104","v":"maintain anti-virus"},{"$f":"'Source Data'!E1104","v":" in the charging station system"},{"$f":"'Source Data'!F1104","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain anti-virus in the charging station system"}]
[{"$f":"'Source Data'!A1105","v":"et.16"},{"$f":"'Source Data'!B1105","v":"m"},{"$f":"'Source Data'!C1105","v":0.17219200000000001},{"$f":"'Source Data'!D1105","v":"require unique keys"},{"$f":"'Source Data'!E1105","v":" in the EVSE"},{"$f":"'Source Data'!F1105","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require unique keys in the EVSE"}]
[{"$f":"'Source Data'!A1106","v":"et.16"},{"$f":"'Source Data'!B1106","v":"m"},{"$f":"'Source Data'!C1106","v":4.7869599999999998E-2},{"$f":"'Source Data'!D1106","v":"require circuit breaker"},{"$f":"'Source Data'!E1106","v":" to avoid overloading the distribution transformer"},{"$f":"'Source Data'!F1106","v":"enforce limits"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require circuit breaker to avoid overloading the distribution transformer"}]
[{"$f":"'Source Data'!A1107","v":"et.16"},{"$f":"'Source Data'!B1107","v":"m"},{"$f":"'Source Data'!C1107","v":0.67718500000000004},{"$f":"'Source Data'!D1107","v":"detect unusual patterns"},{"$f":"'Source Data'!E1107","v":" of data transfer during charging between the EVSE and the EV."},{"$f":"'Source Data'!F1107","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of data transfer during charging between the EVSE and the EV."}]
[{"$f":"'Source Data'!A1108","v":"et.16"},{"$f":"'Source Data'!B1108","v":"m"},{"$f":"'Source Data'!C1108","v":0.69513800000000003},{"$f":"'Source Data'!D1108","v":"detect unusual patterns"},{"$f":"'Source Data'!E1108","v":" of data transfer between EVSEs and between the EVSE and the charging station management system,"},{"$f":"'Source Data'!F1108","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of data transfer between EVSEs and between the EVSE and the charging station management system,"}]
[{"$f":"'Source Data'!A1109","v":"et.16"},{"$f":"'Source Data'!B1109","v":"m"},{"$f":"'Source Data'!C1109","v":0.69912600000000003},{"$f":"'Source Data'!D1109","v":"check software execution integrity"},{"$f":"'Source Data'!E1109","v":" of the in-vehicle system,"},{"$f":"'Source Data'!F1109","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity of the in-vehicle system,"}]
[{"$f":"'Source Data'!A1110","v":"dr.1"},{"$f":"'Source Data'!B1110","v":"t"},{"$f":"'Source Data'!C1110","v":0.62171699999999996},{"$f":"'Source Data'!D1110","v":"Blocked DR Messages Result in Increased Prices or Outages"},{"$f":"'Source Data'!E1110","v":0},{"$f":"'Source Data'!F1110","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Blocked DR Messages Result in Increased Prices or Outages0"}]
[{"$f":"'Source Data'!A1111","v":"dr.1"},{"$f":"'Source Data'!B1111","v":"d"},{"$f":"'Source Data'!C1111","v":0.65499099999999999},{"$f":"'Source Data'!D1111","v":"A threat agent blocks communications between a demand response automation server (DRAS) and a customer system (smart meters or customer devices). This could be accomplished by flooding the communications channel with other messages, or by tampering with the communications channel. These actions could prevent legitimate DR messages from being received and transmitted. This can occur at the wired or the wireless portion of the communications channel."},{"$f":"'Source Data'!E1111","v":0},{"$f":"'Source Data'!F1111","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent blocks communications between a demand response automation server (DRAS) and a customer system (smart meters or customer devices). This could be accomplished by flooding the communications channel with other messages, or by tampering with the communications channel. These actions could prevent legitimate DR messages from being received and transmitted. This can occur at the wired or the wireless portion of the communications channel.0"}]
[{"$f":"'Source Data'!A1112","v":"dr.1"},{"$f":"'Source Data'!B1112","v":"v"},{"$f":"'Source Data'!C1112","v":0.93771499999999997},{"$f":"'Source Data'!D1112","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1112","v":" to communications channel components,"},{"$f":"'Source Data'!F1112","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to communications channel components,"}]
[{"$f":"'Source Data'!A1113","v":"dr.1"},{"$f":"'Source Data'!B1113","v":"v"},{"$f":"'Source Data'!C1113","v":0.97434600000000005},{"$f":"'Source Data'!D1113","v":"unnecessary access is permitted to the communications channel"},{"$f":"'Source Data'!E1113","v":" "},{"$f":"'Source Data'!F1113","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the communications channel "}]
[{"$f":"'Source Data'!A1114","v":"dr.1"},{"$f":"'Source Data'!B1114","v":"v"},{"$f":"'Source Data'!C1114","v":0.73487599999999997},{"$f":"'Source Data'!D1114","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Source Data'!E1114","v":" in DRAS/customer communication channels,"},{"$f":"'Source Data'!F1114","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"publicly accessible and/or third party controlled links used in DRAS/customer communication channels,"}]
[{"$f":"'Source Data'!A1115","v":"dr.1"},{"$f":"'Source Data'!B1115","v":"v"},{"$f":"'Source Data'!C1115","v":0.33978199999999997},{"$f":"'Source Data'!D1115","v":"system relies on communications that are easy to jam"},{"$f":"'Source Data'!E1115","v":" in wireless DRAS/customer communications channels,"},{"$f":"'Source Data'!F1115","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on communications that are easy to jam in wireless DRAS/customer communications channels,"}]
[{"$f":"'Source Data'!A1116","v":"dr.1"},{"$f":"'Source Data'!B1116","v":"v"},{"$f":"'Source Data'!C1116","v":0.75242600000000004},{"$f":"'Source Data'!D1116","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1116","v":" to the messaging interface components of the DRAS,"},{"$f":"'Source Data'!F1116","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the messaging interface components of the DRAS,"}]
[{"$f":"'Source Data'!A1117","v":"dr.1"},{"$f":"'Source Data'!B1117","v":"v"},{"$f":"'Source Data'!C1117","v":0.28865499999999999},{"$f":"'Source Data'!D1117","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1117","v":" to the messaging components of the customer systems."},{"$f":"'Source Data'!F1117","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to the messaging components of the customer systems."}]
[{"$f":"'Source Data'!A1118","v":"dr.1"},{"$f":"'Source Data'!B1118","v":"v"},{"$f":"'Source Data'!C1118","v":0.80716699999999997},{"$f":"'Source Data'!D1118","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E1118","v":" specifically unusual traffic load on the communications channel from the DRAS to customer systems or interactions with channel components not originated by the DRAS"},{"$f":"'Source Data'!F1118","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity specifically unusual traffic load on the communications channel from the DRAS to customer systems or interactions with channel components not originated by the DRAS"}]
[{"$f":"'Source Data'!A1119","v":"dr.1"},{"$f":"'Source Data'!B1119","v":"i"},{"$f":"'Source Data'!C1119","v":0.18685199999999999},{"$f":"'Source Data'!D1119","v":"The effects would be correlated to the extent of blockage"},{"$f":"'Source Data'!E1119","v":0},{"$f":"'Source Data'!F1119","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The effects would be correlated to the extent of blockage0"}]
[{"$f":"'Source Data'!A1120","v":"dr.1"},{"$f":"'Source Data'!B1120","v":"i"},{"$f":"'Source Data'!C1120","v":0.29052299999999998},{"$f":"'Source Data'!D1120","v":"If the blockage is local, the impact may be limited to increased energy charges to consumers"},{"$f":"'Source Data'!E1120","v":0},{"$f":"'Source Data'!F1120","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"If the blockage is local, the impact may be limited to increased energy charges to consumers0"}]
[{"$f":"'Source Data'!A1121","v":"dr.1"},{"$f":"'Source Data'!B1121","v":"i"},{"$f":"'Source Data'!C1121","v":0.30449399999999999},{"$f":"'Source Data'!D1121","v":"Blockage of DR messages on a larger scale, particularly messages to large industrial customers, may cause outages at a local or regional level if demand is too great and increased energy costs to customers over a larger area"},{"$f":"'Source Data'!E1121","v":0},{"$f":"'Source Data'!F1121","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Blockage of DR messages on a larger scale, particularly messages to large industrial customers, may cause outages at a local or regional level if demand is too great and increased energy costs to customers over a larger area0"}]
[{"$f":"'Source Data'!A1122","v":"dr.1"},{"$f":"'Source Data'!B1122","v":"i"},{"$f":"'Source Data'!C1122","v":0.979159},{"$f":"'Source Data'!D1122","v":"In sell-back or brokerage scenarios, the blockage of DR signals may result in increased prices for electricity for the utility company and be instrumented for considerable financial gain for parties selling electricity back to the utility company"},{"$f":"'Source Data'!E1122","v":0},{"$f":"'Source Data'!F1122","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"In sell-back or brokerage scenarios, the blockage of DR signals may result in increased prices for electricity for the utility company and be instrumented for considerable financial gain for parties selling electricity back to the utility company0"}]
[{"$f":"'Source Data'!A1123","v":"dr.1"},{"$f":"'Source Data'!B1123","v":"m"},{"$f":"'Source Data'!C1123","v":0.44821},{"$f":"'Source Data'!D1123","v":"require safe mode"},{"$f":"'Source Data'!E1123","v":" in the energy management settings if expected DR messages are not received within the appropriate time window"},{"$f":"'Source Data'!F1123","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require safe mode in the energy management settings if expected DR messages are not received within the appropriate time window"}]
[{"$f":"'Source Data'!A1124","v":"dr.1"},{"$f":"'Source Data'!B1124","v":"m"},{"$f":"'Source Data'!C1124","v":5.93635E-2},{"$f":"'Source Data'!D1124","v":"require acknowledgment"},{"$f":"'Source Data'!E1124","v":" of link status including information on the health of the communications link"},{"$f":"'Source Data'!F1124","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require acknowledgment of link status including information on the health of the communications link"}]
[{"$f":"'Source Data'!A1125","v":"dr.1"},{"$f":"'Source Data'!B1125","v":"m"},{"$f":"'Source Data'!C1125","v":0.96758900000000003},{"$f":"'Source Data'!D1125","v":"restrict remote access"},{"$f":"'Source Data'!E1125","v":" "},{"$f":"'Source Data'!F1125","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access "}]
[{"$f":"'Source Data'!A1126","v":"dr.1"},{"$f":"'Source Data'!B1126","v":"m"},{"$f":"'Source Data'!C1126","v":0.939836},{"$f":"'Source Data'!D1126","v":"restrict network access"},{"$f":"'Source Data'!E1126","v":" "},{"$f":"'Source Data'!F1126","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access "}]
[{"$f":"'Source Data'!A1127","v":"dr.1"},{"$f":"'Source Data'!B1127","v":"m"},{"$f":"'Source Data'!C1127","v":0.74839299999999997},{"$f":"'Source Data'!D1127","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E1127","v":" where feasible along the communications channel"},{"$f":"'Source Data'!F1127","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention where feasible along the communications channel"}]
[{"$f":"'Source Data'!A1128","v":"dr.1"},{"$f":"'Source Data'!B1128","v":"m"},{"$f":"'Source Data'!C1128","v":0.192108},{"$f":"'Source Data'!D1128","v":"detect unauthorized access"},{"$f":"'Source Data'!E1128","v":" "},{"$f":"'Source Data'!F1128","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access "}]
[{"$f":"'Source Data'!A1129","v":"dr.1"},{"$f":"'Source Data'!B1129","v":"m"},{"$f":"'Source Data'!C1129","v":0.48850900000000003},{"$f":"'Source Data'!D1129","v":"restrict physical access"},{"$f":"'Source Data'!E1129","v":" to communications channel components"},{"$f":"'Source Data'!F1129","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access to communications channel components"}]
[{"$f":"'Source Data'!A1130","v":"dr.1"},{"$f":"'Source Data'!B1130","v":"m"},{"$f":"'Source Data'!C1130","v":0.36058600000000002},{"$f":"'Source Data'!D1130","v":"authenticate users"},{"$f":"'Source Data'!E1130","v":" seeking access to modify DRAS software"},{"$f":"'Source Data'!F1130","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users seeking access to modify DRAS software"}]
[{"$f":"'Source Data'!A1131","v":"dr.1"},{"$f":"'Source Data'!B1131","v":"m"},{"$f":"'Source Data'!C1131","v":0.44264100000000001},{"$f":"'Source Data'!D1131","v":"authenticate users"},{"$f":"'Source Data'!E1131","v":" seeking remote access to modify customer DR software"},{"$f":"'Source Data'!F1131","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users seeking remote access to modify customer DR software"}]
[{"$f":"'Source Data'!A1132","v":"dr.1"},{"$f":"'Source Data'!B1132","v":"m"},{"$f":"'Source Data'!C1132","v":0.678759},{"$f":"'Source Data'!D1132","v":"require acknowledgment"},{"$f":"'Source Data'!E1132","v":" from devices indicating what commands they received"},{"$f":"'Source Data'!F1132","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require acknowledgment from devices indicating what commands they received"}]
[{"$f":"'Source Data'!A1133","v":"dr.1"},{"$f":"'Source Data'!B1133","v":"m"},{"$f":"'Source Data'!C1133","v":0.92129499999999998},{"$f":"'Source Data'!D1133","v":"detect abnormal output"},{"$f":"'Source Data'!E1133","v":" in the results of DR commands to validate reasonability of load/generation results by non-DRAS (maybe supervisory control and data acquisition (SCADA)) systems"},{"$f":"'Source Data'!F1133","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal output in the results of DR commands to validate reasonability of load/generation results by non-DRAS (maybe supervisory control and data acquisition (SCADA)) systems"}]
[{"$f":"'Source Data'!A1134","v":"dr.1"},{"$f":"'Source Data'!B1134","v":"m"},{"$f":"'Source Data'!C1134","v":5.0963899999999999E-2},{"$f":"'Source Data'!D1134","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E1134","v":" to limit privilege to modify the DRAS and customer end messaging interface components of the DRAS communication channel,"},{"$f":"'Source Data'!F1134","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privilege to modify the DRAS and customer end messaging interface components of the DRAS communication channel,"}]
[{"$f":"'Source Data'!A1135","v":"dr.1"},{"$f":"'Source Data'!B1135","v":"m"},{"$f":"'Source Data'!C1135","v":0.51179799999999998},{"$f":"'Source Data'!D1135","v":"check software file integrity"},{"$f":"'Source Data'!E1135","v":" for DRAS and customer end messaging interface components of the DRAS communication channel"},{"$f":"'Source Data'!F1135","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity for DRAS and customer end messaging interface components of the DRAS communication channel"}]
[{"$f":"'Source Data'!A1136","v":"dr.1"},{"$f":"'Source Data'!B1136","v":"m"},{"$f":"'Source Data'!C1136","v":0.82649899999999998},{"$f":"'Source Data'!D1136","v":"require redundancy"},{"$f":"'Source Data'!E1136","v":" for wireless connections as part of the communications strategy for critical DR customers"},{"$f":"'Source Data'!F1136","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy for wireless connections as part of the communications strategy for critical DR customers"}]
[{"$f":"'Source Data'!A1137","v":"dr.1"},{"$f":"'Source Data'!B1137","v":"m"},{"$f":"'Source Data'!C1137","v":0.65022999999999997},{"$f":"'Source Data'!D1137","v":"detect abnormal output"},{"$f":"'Source Data'!E1137","v":" in the results of DR commands to validate reasonability of load/generation results by non-DRAS (such as e.g., SCADA) systems."},{"$f":"'Source Data'!F1137","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal output in the results of DR commands to validate reasonability of load/generation results by non-DRAS (such as e.g., SCADA) systems."}]
[{"$f":"'Source Data'!A1138","v":"dr.2"},{"$f":"'Source Data'!B1138","v":"t"},{"$f":"'Source Data'!C1138","v":0.20699100000000001},{"$f":"'Source Data'!D1138","v":"Private Information is Publicly Disclosed on DRAS Communications Channel"},{"$f":"'Source Data'!E1138","v":0},{"$f":"'Source Data'!F1138","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Private Information is Publicly Disclosed on DRAS Communications Channel0"}]
[{"$f":"'Source Data'!A1139","v":"dr.2"},{"$f":"'Source Data'!B1139","v":"d"},{"$f":"'Source Data'!C1139","v":0.81274599999999997},{"$f":"'Source Data'!D1139","v":"A threat agent eavesdrops on traffic on the network between a DRAS and a customer system. This could leak private information to the threat agent. This might be the easiest attack that the agent can launch while not being detected by utilities."},{"$f":"'Source Data'!E1139","v":0},{"$f":"'Source Data'!F1139","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent eavesdrops on traffic on the network between a DRAS and a customer system. This could leak private information to the threat agent. This might be the easiest attack that the agent can launch while not being detected by utilities.0"}]
[{"$f":"'Source Data'!A1140","v":"dr.2"},{"$f":"'Source Data'!B1140","v":"v"},{"$f":"'Source Data'!C1140","v":0.80772999999999995},{"$f":"'Source Data'!D1140","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1140","v":" to communications channel components,"},{"$f":"'Source Data'!F1140","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to communications channel components,"}]
[{"$f":"'Source Data'!A1141","v":"dr.2"},{"$f":"'Source Data'!B1141","v":"v"},{"$f":"'Source Data'!C1141","v":0.573882},{"$f":"'Source Data'!D1141","v":"unnecessary access is permitted to the communications channel"},{"$f":"'Source Data'!E1141","v":" "},{"$f":"'Source Data'!F1141","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the communications channel "}]
[{"$f":"'Source Data'!A1142","v":"dr.2"},{"$f":"'Source Data'!B1142","v":"v"},{"$f":"'Source Data'!C1142","v":0.62799400000000005},{"$f":"'Source Data'!D1142","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Source Data'!E1142","v":" in DRAS/customer communications channels,"},{"$f":"'Source Data'!F1142","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"publicly accessible and/or third party controlled links used in DRAS/customer communications channels,"}]
[{"$f":"'Source Data'!A1143","v":"dr.2"},{"$f":"'Source Data'!B1143","v":"v"},{"$f":"'Source Data'!C1143","v":0.73745400000000005},{"$f":"'Source Data'!D1143","v":"encryption keys are shared"},{"$f":"'Source Data'!E1143","v":" by multiple computers on the DRAS network,"},{"$f":"'Source Data'!F1143","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encryption keys are shared by multiple computers on the DRAS network,"}]
[{"$f":"'Source Data'!A1144","v":"dr.2"},{"$f":"'Source Data'!B1144","v":"v"},{"$f":"'Source Data'!C1144","v":0.30541600000000002},{"$f":"'Source Data'!D1144","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E1144","v":" (easy to tap) in wired/wireless communications channels in the DRAS network."},{"$f":"'Source Data'!F1144","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals (easy to tap) in wired/wireless communications channels in the DRAS network."}]
[{"$f":"'Source Data'!A1145","v":"dr.2"},{"$f":"'Source Data'!B1145","v":"v"},{"$f":"'Source Data'!C1145","v":0.413248},{"$f":"'Source Data'!D1145","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E1145","v":" specifically the presence of unknown entities creating traffic on the DRAS/customer communication channel"},{"$f":"'Source Data'!F1145","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity specifically the presence of unknown entities creating traffic on the DRAS/customer communication channel"}]
[{"$f":"'Source Data'!A1146","v":"dr.2"},{"$f":"'Source Data'!B1146","v":"i"},{"$f":"'Source Data'!C1146","v":0.85979499999999998},{"$f":"'Source Data'!D1146","v":"Malicious eavesdropping can reveal private information that may be made public. This violates customer privacy"},{"$f":"'Source Data'!E1146","v":0},{"$f":"'Source Data'!F1146","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Malicious eavesdropping can reveal private information that may be made public. This violates customer privacy0"}]
[{"$f":"'Source Data'!A1147","v":"dr.2"},{"$f":"'Source Data'!B1147","v":"i"},{"$f":"'Source Data'!C1147","v":0.26105899999999999},{"$f":"'Source Data'!D1147","v":"Potential for lawsuits and fines against the utility"},{"$f":"'Source Data'!E1147","v":0},{"$f":"'Source Data'!F1147","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential for lawsuits and fines against the utility0"}]
[{"$f":"'Source Data'!A1148","v":"dr.2"},{"$f":"'Source Data'!B1148","v":"i"},{"$f":"'Source Data'!C1148","v":0.17362900000000001},{"$f":"'Source Data'!D1148","v":"Loss of public confidence in the utility and the DR program, resulting in resistance to both"},{"$f":"'Source Data'!E1148","v":0},{"$f":"'Source Data'!F1148","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of public confidence in the utility and the DR program, resulting in resistance to both0"}]
[{"$f":"'Source Data'!A1149","v":"dr.2"},{"$f":"'Source Data'!B1149","v":"m"},{"$f":"'Source Data'!C1149","v":6.1780399999999999E-2},{"$f":"'Source Data'!D1149","v":"restrict remote access"},{"$f":"'Source Data'!E1149","v":" to DRAS/customer communications channels"},{"$f":"'Source Data'!F1149","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to DRAS/customer communications channels"}]
[{"$f":"'Source Data'!A1150","v":"dr.2"},{"$f":"'Source Data'!B1150","v":"m"},{"$f":"'Source Data'!C1150","v":0.50247600000000003},{"$f":"'Source Data'!D1150","v":"restrict network access"},{"$f":"'Source Data'!E1150","v":" where feasible along the DRAS/customer communications channel"},{"$f":"'Source Data'!F1150","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access where feasible along the DRAS/customer communications channel"}]
[{"$f":"'Source Data'!A1151","v":"dr.2"},{"$f":"'Source Data'!B1151","v":"m"},{"$f":"'Source Data'!C1151","v":0.97708799999999996},{"$f":"'Source Data'!D1151","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E1151","v":" where feasible along the communications channel"},{"$f":"'Source Data'!F1151","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention where feasible along the communications channel"}]
[{"$f":"'Source Data'!A1152","v":"dr.2"},{"$f":"'Source Data'!B1152","v":"m"},{"$f":"'Source Data'!C1152","v":0.240285},{"$f":"'Source Data'!D1152","v":"detect unauthorized access"},{"$f":"'Source Data'!E1152","v":" "},{"$f":"'Source Data'!F1152","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access "}]
[{"$f":"'Source Data'!A1153","v":"dr.2"},{"$f":"'Source Data'!B1153","v":"m"},{"$f":"'Source Data'!C1153","v":0.67444300000000001},{"$f":"'Source Data'!D1153","v":"restrict physical access"},{"$f":"'Source Data'!E1153","v":" to communications channel components"},{"$f":"'Source Data'!F1153","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access to communications channel components"}]
[{"$f":"'Source Data'!A1154","v":"dr.2"},{"$f":"'Source Data'!B1154","v":"m"},{"$f":"'Source Data'!C1154","v":0.25490499999999999},{"$f":"'Source Data'!D1154","v":"require unique keys"},{"$f":"'Source Data'!E1154","v":" per meter for messages being transferred"},{"$f":"'Source Data'!F1154","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require unique keys per meter for messages being transferred"}]
[{"$f":"'Source Data'!A1155","v":"dr.2"},{"$f":"'Source Data'!B1155","v":"m"},{"$f":"'Source Data'!C1155","v":0.88195100000000004},{"$f":"'Source Data'!D1155","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E1155","v":" to protect the confidentiality of communications"},{"$f":"'Source Data'!F1155","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms to protect the confidentiality of communications"}]
[{"$f":"'Source Data'!A1156","v":"dr.3"},{"$f":"'Source Data'!B1156","v":"t"},{"$f":"'Source Data'!C1156","v":8.5001499999999997E-3},{"$f":"'Source Data'!D1156","v":"Messages are Modified or Spoofed on DRAS Communications Channel"},{"$f":"'Source Data'!E1156","v":0},{"$f":"'Source Data'!F1156","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Messages are Modified or Spoofed on DRAS Communications Channel0"}]
[{"$f":"'Source Data'!A1157","v":"dr.3"},{"$f":"'Source Data'!B1157","v":"d"},{"$f":"'Source Data'!C1157","v":0.786381},{"$f":"'Source Data'!D1157","v":"A threat agent obtains access to the communications channel between the DRAS and the customer DR system, modifies on-going traffic or communications, inserts false messages, or launches a replay attack. The DRAS and the customer system could receive an unauthorized message or a corrupted message. Such a message may cause unintentional (often unfavorable) behaviors of these systems. (Note: Spoofed last gasp messages as in AMI.11 is an important special case of this failure scenario.)"},{"$f":"'Source Data'!E1157","v":0},{"$f":"'Source Data'!F1157","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent obtains access to the communications channel between the DRAS and the customer DR system, modifies on-going traffic or communications, inserts false messages, or launches a replay attack. The DRAS and the customer system could receive an unauthorized message or a corrupted message. Such a message may cause unintentional (often unfavorable) behaviors of these systems. (Note: Spoofed last gasp messages as in AMI.11 is an important special case of this failure scenario.)0"}]
[{"$f":"'Source Data'!A1158","v":"dr.3"},{"$f":"'Source Data'!B1158","v":"v"},{"$f":"'Source Data'!C1158","v":0.24605099999999999},{"$f":"'Source Data'!D1158","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E1158","v":" between the DRAS and customer DR component,"},{"$f":"'Source Data'!F1158","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals between the DRAS and customer DR component,"}]
[{"$f":"'Source Data'!A1159","v":"dr.3"},{"$f":"'Source Data'!B1159","v":"v"},{"$f":"'Source Data'!C1159","v":0.11884500000000001},{"$f":"'Source Data'!D1159","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E1159","v":" between the DRAS and customer DR component,"},{"$f":"'Source Data'!F1159","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message between the DRAS and customer DR component,"}]
[{"$f":"'Source Data'!A1160","v":"dr.3"},{"$f":"'Source Data'!B1160","v":"v"},{"$f":"'Source Data'!C1160","v":0.53125800000000001},{"$f":"'Source Data'!D1160","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1160","v":" to communications channel components,"},{"$f":"'Source Data'!F1160","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to communications channel components,"}]
[{"$f":"'Source Data'!A1161","v":"dr.3"},{"$f":"'Source Data'!B1161","v":"v"},{"$f":"'Source Data'!C1161","v":0.25075999999999998},{"$f":"'Source Data'!D1161","v":"unnecessary access is permitted to the communications channel"},{"$f":"'Source Data'!E1161","v":" "},{"$f":"'Source Data'!F1161","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the communications channel "}]
[{"$f":"'Source Data'!A1162","v":"dr.3"},{"$f":"'Source Data'!B1162","v":"v"},{"$f":"'Source Data'!C1162","v":0.76370300000000002},{"$f":"'Source Data'!D1162","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Source Data'!E1162","v":" "},{"$f":"'Source Data'!F1162","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"publicly accessible and/or third party controlled links used "}]
[{"$f":"'Source Data'!A1163","v":"dr.3"},{"$f":"'Source Data'!B1163","v":"v"},{"$f":"'Source Data'!C1163","v":0.36798900000000001},{"$f":"'Source Data'!D1163","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E1163","v":" specifically the presence of unknown entities with access to the DRAS/customer communication channel"},{"$f":"'Source Data'!F1163","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity specifically the presence of unknown entities with access to the DRAS/customer communication channel"}]
[{"$f":"'Source Data'!A1164","v":"dr.3"},{"$f":"'Source Data'!B1164","v":"i"},{"$f":"'Source Data'!C1164","v":0.23211899999999999},{"$f":"'Source Data'!D1164","v":"A false message may request the DRAS to reduce power supply or to trigger an inappropriate DR event"},{"$f":"'Source Data'!E1164","v":0},{"$f":"'Source Data'!F1164","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A false message may request the DRAS to reduce power supply or to trigger an inappropriate DR event0"}]
[{"$f":"'Source Data'!A1165","v":"dr.3"},{"$f":"'Source Data'!B1165","v":"i"},{"$f":"'Source Data'!C1165","v":0.94670399999999999},{"$f":"'Source Data'!D1165","v":"A false message may deliver information indicating cheaper prices to consumers, which encourages them to increase power consumption during on-peak periods"},{"$f":"'Source Data'!E1165","v":0},{"$f":"'Source Data'!F1165","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A false message may deliver information indicating cheaper prices to consumers, which encourages them to increase power consumption during on-peak periods0"}]
[{"$f":"'Source Data'!A1166","v":"dr.3"},{"$f":"'Source Data'!B1166","v":"i"},{"$f":"'Source Data'!C1166","v":0.18402399999999999},{"$f":"'Source Data'!D1166","v":"Possible service impacts on various (possibly quite large) scales"},{"$f":"'Source Data'!E1166","v":0},{"$f":"'Source Data'!F1166","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible service impacts on various (possibly quite large) scales0"}]
[{"$f":"'Source Data'!A1167","v":"dr.3"},{"$f":"'Source Data'!B1167","v":"i"},{"$f":"'Source Data'!C1167","v":0.28744399999999998},{"$f":"'Source Data'!D1167","v":"Potential power loss"},{"$f":"'Source Data'!E1167","v":0},{"$f":"'Source Data'!F1167","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential power loss0"}]
[{"$f":"'Source Data'!A1168","v":"dr.3"},{"$f":"'Source Data'!B1168","v":"i"},{"$f":"'Source Data'!C1168","v":0.94992399999999999},{"$f":"'Source Data'!D1168","v":"The utility may have financial impacts"},{"$f":"'Source Data'!E1168","v":0},{"$f":"'Source Data'!F1168","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility may have financial impacts0"}]
[{"$f":"'Source Data'!A1169","v":"dr.3"},{"$f":"'Source Data'!B1169","v":"m"},{"$f":"'Source Data'!C1169","v":0.70847899999999997},{"$f":"'Source Data'!D1169","v":"check message integrity"},{"$f":"'Source Data'!E1169","v":" (digital signatures or message authentication codes) to verify the authenticity and integrity of DR messages in customer equipment"},{"$f":"'Source Data'!F1169","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check message integrity (digital signatures or message authentication codes) to verify the authenticity and integrity of DR messages in customer equipment"}]
[{"$f":"'Source Data'!A1170","v":"dr.3"},{"$f":"'Source Data'!B1170","v":"m"},{"$f":"'Source Data'!C1170","v":0.38799800000000001},{"$f":"'Source Data'!D1170","v":"authenticate messages"},{"$f":"'Source Data'!E1170","v":" from customer DR systems"},{"$f":"'Source Data'!F1170","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages from customer DR systems"}]
[{"$f":"'Source Data'!A1171","v":"dr.3"},{"$f":"'Source Data'!B1171","v":"m"},{"$f":"'Source Data'!C1171","v":2.9355300000000001E-2},{"$f":"'Source Data'!D1171","v":"protect against replay"},{"$f":"'Source Data'!E1171","v":" in DR messages using timestamps, sequence numbers, or cryptographic nonces"},{"$f":"'Source Data'!F1171","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"protect against replay in DR messages using timestamps, sequence numbers, or cryptographic nonces"}]
[{"$f":"'Source Data'!A1172","v":"dr.3"},{"$f":"'Source Data'!B1172","v":"m"},{"$f":"'Source Data'!C1172","v":4.4014199999999996E-3},{"$f":"'Source Data'!D1172","v":"validate data"},{"$f":"'Source Data'!E1172","v":" to ensure the DR data is reasonable"},{"$f":"'Source Data'!F1172","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"validate data to ensure the DR data is reasonable"}]
[{"$f":"'Source Data'!A1173","v":"dr.3"},{"$f":"'Source Data'!B1173","v":"m"},{"$f":"'Source Data'!C1173","v":0.53494299999999995},{"$f":"'Source Data'!D1173","v":"restrict network access"},{"$f":"'Source Data'!E1173","v":" to the network hosting the DRAS system and the network on the customer side and elsewhere along the communications channel"},{"$f":"'Source Data'!F1173","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the network hosting the DRAS system and the network on the customer side and elsewhere along the communications channel"}]
[{"$f":"'Source Data'!A1174","v":"dr.3"},{"$f":"'Source Data'!B1174","v":"m"},{"$f":"'Source Data'!C1174","v":0.23214899999999999},{"$f":"'Source Data'!D1174","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E1174","v":" where feasible along the communications channel"},{"$f":"'Source Data'!F1174","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention where feasible along the communications channel"}]
[{"$f":"'Source Data'!A1175","v":"dr.3"},{"$f":"'Source Data'!B1175","v":"m"},{"$f":"'Source Data'!C1175","v":0.458505},{"$f":"'Source Data'!D1175","v":"detect unauthorized access"},{"$f":"'Source Data'!E1175","v":" "},{"$f":"'Source Data'!F1175","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access "}]
[{"$f":"'Source Data'!A1176","v":"dr.3"},{"$f":"'Source Data'!B1176","v":"m"},{"$f":"'Source Data'!C1176","v":0.65513699999999997},{"$f":"'Source Data'!D1176","v":"detect unusual patterns"},{"$f":"'Source Data'!E1176","v":" and include a human in the decision loop when unexpected patterns or inputs are recognized on DRA"},{"$f":"'Source Data'!F1176","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns and include a human in the decision loop when unexpected patterns or inputs are recognized on DRA"}]
[{"$f":"'Source Data'!A1177","v":"dr.3"},{"$f":"'Source Data'!B1177","v":"m"},{"$f":"'Source Data'!C1177","v":0.82732899999999998},{"$f":"'Source Data'!D1177","v":"restrict physical access"},{"$f":"'Source Data'!E1177","v":" to communications channel components"},{"$f":"'Source Data'!F1177","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access to communications channel components"}]
[{"$f":"'Source Data'!A1178","v":"dr.3"},{"$f":"'Source Data'!B1178","v":"m"},{"$f":"'Source Data'!C1178","v":0.87519899999999995},{"$f":"'Source Data'!D1178","v":"detect abnormal output"},{"$f":"'Source Data'!E1178","v":" in the results of DR commands to validate reasonability of load/generation results by non-DRAS systems (such as SCADA)"},{"$f":"'Source Data'!F1178","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal output in the results of DR commands to validate reasonability of load/generation results by non-DRAS systems (such as SCADA)"}]
[{"$f":"'Source Data'!A1179","v":"dr.4"},{"$f":"'Source Data'!B1179","v":"t"},{"$f":"'Source Data'!C1179","v":0.49691600000000002},{"$f":"'Source Data'!D1179","v":"Improper DRAS Configuration Causes Inappropriate DR Messages"},{"$f":"'Source Data'!E1179","v":0},{"$f":"'Source Data'!F1179","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Improper DRAS Configuration Causes Inappropriate DR Messages0"}]
[{"$f":"'Source Data'!A1180","v":"dr.4"},{"$f":"'Source Data'!B1180","v":"d"},{"$f":"'Source Data'!C1180","v":0.15190699999999999},{"$f":"'Source Data'!D1180","v":"A threat agent maliciously modifies the DRAS configuration to send (or not send) DR messages at incorrect times and to incorrect devices. This could deliver a wrong, but seemingly legitimate set of messages to the customer system."},{"$f":"'Source Data'!E1180","v":0},{"$f":"'Source Data'!F1180","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent maliciously modifies the DRAS configuration to send (or not send) DR messages at incorrect times and to incorrect devices. This could deliver a wrong, but seemingly legitimate set of messages to the customer system.0"}]
[{"$f":"'Source Data'!A1181","v":"dr.4"},{"$f":"'Source Data'!B1181","v":"v"},{"$f":"'Source Data'!C1181","v":8.9622499999999994E-2},{"$f":"'Source Data'!D1181","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1181","v":" to DRAS configuration,"},{"$f":"'Source Data'!F1181","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to DRAS configuration,"}]
[{"$f":"'Source Data'!A1182","v":"dr.4"},{"$f":"'Source Data'!B1182","v":"v"},{"$f":"'Source Data'!C1182","v":6.3968200000000003E-2},{"$f":"'Source Data'!D1182","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E1182","v":" in the DRAS configuration,"},{"$f":"'Source Data'!F1182","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made in the DRAS configuration,"}]
[{"$f":"'Source Data'!A1183","v":"dr.4"},{"$f":"'Source Data'!B1183","v":"v"},{"$f":"'Source Data'!C1183","v":0.798844},{"$f":"'Source Data'!D1183","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E1183","v":" to the network on which the DRAS resides."},{"$f":"'Source Data'!F1183","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted to the network on which the DRAS resides."}]
[{"$f":"'Source Data'!A1184","v":"dr.4"},{"$f":"'Source Data'!B1184","v":"v"},{"$f":"'Source Data'!C1184","v":0.80749599999999999},{"$f":"'Source Data'!D1184","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E1184","v":" to the DRAS configuration"},{"$f":"'Source Data'!F1184","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to the DRAS configuration"}]
[{"$f":"'Source Data'!A1185","v":"dr.4"},{"$f":"'Source Data'!B1185","v":"i"},{"$f":"'Source Data'!C1185","v":0.138627},{"$f":"'Source Data'!D1185","v":"A false message may deliver information indicating lower prices to consumers, which encourages them to increase power consumption during on-peak periods"},{"$f":"'Source Data'!E1185","v":0},{"$f":"'Source Data'!F1185","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A false message may deliver information indicating lower prices to consumers, which encourages them to increase power consumption during on-peak periods0"}]
[{"$f":"'Source Data'!A1186","v":"dr.4"},{"$f":"'Source Data'!B1186","v":"i"},{"$f":"'Source Data'!C1186","v":0.89105199999999996},{"$f":"'Source Data'!D1186","v":"Damage to the smart grid infrastructure with possible service impacts from small to large scale"},{"$f":"'Source Data'!E1186","v":0},{"$f":"'Source Data'!F1186","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Damage to the smart grid infrastructure with possible service impacts from small to large scale0"}]
[{"$f":"'Source Data'!A1187","v":"dr.4"},{"$f":"'Source Data'!B1187","v":"i"},{"$f":"'Source Data'!C1187","v":0.17970700000000001},{"$f":"'Source Data'!D1187","v":"Potential power loss"},{"$f":"'Source Data'!E1187","v":0},{"$f":"'Source Data'!F1187","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential power loss0"}]
[{"$f":"'Source Data'!A1188","v":"dr.4"},{"$f":"'Source Data'!B1188","v":"i"},{"$f":"'Source Data'!C1188","v":0.36655900000000002},{"$f":"'Source Data'!D1188","v":"The utility may have financial impacts"},{"$f":"'Source Data'!E1188","v":0},{"$f":"'Source Data'!F1188","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility may have financial impacts0"}]
[{"$f":"'Source Data'!A1189","v":"dr.4"},{"$f":"'Source Data'!B1189","v":"i"},{"$f":"'Source Data'!C1189","v":0.65708200000000005},{"$f":"'Source Data'!D1189","v":"In sell-back or brokerage scenarios, withholding of DR signals at the source DRAS may result in increased prices for electricity to the utility and be instrumented for considerable financial gain for parties selling electricity back to the utility company"},{"$f":"'Source Data'!E1189","v":0},{"$f":"'Source Data'!F1189","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"In sell-back or brokerage scenarios, withholding of DR signals at the source DRAS may result in increased prices for electricity to the utility and be instrumented for considerable financial gain for parties selling electricity back to the utility company0"}]
[{"$f":"'Source Data'!A1190","v":"dr.4"},{"$f":"'Source Data'!B1190","v":"i"},{"$f":"'Source Data'!C1190","v":0.96157599999999999},{"$f":"'Source Data'!D1190","v":"Loss of public confidence in utility and DR program"},{"$f":"'Source Data'!E1190","v":0},{"$f":"'Source Data'!F1190","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of public confidence in utility and DR program0"}]
[{"$f":"'Source Data'!A1191","v":"dr.4"},{"$f":"'Source Data'!B1191","v":"i"},{"$f":"'Source Data'!C1191","v":0.94073499999999999},{"$f":"'Source Data'!D1191","v":"The customer, receiving an unintended DR message, may reduce power consumption without seeing any benefit applied in their bill"},{"$f":"'Source Data'!E1191","v":0},{"$f":"'Source Data'!F1191","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The customer, receiving an unintended DR message, may reduce power consumption without seeing any benefit applied in their bill0"}]
[{"$f":"'Source Data'!A1192","v":"dr.4"},{"$f":"'Source Data'!B1192","v":"m"},{"$f":"'Source Data'!C1192","v":0.38894499999999999},{"$f":"'Source Data'!D1192","v":"restrict remote access"},{"$f":"'Source Data'!E1192","v":" specifically to only those systems that are allowed remote access to the DRAS systems"},{"$f":"'Source Data'!F1192","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access specifically to only those systems that are allowed remote access to the DRAS systems"}]
[{"$f":"'Source Data'!A1193","v":"dr.4"},{"$f":"'Source Data'!B1193","v":"m"},{"$f":"'Source Data'!C1193","v":0.44830900000000001},{"$f":"'Source Data'!D1193","v":"restrict remote access"},{"$f":"'Source Data'!E1193","v":" to DRAS configuration functions"},{"$f":"'Source Data'!F1193","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to DRAS configuration functions"}]
[{"$f":"'Source Data'!A1194","v":"dr.4"},{"$f":"'Source Data'!B1194","v":"m"},{"$f":"'Source Data'!C1194","v":0.41589700000000002},{"$f":"'Source Data'!D1194","v":"restrict network access"},{"$f":"'Source Data'!E1194","v":" to the network hosting the DRAS"},{"$f":"'Source Data'!F1194","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the network hosting the DRAS"}]
[{"$f":"'Source Data'!A1195","v":"dr.4"},{"$f":"'Source Data'!B1195","v":"m"},{"$f":"'Source Data'!C1195","v":0.35573399999999999},{"$f":"'Source Data'!D1195","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E1195","v":" to limit access to the DRAS configuration"},{"$f":"'Source Data'!F1195","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit access to the DRAS configuration"}]
[{"$f":"'Source Data'!A1196","v":"dr.4"},{"$f":"'Source Data'!B1196","v":"m"},{"$f":"'Source Data'!C1196","v":0.104126},{"$f":"'Source Data'!D1196","v":"require two-person rule"},{"$f":"'Source Data'!E1196","v":" on manual overrides or configuration changes in the DRAS"},{"$f":"'Source Data'!F1196","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require two-person rule on manual overrides or configuration changes in the DRAS"}]
[{"$f":"'Source Data'!A1197","v":"dr.4"},{"$f":"'Source Data'!B1197","v":"m"},{"$f":"'Source Data'!C1197","v":0.296234},{"$f":"'Source Data'!D1197","v":"generate alerts"},{"$f":"'Source Data'!E1197","v":" on changes to the DRAS configuration"},{"$f":"'Source Data'!F1197","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts on changes to the DRAS configuration"}]
[{"$f":"'Source Data'!A1198","v":"dr.4"},{"$f":"'Source Data'!B1198","v":"m"},{"$f":"'Source Data'!C1198","v":0.78474200000000005},{"$f":"'Source Data'!D1198","v":"detect abnormal output"},{"$f":"'Source Data'!E1198","v":" in the results of DR commands to validate reasonability of load/generation results by a non-DRAS (maybe SCADA) system"},{"$f":"'Source Data'!F1198","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal output in the results of DR commands to validate reasonability of load/generation results by a non-DRAS (maybe SCADA) system"}]
[{"$f":"'Source Data'!A1199","v":"dr.5"},{"$f":"'Source Data'!B1199","v":"t"},{"$f":"'Source Data'!C1199","v":0.14532900000000001},{"$f":"'Source Data'!D1199","v":"Non-specific Malware Compromises DRAS or Customer DR System"},{"$f":"'Source Data'!E1199","v":0},{"$f":"'Source Data'!F1199","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Non-specific Malware Compromises DRAS or Customer DR System0"}]
[{"$f":"'Source Data'!A1200","v":"dr.5"},{"$f":"'Source Data'!B1200","v":"d"},{"$f":"'Source Data'!C1200","v":0.58796999999999999},{"$f":"'Source Data'!D1200","v":"The DRAS or customer DR system is infected by non-specific common malware. This malware may consume system resources, thus slowing other system processes or may attempt to compromise typical components such as databases. This could cause the DRAS to fail to send DR messages when needed or to disclose customer information in its database. It could cause the customer system not to execute the contractual terms of the DR service although it receives legitimate DR messages."},{"$f":"'Source Data'!E1200","v":0},{"$f":"'Source Data'!F1200","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The DRAS or customer DR system is infected by non-specific common malware. This malware may consume system resources, thus slowing other system processes or may attempt to compromise typical components such as databases. This could cause the DRAS to fail to send DR messages when needed or to disclose customer information in its database. It could cause the customer system not to execute the contractual terms of the DR service although it receives legitimate DR messages.0"}]
[{"$f":"'Source Data'!A1201","v":"dr.5"},{"$f":"'Source Data'!B1201","v":"v"},{"$f":"'Source Data'!C1201","v":0.26672800000000002},{"$f":"'Source Data'!D1201","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Source Data'!E1201","v":" "},{"$f":"'Source Data'!F1201","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"software patches are not checked regularly to ensure that they are current "}]
[{"$f":"'Source Data'!A1202","v":"dr.5"},{"$f":"'Source Data'!B1202","v":"v"},{"$f":"'Source Data'!C1202","v":0.188023},{"$f":"'Source Data'!D1202","v":"the list of signatures used for detection of attacks is no longer current"},{"$f":"'Source Data'!E1202","v":" "},{"$f":"'Source Data'!F1202","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"the list of signatures used for detection of attacks is no longer current "}]
[{"$f":"'Source Data'!A1203","v":"dr.5"},{"$f":"'Source Data'!B1203","v":"v"},{"$f":"'Source Data'!C1203","v":0.39501399999999998},{"$f":"'Source Data'!D1203","v":"unnecessary system services are configured to run"},{"$f":"'Source Data'!E1203","v":" on un-blocked or unnecessary opened ports,"},{"$f":"'Source Data'!F1203","v":"Unneeded Services Running (6.4.3.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary system services are configured to run on un-blocked or unnecessary opened ports,"}]
[{"$f":"'Source Data'!A1204","v":"dr.5"},{"$f":"'Source Data'!B1204","v":"v"},{"$f":"'Source Data'!C1204","v":0.20776},{"$f":"'Source Data'!D1204","v":"remote access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1204","v":" to the customer system from remote networks,"},{"$f":"'Source Data'!F1204","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"remote access may be obtained by unauthorized individuals to the customer system from remote networks,"}]
[{"$f":"'Source Data'!A1205","v":"dr.5"},{"$f":"'Source Data'!B1205","v":"v"},{"$f":"'Source Data'!C1205","v":1.5490200000000001E-2},{"$f":"'Source Data'!D1205","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1205","v":" to the DRAS (e.g., to use a Universal Serial Bus (USB) device)."},{"$f":"'Source Data'!F1205","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to the DRAS (e.g., to use a Universal Serial Bus (USB) device)."}]
[{"$f":"'Source Data'!A1206","v":"dr.5"},{"$f":"'Source Data'!B1206","v":"i"},{"$f":"'Source Data'!C1206","v":0.58937200000000001},{"$f":"'Source Data'!D1206","v":"Unstable power balance at the utility due to failure to communicate or execute reduction of power demand during on-peak periods, possibly resulting in loss of power for some customers"},{"$f":"'Source Data'!E1206","v":0},{"$f":"'Source Data'!F1206","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unstable power balance at the utility due to failure to communicate or execute reduction of power demand during on-peak periods, possibly resulting in loss of power for some customers0"}]
[{"$f":"'Source Data'!A1207","v":"dr.5"},{"$f":"'Source Data'!B1207","v":"i"},{"$f":"'Source Data'!C1207","v":0.217366},{"$f":"'Source Data'!D1207","v":"Potential revenue loss due to failure to communicate or execute a return to non-peak conditions in which customers may increase usage"},{"$f":"'Source Data'!E1207","v":0},{"$f":"'Source Data'!F1207","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential revenue loss due to failure to communicate or execute a return to non-peak conditions in which customers may increase usage0"}]
[{"$f":"'Source Data'!A1208","v":"dr.5"},{"$f":"'Source Data'!B1208","v":"i"},{"$f":"'Source Data'!C1208","v":0.474937},{"$f":"'Source Data'!D1208","v":"Capture and exfiltration of sensitive DR information would violate customer privacy"},{"$f":"'Source Data'!E1208","v":0},{"$f":"'Source Data'!F1208","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Capture and exfiltration of sensitive DR information would violate customer privacy0"}]
[{"$f":"'Source Data'!A1209","v":"dr.5"},{"$f":"'Source Data'!B1209","v":"i"},{"$f":"'Source Data'!C1209","v":0.212391},{"$f":"'Source Data'!D1209","v":"Loss of public confidence in the utility and DR program"},{"$f":"'Source Data'!E1209","v":0},{"$f":"'Source Data'!F1209","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of public confidence in the utility and DR program0"}]
[{"$f":"'Source Data'!A1210","v":"dr.5"},{"$f":"'Source Data'!B1210","v":"m"},{"$f":"'Source Data'!C1210","v":0.51780700000000002},{"$f":"'Source Data'!D1210","v":"maintain patches"},{"$f":"'Source Data'!E1210","v":" in the DRAS and customer DR systems"},{"$f":"'Source Data'!F1210","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches in the DRAS and customer DR systems"}]
[{"$f":"'Source Data'!A1211","v":"dr.5"},{"$f":"'Source Data'!B1211","v":"m"},{"$f":"'Source Data'!C1211","v":0.37760300000000002},{"$f":"'Source Data'!D1211","v":"maintain anti-virus"},{"$f":"'Source Data'!E1211","v":" in the DRAS and customer DR systems"},{"$f":"'Source Data'!F1211","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain anti-virus in the DRAS and customer DR systems"}]
[{"$f":"'Source Data'!A1212","v":"dr.5"},{"$f":"'Source Data'!B1212","v":"m"},{"$f":"'Source Data'!C1212","v":0.63866100000000003},{"$f":"'Source Data'!D1212","v":"configure for least functionality"},{"$f":"'Source Data'!E1212","v":" by limiting open ports and installed functions in the DRAS and DR customer systems"},{"$f":"'Source Data'!F1212","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by limiting open ports and installed functions in the DRAS and DR customer systems"}]
[{"$f":"'Source Data'!A1213","v":"dr.5"},{"$f":"'Source Data'!B1213","v":"m"},{"$f":"'Source Data'!C1213","v":0.81229099999999999},{"$f":"'Source Data'!D1213","v":"restrict physical access"},{"$f":"'Source Data'!E1213","v":" to DRAS or its input interfaces (e.g., Universal Serial Bus (USB), compact disk - read only memory (CD-ROM))"},{"$f":"'Source Data'!F1213","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access to DRAS or its input interfaces (e.g., Universal Serial Bus (USB), compact disk - read only memory (CD-ROM))"}]
[{"$f":"'Source Data'!A1214","v":"dr.5"},{"$f":"'Source Data'!B1214","v":"m"},{"$f":"'Source Data'!C1214","v":0.87407100000000004},{"$f":"'Source Data'!D1214","v":"authenticate users"},{"$f":"'Source Data'!E1214","v":" for remote access to a customer DR system"},{"$f":"'Source Data'!F1214","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users for remote access to a customer DR system"}]
[{"$f":"'Source Data'!A1215","v":"dr.6"},{"$f":"'Source Data'!B1215","v":"t"},{"$f":"'Source Data'!C1215","v":0.37654700000000002},{"$f":"'Source Data'!D1215","v":"Custom Malware Compromises DRAS"},{"$f":"'Source Data'!E1215","v":0},{"$f":"'Source Data'!F1215","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Custom Malware Compromises DRAS0"}]
[{"$f":"'Source Data'!A1216","v":"dr.6"},{"$f":"'Source Data'!B1216","v":"d"},{"$f":"'Source Data'!C1216","v":0.353634},{"$f":"'Source Data'!D1216","v":"A threat agent injects purpose-built malware into the DRAS. This malware places the server under remote command of this agent. The agent might use this capability to send out DR messages appropriate for non-peak times at peak times, and vice versa."},{"$f":"'Source Data'!E1216","v":0},{"$f":"'Source Data'!F1216","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent injects purpose-built malware into the DRAS. This malware places the server under remote command of this agent. The agent might use this capability to send out DR messages appropriate for non-peak times at peak times, and vice versa.0"}]
[{"$f":"'Source Data'!A1217","v":"dr.6"},{"$f":"'Source Data'!B1217","v":"v"},{"$f":"'Source Data'!C1217","v":0.59392},{"$f":"'Source Data'!D1217","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1217","v":" to software in the DRAS,"},{"$f":"'Source Data'!F1217","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to software in the DRAS,"}]
[{"$f":"'Source Data'!A1218","v":"dr.6"},{"$f":"'Source Data'!B1218","v":"v"},{"$f":"'Source Data'!C1218","v":0.26836300000000002},{"$f":"'Source Data'!D1218","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E1218","v":" to the DRAS software,"},{"$f":"'Source Data'!F1218","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made to the DRAS software,"}]
[{"$f":"'Source Data'!A1219","v":"dr.6"},{"$f":"'Source Data'!B1219","v":"v"},{"$f":"'Source Data'!C1219","v":0.52326799999999996},{"$f":"'Source Data'!D1219","v":"unnecessary system services are configured to run"},{"$f":"'Source Data'!E1219","v":" on un-blocked or unnecessary open ports,"},{"$f":"'Source Data'!F1219","v":"Unneeded Services Running (6.4.3.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary system services are configured to run on un-blocked or unnecessary open ports,"}]
[{"$f":"'Source Data'!A1220","v":"dr.6"},{"$f":"'Source Data'!B1220","v":"v"},{"$f":"'Source Data'!C1220","v":0.405219},{"$f":"'Source Data'!D1220","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E1220","v":" to the network on which the DRAS resides."},{"$f":"'Source Data'!F1220","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted to the network on which the DRAS resides."}]
[{"$f":"'Source Data'!A1221","v":"dr.6"},{"$f":"'Source Data'!B1221","v":"i"},{"$f":"'Source Data'!C1221","v":0.413719},{"$f":"'Source Data'!D1221","v":"Addition of extra load at peak times and reduction of load at non-peak times could result in power outages and physical power system damage"},{"$f":"'Source Data'!E1221","v":0},{"$f":"'Source Data'!F1221","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Addition of extra load at peak times and reduction of load at non-peak times could result in power outages and physical power system damage0"}]
[{"$f":"'Source Data'!A1222","v":"dr.6"},{"$f":"'Source Data'!B1222","v":"i"},{"$f":"'Source Data'!C1222","v":0.200099},{"$f":"'Source Data'!D1222","v":"Loss of public confidence in the utility and DR program"},{"$f":"'Source Data'!E1222","v":0},{"$f":"'Source Data'!F1222","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of public confidence in the utility and DR program0"}]
[{"$f":"'Source Data'!A1223","v":"dr.6"},{"$f":"'Source Data'!B1223","v":"m"},{"$f":"'Source Data'!C1223","v":0.44614999999999999},{"$f":"'Source Data'!D1223","v":"restrict remote access"},{"$f":"'Source Data'!E1223","v":" to the DRAS systems"},{"$f":"'Source Data'!F1223","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to the DRAS systems"}]
[{"$f":"'Source Data'!A1224","v":"dr.6"},{"$f":"'Source Data'!B1224","v":"m"},{"$f":"'Source Data'!C1224","v":0.56499600000000005},{"$f":"'Source Data'!D1224","v":"restrict remote access"},{"$f":"'Source Data'!E1224","v":" to the networks hosting the DRAS systems"},{"$f":"'Source Data'!F1224","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to the networks hosting the DRAS systems"}]
[{"$f":"'Source Data'!A1225","v":"dr.6"},{"$f":"'Source Data'!B1225","v":"m"},{"$f":"'Source Data'!C1225","v":9.6253199999999997E-2},{"$f":"'Source Data'!D1225","v":"restrict network access"},{"$f":"'Source Data'!E1225","v":" to the networks hosting the DRAS systems"},{"$f":"'Source Data'!F1225","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the networks hosting the DRAS systems"}]
[{"$f":"'Source Data'!A1226","v":"dr.6"},{"$f":"'Source Data'!B1226","v":"m"},{"$f":"'Source Data'!C1226","v":0.34701300000000002},{"$f":"'Source Data'!D1226","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E1226","v":" to limit access to the DRAS software files"},{"$f":"'Source Data'!F1226","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit access to the DRAS software files"}]
[{"$f":"'Source Data'!A1227","v":"dr.6"},{"$f":"'Source Data'!B1227","v":"m"},{"$f":"'Source Data'!C1227","v":0.110717},{"$f":"'Source Data'!D1227","v":"configure for least functionality"},{"$f":"'Source Data'!E1227","v":" by making unavailable any unnecessary functions and ports on the DRAS systems"},{"$f":"'Source Data'!F1227","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by making unavailable any unnecessary functions and ports on the DRAS systems"}]
[{"$f":"'Source Data'!A1228","v":"dr.6"},{"$f":"'Source Data'!B1228","v":"m"},{"$f":"'Source Data'!C1228","v":0.47200900000000001},{"$f":"'Source Data'!D1228","v":"check software file integrity"},{"$f":"'Source Data'!E1228","v":" for the DRAS software"},{"$f":"'Source Data'!F1228","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity for the DRAS software"}]
[{"$f":"'Source Data'!A1229","v":"dr.6"},{"$f":"'Source Data'!B1229","v":"m"},{"$f":"'Source Data'!C1229","v":0.82757800000000004},{"$f":"'Source Data'!D1229","v":"require application whitelisting"},{"$f":"'Source Data'!E1229","v":" on the DRAS"},{"$f":"'Source Data'!F1229","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require application whitelisting on the DRAS"}]
[{"$f":"'Source Data'!A1230","v":"dr.7"},{"$f":"'Source Data'!B1230","v":"t"},{"$f":"'Source Data'!C1230","v":0.34283599999999997},{"$f":"'Source Data'!D1230","v":"Custom Malware Compromises Customer DR System"},{"$f":"'Source Data'!E1230","v":0},{"$f":"'Source Data'!F1230","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Custom Malware Compromises Customer DR System0"}]
[{"$f":"'Source Data'!A1231","v":"dr.7"},{"$f":"'Source Data'!B1231","v":"d"},{"$f":"'Source Data'!C1231","v":0.28954000000000002},{"$f":"'Source Data'!D1231","v":"A threat agent injects a malware into a customer DR system that runs an OpenADR client program at the gateway of the customer domain. The malware might be controlled remotely by the agent or could directly change the behaviors of the customer DR system without any remote connection. As a consequence, the compromised DR system sends incorrect DR messages back to the DRAS. For instance, it sends a false DR registration message to the DRAS, when registering the customer's capability of energy reduction - the false message informs the DRAS that the customer is able to reduce 500kW, although he cannot. Alternatively, the compromised DR system sends a false DR report message to the DRAS, after the DR event finishes - the false message informs the DRAS that the customer reduced 500kW, although the customer actually reduced 100kW."},{"$f":"'Source Data'!E1231","v":0},{"$f":"'Source Data'!F1231","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent injects a malware into a customer DR system that runs an OpenADR client program at the gateway of the customer domain. The malware might be controlled remotely by the agent or could directly change the behaviors of the customer DR system without any remote connection. As a consequence, the compromised DR system sends incorrect DR messages back to the DRAS. For instance, it sends a false DR registration message to the DRAS, when registering the customer's capability of energy reduction - the false message informs the DRAS that the customer is able to reduce 500kW, although he cannot. Alternatively, the compromised DR system sends a false DR report message to the DRAS, after the DR event finishes - the false message informs the DRAS that the customer reduced 500kW, although the customer actually reduced 100kW.0"}]
[{"$f":"'Source Data'!A1232","v":"dr.7"},{"$f":"'Source Data'!B1232","v":"v"},{"$f":"'Source Data'!C1232","v":0.47356399999999998},{"$f":"'Source Data'!D1232","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Source Data'!E1232","v":" resulting in vulnerabilities that support the injection of custom malware"},{"$f":"'Source Data'!F1232","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"software patches are not checked regularly to ensure that they are current resulting in vulnerabilities that support the injection of custom malware"}]
[{"$f":"'Source Data'!A1233","v":"dr.7"},{"$f":"'Source Data'!B1233","v":"v"},{"$f":"'Source Data'!C1233","v":0.76100800000000002},{"$f":"'Source Data'!D1233","v":"the list of signatures used for detection of attacks is no longer current"},{"$f":"'Source Data'!E1233","v":" resulting in vulnerabilities that support the injection of custom malware"},{"$f":"'Source Data'!F1233","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"the list of signatures used for detection of attacks is no longer current resulting in vulnerabilities that support the injection of custom malware"}]
[{"$f":"'Source Data'!A1234","v":"dr.7"},{"$f":"'Source Data'!B1234","v":"v"},{"$f":"'Source Data'!C1234","v":0.71093300000000004},{"$f":"'Source Data'!D1234","v":"unnecessary system services are configured to run"},{"$f":"'Source Data'!E1234","v":" on un-blocked or unnecessary open ports,"},{"$f":"'Source Data'!F1234","v":"Unneeded Services Running (6.4.3.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary system services are configured to run on un-blocked or unnecessary open ports,"}]
[{"$f":"'Source Data'!A1235","v":"dr.7"},{"$f":"'Source Data'!B1235","v":"v"},{"$f":"'Source Data'!C1235","v":0.41941099999999998},{"$f":"'Source Data'!D1235","v":"unnecessary access is permitted to system functions"},{"$f":"'Source Data'!E1235","v":" in the customer DR program,"},{"$f":"'Source Data'!F1235","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to system functions in the customer DR program,"}]
[{"$f":"'Source Data'!A1236","v":"dr.7"},{"$f":"'Source Data'!B1236","v":"v"},{"$f":"'Source Data'!C1236","v":0.80740900000000004},{"$f":"'Source Data'!D1236","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Source Data'!E1236","v":" in customer energy usage."},{"$f":"'Source Data'!F1236","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system assumes data inputs and resulting calculations are accurate in customer energy usage."}]
[{"$f":"'Source Data'!A1237","v":"dr.7"},{"$f":"'Source Data'!B1237","v":"v"},{"$f":"'Source Data'!C1237","v":0.26759500000000003},{"$f":"'Source Data'!D1237","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1237","v":" to software in the customer DR system"},{"$f":"'Source Data'!F1237","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to software in the customer DR system"}]
[{"$f":"'Source Data'!A1238","v":"dr.7"},{"$f":"'Source Data'!B1238","v":"v"},{"$f":"'Source Data'!C1238","v":0.433971},{"$f":"'Source Data'!D1238","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Source Data'!E1238","v":" to the customer DR software"},{"$f":"'Source Data'!F1238","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility that unauthorized changes were made to the customer DR software"}]
[{"$f":"'Source Data'!A1239","v":"dr.7"},{"$f":"'Source Data'!B1239","v":"i"},{"$f":"'Source Data'!C1239","v":0.83676399999999995},{"$f":"'Source Data'!D1239","v":"Incorrect estimation of the total energy reduction before/during/after the DR event period, which can lead to the failure of the DR program"},{"$f":"'Source Data'!E1239","v":0},{"$f":"'Source Data'!F1239","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Incorrect estimation of the total energy reduction before/during/after the DR event period, which can lead to the failure of the DR program0"}]
[{"$f":"'Source Data'!A1240","v":"dr.7"},{"$f":"'Source Data'!B1240","v":"i"},{"$f":"'Source Data'!C1240","v":0.84116500000000005},{"$f":"'Source Data'!D1240","v":"Potential power outages for the grid operator"},{"$f":"'Source Data'!E1240","v":0},{"$f":"'Source Data'!F1240","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential power outages for the grid operator0"}]
[{"$f":"'Source Data'!A1241","v":"dr.7"},{"$f":"'Source Data'!B1241","v":"i"},{"$f":"'Source Data'!C1241","v":0.376108},{"$f":"'Source Data'!D1241","v":"The utility may have financial impacts - it computes customer incentives based on customer energy usage information"},{"$f":"'Source Data'!E1241","v":0},{"$f":"'Source Data'!F1241","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The utility may have financial impacts - it computes customer incentives based on customer energy usage information0"}]
[{"$f":"'Source Data'!A1242","v":"dr.7"},{"$f":"'Source Data'!B1242","v":"i"},{"$f":"'Source Data'!C1242","v":0.60825700000000005},{"$f":"'Source Data'!D1242","v":"Loss of public confidence in the utility and DR program"},{"$f":"'Source Data'!E1242","v":0},{"$f":"'Source Data'!F1242","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of public confidence in the utility and DR program0"}]
[{"$f":"'Source Data'!A1243","v":"dr.7"},{"$f":"'Source Data'!B1243","v":"m"},{"$f":"'Source Data'!C1243","v":6.6762000000000002E-2},{"$f":"'Source Data'!D1243","v":"maintain patches"},{"$f":"'Source Data'!E1243","v":" on the customer DR system"},{"$f":"'Source Data'!F1243","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches on the customer DR system"}]
[{"$f":"'Source Data'!A1244","v":"dr.7"},{"$f":"'Source Data'!B1244","v":"m"},{"$f":"'Source Data'!C1244","v":0.72189899999999996},{"$f":"'Source Data'!D1244","v":"maintain anti-virus"},{"$f":"'Source Data'!E1244","v":" on the customer DR system"},{"$f":"'Source Data'!F1244","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain anti-virus on the customer DR system"}]
[{"$f":"'Source Data'!A1245","v":"dr.7"},{"$f":"'Source Data'!B1245","v":"m"},{"$f":"'Source Data'!C1245","v":0.54922899999999997},{"$f":"'Source Data'!D1245","v":"authenticate users"},{"$f":"'Source Data'!E1245","v":" seeking remote access to a customer DR system"},{"$f":"'Source Data'!F1245","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users seeking remote access to a customer DR system"}]
[{"$f":"'Source Data'!A1246","v":"dr.7"},{"$f":"'Source Data'!B1246","v":"m"},{"$f":"'Source Data'!C1246","v":0.42442800000000003},{"$f":"'Source Data'!D1246","v":"enforce least privilege"},{"$f":"'Source Data'!E1246","v":" for access to the customer DR program"},{"$f":"'Source Data'!F1246","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege for access to the customer DR program"}]
[{"$f":"'Source Data'!A1247","v":"dr.7"},{"$f":"'Source Data'!B1247","v":"m"},{"$f":"'Source Data'!C1247","v":0.92134400000000005},{"$f":"'Source Data'!D1247","v":"restrict remote access"},{"$f":"'Source Data'!E1247","v":" to the customer network"},{"$f":"'Source Data'!F1247","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to the customer network"}]
[{"$f":"'Source Data'!A1248","v":"dr.7"},{"$f":"'Source Data'!B1248","v":"m"},{"$f":"'Source Data'!C1248","v":7.3251300000000005E-2},{"$f":"'Source Data'!D1248","v":"require message verification"},{"$f":"'Source Data'!E1248","v":" for customer messages"},{"$f":"'Source Data'!F1248","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require message verification for customer messages"}]
[{"$f":"'Source Data'!A1249","v":"dr.7"},{"$f":"'Source Data'!B1249","v":"m"},{"$f":"'Source Data'!C1249","v":0.99495900000000004},{"$f":"'Source Data'!D1249","v":"cross check"},{"$f":"'Source Data'!E1249","v":" customer DR performance with messages received from the customer DR system"},{"$f":"'Source Data'!F1249","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"cross check customer DR performance with messages received from the customer DR system"}]
[{"$f":"'Source Data'!A1250","v":"dr.7"},{"$f":"'Source Data'!B1250","v":"m"},{"$f":"'Source Data'!C1250","v":0.10806200000000001},{"$f":"'Source Data'!D1250","v":"configure for least functionality"},{"$f":"'Source Data'!E1250","v":" by making unavailable any unnecessary functions and ports on the customer DR system"},{"$f":"'Source Data'!F1250","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by making unavailable any unnecessary functions and ports on the customer DR system"}]
[{"$f":"'Source Data'!A1251","v":"dgm.1"},{"$f":"'Source Data'!B1251","v":"t"},{"$f":"'Source Data'!C1251","v":0.16287399999999999},{"$f":"'Source Data'!D1251","v":"Wireless Signals are Jammed to Disrupt Monitoring and Control"},{"$f":"'Source Data'!E1251","v":0},{"$f":"'Source Data'!F1251","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Wireless Signals are Jammed to Disrupt Monitoring and Control0"}]
[{"$f":"'Source Data'!A1252","v":"dgm.1"},{"$f":"'Source Data'!B1252","v":"d"},{"$f":"'Source Data'!C1252","v":0.22684199999999999},{"$f":"'Source Data'!D1252","v":"A threat agent uses a wireless signal jammer to disrupt wireless communications channels used to monitor and control distribution systems and substations. Examples are wireless local area network (LAN) communications for inter-substation differential protection, wireless communications between a distribution management system (DMS) and static VAR compensators (SVC), and communications to wireless monitoring equipment."},{"$f":"'Source Data'!E1252","v":0},{"$f":"'Source Data'!F1252","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent uses a wireless signal jammer to disrupt wireless communications channels used to monitor and control distribution systems and substations. Examples are wireless local area network (LAN) communications for inter-substation differential protection, wireless communications between a distribution management system (DMS) and static VAR compensators (SVC), and communications to wireless monitoring equipment.0"}]
[{"$f":"'Source Data'!A1253","v":"dgm.1"},{"$f":"'Source Data'!B1253","v":"v"},{"$f":"'Source Data'!C1253","v":2.5686299999999999E-2},{"$f":"'Source Data'!D1253","v":"system relies on communications that are easy to jam"},{"$f":"'Source Data'!E1253","v":" in physical radio frequency (RF) communications. Physical radio frequency (RF) communications are subject to deliberate jamming since few radio systems outside of the military have anti-jamming capability. Sustained jamming is less effective than intermittent jamming with the latter potentially causing the system to execute inappropriate or out of order commands."},{"$f":"'Source Data'!F1253","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on communications that are easy to jam in physical radio frequency (RF) communications. Physical radio frequency (RF) communications are subject to deliberate jamming since few radio systems outside of the military have anti-jamming capability. Sustained jamming is less effective than intermittent jamming with the latter potentially causing the system to execute inappropriate or out of order commands."}]
[{"$f":"'Source Data'!A1254","v":"dgm.1"},{"$f":"'Source Data'!B1254","v":"v"},{"$f":"'Source Data'!C1254","v":0.16431299999999999},{"$f":"'Source Data'!D1254","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E1254","v":" in wireless radio signals."},{"$f":"'Source Data'!F1254","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals in wireless radio signals."}]
[{"$f":"'Source Data'!A1255","v":"dgm.1"},{"$f":"'Source Data'!B1255","v":"i"},{"$f":"'Source Data'!C1255","v":5.53651E-2},{"$f":"'Source Data'!D1255","v":"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations"},{"$f":"'Source Data'!E1255","v":0},{"$f":"'Source Data'!F1255","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations0"}]
[{"$f":"'Source Data'!A1256","v":"dgm.1"},{"$f":"'Source Data'!B1256","v":"i"},{"$f":"'Source Data'!C1256","v":0.235072},{"$f":"'Source Data'!D1256","v":"The uncoordinated capacitor banks due to loss of communications could conflict with substation load tap changer (LTC) actions, causing \"hunting\" or other inefficient actions that increase utility power losses and premature transformer failures"},{"$f":"'Source Data'!E1256","v":0},{"$f":"'Source Data'!F1256","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The uncoordinated capacitor banks due to loss of communications could conflict with substation load tap changer (LTC) actions, causing \"hunting\" or other inefficient actions that increase utility power losses and premature transformer failures0"}]
[{"$f":"'Source Data'!A1257","v":"dgm.1"},{"$f":"'Source Data'!B1257","v":"i"},{"$f":"'Source Data'!C1257","v":0.60163100000000003},{"$f":"'Source Data'!D1257","v":"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment"},{"$f":"'Source Data'!E1257","v":0},{"$f":"'Source Data'!F1257","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment0"}]
[{"$f":"'Source Data'!A1258","v":"dgm.1"},{"$f":"'Source Data'!B1258","v":"i"},{"$f":"'Source Data'!C1258","v":0.25871300000000003},{"$f":"'Source Data'!D1258","v":"isruption in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions"},{"$f":"'Source Data'!E1258","v":0},{"$f":"'Source Data'!F1258","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isruption in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions0"}]
[{"$f":"'Source Data'!A1259","v":"dgm.1"},{"$f":"'Source Data'!B1259","v":"m"},{"$f":"'Source Data'!C1259","v":0.22028900000000001},{"$f":"'Source Data'!D1259","v":"require spread-spectrum radio"},{"$f":"'Source Data'!E1259","v":" with channel-hopping and switching to alternate communication paths. Examples include: (a) Switching from licensed band(s) to unlicensed band(s), (b) Switching from unlicensed band(s) to licensed band(s), (c) Transition from RF to fiber or copper land-lines, (d) Transition from RF to dialup (possibly with degraded performance)"},{"$f":"'Source Data'!F1259","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require spread-spectrum radio with channel-hopping and switching to alternate communication paths. Examples include: (a) Switching from licensed band(s) to unlicensed band(s), (b) Switching from unlicensed band(s) to licensed band(s), (c) Transition from RF to fiber or copper land-lines, (d) Transition from RF to dialup (possibly with degraded performance)"}]
[{"$f":"'Source Data'!A1260","v":"dgm.1"},{"$f":"'Source Data'!B1260","v":"m"},{"$f":"'Source Data'!C1260","v":0.161024},{"$f":"'Source Data'!D1260","v":"require redundancy"},{"$f":"'Source Data'!E1260","v":" in communications channels when the wireless channel is no longer available"},{"$f":"'Source Data'!F1260","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy in communications channels when the wireless channel is no longer available"}]
[{"$f":"'Source Data'!A1261","v":"dgm.1"},{"$f":"'Source Data'!B1261","v":"m"},{"$f":"'Source Data'!C1261","v":0.54996900000000004},{"$f":"'Source Data'!D1261","v":"require safe mode"},{"$f":"'Source Data'!E1261","v":" in feeder devices such as capacitor banks and voltage regulators by having default states that rely on local electrical conditions if communications are lost"},{"$f":"'Source Data'!F1261","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require safe mode in feeder devices such as capacitor banks and voltage regulators by having default states that rely on local electrical conditions if communications are lost"}]
[{"$f":"'Source Data'!A1262","v":"dgm.1"},{"$f":"'Source Data'!B1262","v":"m"},{"$f":"'Source Data'!C1262","v":0.998278},{"$f":"'Source Data'!D1262","v":"require redundancy"},{"$f":"'Source Data'!E1262","v":" via selected AMI meters or alternative devices that provide redundant monitoring information that is out-of-band of compromised communications"},{"$f":"'Source Data'!F1262","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy via selected AMI meters or alternative devices that provide redundant monitoring information that is out-of-band of compromised communications"}]
[{"$f":"'Source Data'!A1263","v":"dgm.2"},{"$f":"'Source Data'!B1263","v":"t"},{"$f":"'Source Data'!C1263","v":0.41417599999999999},{"$f":"'Source Data'!D1263","v":"Shared Communications Leveraged to Disrupt DMS Communications"},{"$f":"'Source Data'!E1263","v":0},{"$f":"'Source Data'!F1263","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Shared Communications Leveraged to Disrupt DMS Communications0"}]
[{"$f":"'Source Data'!A1264","v":"dgm.2"},{"$f":"'Source Data'!B1264","v":"d"},{"$f":"'Source Data'!C1264","v":0.76990899999999995},{"$f":"'Source Data'!D1264","v":"Some utilities depend upon communication providers for long-haul and wide area network (WAN) communications for monitoring and control of their distribution system. Furthermore, utilities that provide their own communication network for critical functions often resell unused bandwidth to offset costs while others have spun off their communication network as a separate communications company. There is also a general trend toward economizing communications costs by sharing them. A threat agent could take advantage of these paradigms by compromising computer systems using the same network as the Distribution Management System (DMS) to facilitate a distributed denial of service attack through the infected computer system by means of a botnet centered on IP spoofing and Internet Control Message Protocol (ICMP) flooding. With the network overburdened, monitoring and control functions could become unavailable for optimization or protection."},{"$f":"'Source Data'!E1264","v":0},{"$f":"'Source Data'!F1264","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Some utilities depend upon communication providers for long-haul and wide area network (WAN) communications for monitoring and control of their distribution system. Furthermore, utilities that provide their own communication network for critical functions often resell unused bandwidth to offset costs while others have spun off their communication network as a separate communications company. There is also a general trend toward economizing communications costs by sharing them. A threat agent could take advantage of these paradigms by compromising computer systems using the same network as the Distribution Management System (DMS) to facilitate a distributed denial of service attack through the infected computer system by means of a botnet centered on IP spoofing and Internet Control Message Protocol (ICMP) flooding. With the network overburdened, monitoring and control functions could become unavailable for optimization or protection.0"}]
[{"$f":"'Source Data'!A1265","v":"dgm.2"},{"$f":"'Source Data'!B1265","v":"v"},{"$f":"'Source Data'!C1265","v":0.87403500000000001},{"$f":"'Source Data'!D1265","v":"communication channels are shared between different system owners"},{"$f":"'Source Data'!E1265","v":" that may reduce availability and reliability of entities or functions that rely on those channels. Attackers have demonstrated flooding attacks against communications paths up to optical carrier (OC) 48. These optical fiber connections carry 2400+ megabits per second and are typically used in regional Internet Service Provider networks."},{"$f":"'Source Data'!F1265","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"communication channels are shared between different system owners that may reduce availability and reliability of entities or functions that rely on those channels. Attackers have demonstrated flooding attacks against communications paths up to optical carrier (OC) 48. These optical fiber connections carry 2400+ megabits per second and are typically used in regional Internet Service Provider networks."}]
[{"$f":"'Source Data'!A1266","v":"dgm.2"},{"$f":"'Source Data'!B1266","v":"v"},{"$f":"'Source Data'!C1266","v":0.170269},{"$f":"'Source Data'!D1266","v":"network services are shared between different system owners"},{"$f":"'Source Data'!E1266","v":" that increase the attack surface for the systems sharing the service. This requires a utility to put a certain level of trust in the systems sharing the communications channel and the entity that manages it."},{"$f":"'Source Data'!F1266","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network services are shared between different system owners that increase the attack surface for the systems sharing the service. This requires a utility to put a certain level of trust in the systems sharing the communications channel and the entity that manages it."}]
[{"$f":"'Source Data'!A1267","v":"dgm.2"},{"$f":"'Source Data'!B1267","v":"i"},{"$f":"'Source Data'!C1267","v":0.95501100000000005},{"$f":"'Source Data'!D1267","v":"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations"},{"$f":"'Source Data'!E1267","v":0},{"$f":"'Source Data'!F1267","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations0"}]
[{"$f":"'Source Data'!A1268","v":"dgm.2"},{"$f":"'Source Data'!B1268","v":"i"},{"$f":"'Source Data'!C1268","v":0.10034},{"$f":"'Source Data'!D1268","v":"The uncoordinated capacitor banks due to loss of communications could conflict with substation load tap changer (LTC) actions, causing \"hunting\" or other inefficient actions that increase utility power losses and premature transformer failures"},{"$f":"'Source Data'!E1268","v":0},{"$f":"'Source Data'!F1268","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The uncoordinated capacitor banks due to loss of communications could conflict with substation load tap changer (LTC) actions, causing \"hunting\" or other inefficient actions that increase utility power losses and premature transformer failures0"}]
[{"$f":"'Source Data'!A1269","v":"dgm.2"},{"$f":"'Source Data'!B1269","v":"i"},{"$f":"'Source Data'!C1269","v":0.68830899999999995},{"$f":"'Source Data'!D1269","v":"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment"},{"$f":"'Source Data'!E1269","v":0},{"$f":"'Source Data'!F1269","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment0"}]
[{"$f":"'Source Data'!A1270","v":"dgm.2"},{"$f":"'Source Data'!B1270","v":"i"},{"$f":"'Source Data'!C1270","v":0.95503800000000005},{"$f":"'Source Data'!D1270","v":"Disruption in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions"},{"$f":"'Source Data'!E1270","v":0},{"$f":"'Source Data'!F1270","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Disruption in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions0"}]
[{"$f":"'Source Data'!A1271","v":"dgm.2"},{"$f":"'Source Data'!B1271","v":"m"},{"$f":"'Source Data'!C1271","v":0.14306099999999999},{"$f":"'Source Data'!D1271","v":"verify personnel"},{"$f":"'Source Data'!E1271","v":" (service providers) to ensure their services are secure and reliable"},{"$f":"'Source Data'!F1271","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify personnel (service providers) to ensure their services are secure and reliable"}]
[{"$f":"'Source Data'!A1272","v":"dgm.2"},{"$f":"'Source Data'!B1272","v":"m"},{"$f":"'Source Data'!C1272","v":0.53807499999999997},{"$f":"'Source Data'!D1272","v":"verify personnel"},{"$f":"'Source Data'!E1272","v":" (customers) sharing the network to ensure they are reputable, security conscious and using network resources appropriately"},{"$f":"'Source Data'!F1272","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify personnel (customers) sharing the network to ensure they are reputable, security conscious and using network resources appropriately"}]
[{"$f":"'Source Data'!A1273","v":"dgm.2"},{"$f":"'Source Data'!B1273","v":"m"},{"$f":"'Source Data'!C1273","v":0.74583500000000003},{"$f":"'Source Data'!D1273","v":"require safe mode"},{"$f":"'Source Data'!E1273","v":" in feeder devices such as capacitor banks and voltage regulators by having default states that rely on local electrical conditions if communications are lost"},{"$f":"'Source Data'!F1273","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require safe mode in feeder devices such as capacitor banks and voltage regulators by having default states that rely on local electrical conditions if communications are lost"}]
[{"$f":"'Source Data'!A1274","v":"dgm.2"},{"$f":"'Source Data'!B1274","v":"m"},{"$f":"'Source Data'!C1274","v":0.76132599999999995},{"$f":"'Source Data'!D1274","v":"require redundancy"},{"$f":"'Source Data'!E1274","v":" via selected AMI meters or alternative devices that provide redundant monitoring information that is out-of-band of compromised communications"},{"$f":"'Source Data'!F1274","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require redundancy via selected AMI meters or alternative devices that provide redundant monitoring information that is out-of-band of compromised communications"}]
[{"$f":"'Source Data'!A1275","v":"dgm.3"},{"$f":"'Source Data'!B1275","v":"t"},{"$f":"'Source Data'!C1275","v":0.35069800000000001},{"$f":"'Source Data'!D1275","v":"Malicious Code Injected into Substation Equipment via Physical Access"},{"$f":"'Source Data'!E1275","v":0},{"$f":"'Source Data'!F1275","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Malicious Code Injected into Substation Equipment via Physical Access0"}]
[{"$f":"'Source Data'!A1276","v":"dgm.3"},{"$f":"'Source Data'!B1276","v":"d"},{"$f":"'Source Data'!C1276","v":0.56806400000000001},{"$f":"'Source Data'!D1276","v":"A threat agent injects malicious code into substation equipment through physical access of engineering serial ports or by memory update devices such as USB memory sticks, Secure Digital (SD) cards or Compact Flash (CF) cards. Examples of target equipment include communications concentrators, remote terminal units (RTUs), and protection relays. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration."},{"$f":"'Source Data'!E1276","v":0},{"$f":"'Source Data'!F1276","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent injects malicious code into substation equipment through physical access of engineering serial ports or by memory update devices such as USB memory sticks, Secure Digital (SD) cards or Compact Flash (CF) cards. Examples of target equipment include communications concentrators, remote terminal units (RTUs), and protection relays. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration.0"}]
[{"$f":"'Source Data'!A1277","v":"dgm.3"},{"$f":"'Source Data'!B1277","v":"v"},{"$f":"'Source Data'!C1277","v":4.3000999999999998E-2},{"$f":"'Source Data'!D1277","v":"unnecessary access is permitted to system functions"},{"$f":"'Source Data'!E1277","v":" via engineering and console ports of substation equipment,"},{"$f":"'Source Data'!F1277","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to system functions via engineering and console ports of substation equipment,"}]
[{"$f":"'Source Data'!A1278","v":"dgm.3"},{"$f":"'Source Data'!B1278","v":"v"},{"$f":"'Source Data'!C1278","v":0.25539200000000001},{"$f":"'Source Data'!D1278","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1278","v":" to software and information,"},{"$f":"'Source Data'!F1278","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to software and information,"}]
[{"$f":"'Source Data'!A1279","v":"dgm.3"},{"$f":"'Source Data'!B1279","v":"v"},{"$f":"'Source Data'!C1279","v":0.77319899999999997},{"$f":"'Source Data'!D1279","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1279","v":" "},{"$f":"'Source Data'!F1279","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals "}]
[{"$f":"'Source Data'!A1280","v":"dgm.3"},{"$f":"'Source Data'!B1280","v":"v"},{"$f":"'Source Data'!C1280","v":0.15080199999999999},{"$f":"'Source Data'!D1280","v":"enabled but unused ports"},{"$f":"'Source Data'!E1280","v":" (unused engineering and console ports)."},{"$f":"'Source Data'!F1280","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enabled but unused ports (unused engineering and console ports)."}]
[{"$f":"'Source Data'!A1281","v":"dgm.3"},{"$f":"'Source Data'!B1281","v":"i"},{"$f":"'Source Data'!C1281","v":0.78946300000000003},{"$f":"'Source Data'!D1281","v":"Substation components could be modified to fail detection and clearing of bus and feeder faults (although these can be managed by reclosers which are not necessarily in the substation). These faults could lead to destruction of electrical grid equipment"},{"$f":"'Source Data'!E1281","v":0},{"$f":"'Source Data'!F1281","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Substation components could be modified to fail detection and clearing of bus and feeder faults (although these can be managed by reclosers which are not necessarily in the substation). These faults could lead to destruction of electrical grid equipment0"}]
[{"$f":"'Source Data'!A1282","v":"dgm.3"},{"$f":"'Source Data'!B1282","v":"i"},{"$f":"'Source Data'!C1282","v":0.60175400000000001},{"$f":"'Source Data'!D1282","v":"Substation components could be reprogrammed to disallow feeder sectionalizing or service restoration via SCADA. However, these are frequently done manually"},{"$f":"'Source Data'!E1282","v":0},{"$f":"'Source Data'!F1282","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Substation components could be reprogrammed to disallow feeder sectionalizing or service restoration via SCADA. However, these are frequently done manually0"}]
[{"$f":"'Source Data'!A1283","v":"dgm.3"},{"$f":"'Source Data'!B1283","v":"i"},{"$f":"'Source Data'!C1283","v":0.475825},{"$f":"'Source Data'!D1283","v":"Modification of devices controlling VOLT/VAR equipment, including load tap changers, SVCs, automatic voltage regulators, and synchronous condensers, could prevent direct voltage control leading to potential customer equipment damage, over/under voltage trips, or additional power losses"},{"$f":"'Source Data'!E1283","v":0},{"$f":"'Source Data'!F1283","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Modification of devices controlling VOLT/VAR equipment, including load tap changers, SVCs, automatic voltage regulators, and synchronous condensers, could prevent direct voltage control leading to potential customer equipment damage, over/under voltage trips, or additional power losses0"}]
[{"$f":"'Source Data'!A1284","v":"dgm.3"},{"$f":"'Source Data'!B1284","v":"i"},{"$f":"'Source Data'!C1284","v":0.85237200000000002},{"$f":"'Source Data'!D1284","v":"Equipment firmware changes may create the need for equipment servicing that can be costly and time consuming"},{"$f":"'Source Data'!E1284","v":0},{"$f":"'Source Data'!F1284","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Equipment firmware changes may create the need for equipment servicing that can be costly and time consuming0"}]
[{"$f":"'Source Data'!A1285","v":"dgm.3"},{"$f":"'Source Data'!B1285","v":"i"},{"$f":"'Source Data'!C1285","v":0.20600599999999999},{"$f":"'Source Data'!D1285","v":"Possible lack of monitoring capabilities reduces situational awareness, inhibits a utility's ability to react proactively, and could increase the number and duration of failures."},{"$f":"'Source Data'!E1285","v":0},{"$f":"'Source Data'!F1285","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible lack of monitoring capabilities reduces situational awareness, inhibits a utility's ability to react proactively, and could increase the number and duration of failures.0"}]
[{"$f":"'Source Data'!A1286","v":"dgm.3"},{"$f":"'Source Data'!B1286","v":"m"},{"$f":"'Source Data'!C1286","v":0.79992600000000003},{"$f":"'Source Data'!D1286","v":"restrict device access"},{"$f":"'Source Data'!E1286","v":" (both physical and logical) of protective relays and other critical devices"},{"$f":"'Source Data'!F1286","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict device access (both physical and logical) of protective relays and other critical devices"}]
[{"$f":"'Source Data'!A1287","v":"dgm.3"},{"$f":"'Source Data'!B1287","v":"m"},{"$f":"'Source Data'!C1287","v":6.8289100000000005E-2},{"$f":"'Source Data'!D1287","v":"check software execution integrity"},{"$f":"'Source Data'!E1287","v":" of software and information, since software may be compromised when loaded for execution"},{"$f":"'Source Data'!F1287","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software execution integrity of software and information, since software may be compromised when loaded for execution"}]
[{"$f":"'Source Data'!A1288","v":"dgm.3"},{"$f":"'Source Data'!B1288","v":"m"},{"$f":"'Source Data'!C1288","v":0.591557},{"$f":"'Source Data'!D1288","v":"configure for least functionality"},{"$f":"'Source Data'!E1288","v":" by disabling unused console and engineering ports on intelligent electronic devices (IEDs)"},{"$f":"'Source Data'!F1288","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by disabling unused console and engineering ports on intelligent electronic devices (IEDs)"}]
[{"$f":"'Source Data'!A1289","v":"dgm.3"},{"$f":"'Source Data'!B1289","v":"m"},{"$f":"'Source Data'!C1289","v":0.99677499999999997},{"$f":"'Source Data'!D1289","v":"create audit logs"},{"$f":"'Source Data'!E1289","v":" of substation actions"},{"$f":"'Source Data'!F1289","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of substation actions"}]
[{"$f":"'Source Data'!A1290","v":"dgm.3"},{"$f":"'Source Data'!B1290","v":"m"},{"$f":"'Source Data'!C1290","v":0.41049400000000003},{"$f":"'Source Data'!D1290","v":"generate alarms"},{"$f":"'Source Data'!E1290","v":" for any serious anomalies, such as connection changes and device configuration changes in substations"},{"$f":"'Source Data'!F1290","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for any serious anomalies, such as connection changes and device configuration changes in substations"}]
[{"$f":"'Source Data'!A1291","v":"dgm.3"},{"$f":"'Source Data'!B1291","v":"m"},{"$f":"'Source Data'!C1291","v":0.61059300000000005},{"$f":"'Source Data'!D1291","v":"restrict physical access"},{"$f":"'Source Data'!E1291","v":" using, for example, card swipes, PIN codes"},{"$f":"'Source Data'!F1291","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access using, for example, card swipes, PIN codes"}]
[{"$f":"'Source Data'!A1292","v":"dgm.3"},{"$f":"'Source Data'!B1292","v":"m"},{"$f":"'Source Data'!C1292","v":5.67439E-2},{"$f":"'Source Data'!D1292","v":"require video surveillance"},{"$f":"'Source Data'!E1292","v":" of the human interfaces to the DGM equipment"},{"$f":"'Source Data'!F1292","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require video surveillance of the human interfaces to the DGM equipment"}]
[{"$f":"'Source Data'!A1293","v":"dgm.3"},{"$f":"'Source Data'!B1293","v":"m"},{"$f":"'Source Data'!C1293","v":0.62173999999999996},{"$f":"'Source Data'!D1293","v":"restrict access"},{"$f":"'Source Data'!E1293","v":" to engineering functions"},{"$f":"'Source Data'!F1293","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict access to engineering functions"}]
[{"$f":"'Source Data'!A1294","v":"dgm.3"},{"$f":"'Source Data'!B1294","v":"m"},{"$f":"'Source Data'!C1294","v":0.71799299999999999},{"$f":"'Source Data'!D1294","v":"maintain latest firmware"},{"$f":"'Source Data'!E1294","v":" for substation equipment"},{"$f":"'Source Data'!F1294","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain latest firmware for substation equipment"}]
[{"$f":"'Source Data'!A1295","v":"dgm.3"},{"$f":"'Source Data'!B1295","v":"m"},{"$f":"'Source Data'!C1295","v":6.5006300000000003E-2},{"$f":"'Source Data'!D1295","v":"maintain patches"},{"$f":"'Source Data'!E1295","v":" for substation equipment"},{"$f":"'Source Data'!F1295","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches for substation equipment"}]
[{"$f":"'Source Data'!A1296","v":"dgm.3"},{"$f":"'Source Data'!B1296","v":"m"},{"$f":"'Source Data'!C1296","v":0.17572299999999999},{"$f":"'Source Data'!D1296","v":"restrict port access"},{"$f":"'Source Data'!E1296","v":" of device ports on substation equipment"},{"$f":"'Source Data'!F1296","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict port access of device ports on substation equipment"}]
[{"$f":"'Source Data'!A1297","v":"dgm.3"},{"$f":"'Source Data'!B1297","v":"m"},{"$f":"'Source Data'!C1297","v":0.245367},{"$f":"'Source Data'!D1297","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E1297","v":" to limit privileges for functions using engineering and console ports of substation equipment,"},{"$f":"'Source Data'!F1297","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privileges for functions using engineering and console ports of substation equipment,"}]
[{"$f":"'Source Data'!A1298","v":"dgm.3"},{"$f":"'Source Data'!B1298","v":"m"},{"$f":"'Source Data'!C1298","v":0.78878899999999996},{"$f":"'Source Data'!D1298","v":"authenticate users"},{"$f":"'Source Data'!E1298","v":" for access to engineering and console ports where feasible"},{"$f":"'Source Data'!F1298","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users for access to engineering and console ports where feasible"}]
[{"$f":"'Source Data'!A1299","v":"dgm.4"},{"$f":"'Source Data'!B1299","v":"t"},{"$f":"'Source Data'!C1299","v":0.51855899999999999},{"$f":"'Source Data'!D1299","v":"Malicious Code Injected into Substation Equipment via Remote Access"},{"$f":"'Source Data'!E1299","v":0},{"$f":"'Source Data'!F1299","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Malicious Code Injected into Substation Equipment via Remote Access0"}]
[{"$f":"'Source Data'!A1300","v":"dgm.4"},{"$f":"'Source Data'!B1300","v":"d"},{"$f":"'Source Data'!C1300","v":0.80809799999999998},{"$f":"'Source Data'!D1300","v":"A threat agent uploads malicious code into substation equipment via remote engineering access, either through an IP network WAN or dialup to a line-sharing switch (LSS). Examples of target equipment include communication concentrators, RTUs, and protection relays. Connections with peers are another avenue of attack. Some distribution substations, particularly in urban environments, use Bluetooth or ZigBee for access to reduce the need for crews to install underground cables. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration."},{"$f":"'Source Data'!E1300","v":0},{"$f":"'Source Data'!F1300","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent uploads malicious code into substation equipment via remote engineering access, either through an IP network WAN or dialup to a line-sharing switch (LSS). Examples of target equipment include communication concentrators, RTUs, and protection relays. Connections with peers are another avenue of attack. Some distribution substations, particularly in urban environments, use Bluetooth or ZigBee for access to reduce the need for crews to install underground cables. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration.0"}]
[{"$f":"'Source Data'!A1301","v":"dgm.4"},{"$f":"'Source Data'!B1301","v":"v"},{"$f":"'Source Data'!C1301","v":0.28166200000000002},{"$f":"'Source Data'!D1301","v":"unnecessary access is permitted to the communications channel"},{"$f":"'Source Data'!E1301","v":" for remote substation WAN communications,"},{"$f":"'Source Data'!F1301","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary access is permitted to the communications channel for remote substation WAN communications,"}]
[{"$f":"'Source Data'!A1302","v":"dgm.4"},{"$f":"'Source Data'!B1302","v":"v"},{"$f":"'Source Data'!C1302","v":0.75360300000000002},{"$f":"'Source Data'!D1302","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Source Data'!E1302","v":" "},{"$f":"'Source Data'!F1302","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"software patches are not checked regularly to ensure that they are current "}]
[{"$f":"'Source Data'!A1303","v":"dgm.4"},{"$f":"'Source Data'!B1303","v":"v"},{"$f":"'Source Data'!C1303","v":0.173014},{"$f":"'Source Data'!D1303","v":"system permits bypass of physical access controls"},{"$f":"'Source Data'!E1303","v":" via dialup LSS or wireless access."},{"$f":"'Source Data'!F1303","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits bypass of physical access controls via dialup LSS or wireless access."}]
[{"$f":"'Source Data'!A1304","v":"dgm.4"},{"$f":"'Source Data'!B1304","v":"i"},{"$f":"'Source Data'!C1304","v":0.98042300000000004},{"$f":"'Source Data'!D1304","v":"Substation components could be modified to fail detection and clearing of bus and feeder faults (although these can be managed by reclosers which are not necessarily in the substation). These faults could lead to destruction of electrical grid equipment"},{"$f":"'Source Data'!E1304","v":0},{"$f":"'Source Data'!F1304","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Substation components could be modified to fail detection and clearing of bus and feeder faults (although these can be managed by reclosers which are not necessarily in the substation). These faults could lead to destruction of electrical grid equipment0"}]
[{"$f":"'Source Data'!A1305","v":"dgm.4"},{"$f":"'Source Data'!B1305","v":"i"},{"$f":"'Source Data'!C1305","v":0.81718599999999997},{"$f":"'Source Data'!D1305","v":"Substation components could be reprogrammed to disallow feeder sectionalizing or service restoration via SCADA. However, these are frequently done manually"},{"$f":"'Source Data'!E1305","v":0},{"$f":"'Source Data'!F1305","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Substation components could be reprogrammed to disallow feeder sectionalizing or service restoration via SCADA. However, these are frequently done manually0"}]
[{"$f":"'Source Data'!A1306","v":"dgm.4"},{"$f":"'Source Data'!B1306","v":"i"},{"$f":"'Source Data'!C1306","v":0.65835200000000005},{"$f":"'Source Data'!D1306","v":"Equipment firmware changes may create the need for equipment servicing that can be costly and time consuming"},{"$f":"'Source Data'!E1306","v":0},{"$f":"'Source Data'!F1306","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Equipment firmware changes may create the need for equipment servicing that can be costly and time consuming0"}]
[{"$f":"'Source Data'!A1307","v":"dgm.4"},{"$f":"'Source Data'!B1307","v":"i"},{"$f":"'Source Data'!C1307","v":3.4459499999999997E-2},{"$f":"'Source Data'!D1307","v":"Possible lack of monitoring capabilities reduces situational awareness, inhibits a utility's ability to react proactively, and could increase the number and duration of failures"},{"$f":"'Source Data'!E1307","v":0},{"$f":"'Source Data'!F1307","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible lack of monitoring capabilities reduces situational awareness, inhibits a utility's ability to react proactively, and could increase the number and duration of failures0"}]
[{"$f":"'Source Data'!A1308","v":"dgm.4"},{"$f":"'Source Data'!B1308","v":"m"},{"$f":"'Source Data'!C1308","v":0.64271599999999995},{"$f":"'Source Data'!D1308","v":"restrict remote access"},{"$f":"'Source Data'!E1308","v":" to protective relays and other critical devices"},{"$f":"'Source Data'!F1308","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access to protective relays and other critical devices"}]
[{"$f":"'Source Data'!A1309","v":"dgm.4"},{"$f":"'Source Data'!B1309","v":"m"},{"$f":"'Source Data'!C1309","v":0.70947800000000005},{"$f":"'Source Data'!D1309","v":"create audit logs"},{"$f":"'Source Data'!E1309","v":" of substation actions"},{"$f":"'Source Data'!F1309","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of substation actions"}]
[{"$f":"'Source Data'!A1310","v":"dgm.4"},{"$f":"'Source Data'!B1310","v":"m"},{"$f":"'Source Data'!C1310","v":0.43137799999999998},{"$f":"'Source Data'!D1310","v":"generate alarms"},{"$f":"'Source Data'!E1310","v":" for any serious anomalies, such as connection changes and device configuration changes"},{"$f":"'Source Data'!F1310","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for any serious anomalies, such as connection changes and device configuration changes"}]
[{"$f":"'Source Data'!A1311","v":"dgm.4"},{"$f":"'Source Data'!B1311","v":"m"},{"$f":"'Source Data'!C1311","v":0.98060599999999998},{"$f":"'Source Data'!D1311","v":"maintain patches"},{"$f":"'Source Data'!E1311","v":" for all substation communication equipment"},{"$f":"'Source Data'!F1311","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches for all substation communication equipment"}]
[{"$f":"'Source Data'!A1312","v":"dgm.4"},{"$f":"'Source Data'!B1312","v":"m"},{"$f":"'Source Data'!C1312","v":0.40503400000000001},{"$f":"'Source Data'!D1312","v":"maintain anti-virus"},{"$f":"'Source Data'!E1312","v":" on substation equipment"},{"$f":"'Source Data'!F1312","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain anti-virus on substation equipment"}]
[{"$f":"'Source Data'!A1313","v":"dgm.4"},{"$f":"'Source Data'!B1313","v":"m"},{"$f":"'Source Data'!C1313","v":0.326378},{"$f":"'Source Data'!D1313","v":"require application whitelisting"},{"$f":"'Source Data'!E1313","v":" on substation equipment"},{"$f":"'Source Data'!F1313","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require application whitelisting on substation equipment"}]
[{"$f":"'Source Data'!A1314","v":"dgm.4"},{"$f":"'Source Data'!B1314","v":"m"},{"$f":"'Source Data'!C1314","v":0.39962900000000001},{"$f":"'Source Data'!D1314","v":"authenticate users"},{"$f":"'Source Data'!E1314","v":" in the substation network (possibly two factor authentication)"},{"$f":"'Source Data'!F1314","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users in the substation network (possibly two factor authentication)"}]
[{"$f":"'Source Data'!A1315","v":"dgm.4"},{"$f":"'Source Data'!B1315","v":"m"},{"$f":"'Source Data'!C1315","v":0.56250299999999998},{"$f":"'Source Data'!D1315","v":"require VPNs"},{"$f":"'Source Data'!E1315","v":" in the substation network"},{"$f":"'Source Data'!F1315","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require VPNs in the substation network"}]
[{"$f":"'Source Data'!A1316","v":"dgm.5"},{"$f":"'Source Data'!B1316","v":"t"},{"$f":"'Source Data'!C1316","v":0.78934499999999996},{"$f":"'Source Data'!D1316","v":"Remote Access Used to Compromise DMS"},{"$f":"'Source Data'!E1316","v":0},{"$f":"'Source Data'!F1316","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Remote Access Used to Compromise DMS0"}]
[{"$f":"'Source Data'!A1317","v":"dgm.5"},{"$f":"'Source Data'!B1317","v":"d"},{"$f":"'Source Data'!C1317","v":0.81503099999999995},{"$f":"'Source Data'!D1317","v":"A threat agent compromises distribution management system (DMS) functionality through remote access modification of executable programs and libraries, rendering the DMS inoperable."},{"$f":"'Source Data'!E1317","v":0},{"$f":"'Source Data'!F1317","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent compromises distribution management system (DMS) functionality through remote access modification of executable programs and libraries, rendering the DMS inoperable.0"}]
[{"$f":"'Source Data'!A1318","v":"dgm.5"},{"$f":"'Source Data'!B1318","v":"v"},{"$f":"'Source Data'!C1318","v":0.97934399999999999},{"$f":"'Source Data'!D1318","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1318","v":" to software files,"},{"$f":"'Source Data'!F1318","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to software files,"}]
[{"$f":"'Source Data'!A1319","v":"dgm.5"},{"$f":"'Source Data'!B1319","v":"v"},{"$f":"'Source Data'!C1319","v":3.4709400000000001E-2},{"$f":"'Source Data'!D1319","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Source Data'!E1319","v":" "},{"$f":"'Source Data'!F1319","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"software patches are not checked regularly to ensure that they are current "}]
[{"$f":"'Source Data'!A1320","v":"dgm.5"},{"$f":"'Source Data'!B1320","v":"v"},{"$f":"'Source Data'!C1320","v":0.26978200000000002},{"$f":"'Source Data'!D1320","v":"remote access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1320","v":" to DMS systems,"},{"$f":"'Source Data'!F1320","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"remote access may be obtained by unauthorized individuals to DMS systems,"}]
[{"$f":"'Source Data'!A1321","v":"dgm.5"},{"$f":"'Source Data'!B1321","v":"v"},{"$f":"'Source Data'!C1321","v":0.87141299999999999},{"$f":"'Source Data'!D1321","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E1321","v":" to systems."},{"$f":"'Source Data'!F1321","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to systems."}]
[{"$f":"'Source Data'!A1322","v":"dgm.5"},{"$f":"'Source Data'!B1322","v":"i"},{"$f":"'Source Data'!C1322","v":0.13012599999999999},{"$f":"'Source Data'!D1322","v":"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies"},{"$f":"'Source Data'!E1322","v":0},{"$f":"'Source Data'!F1322","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies0"}]
[{"$f":"'Source Data'!A1323","v":"dgm.5"},{"$f":"'Source Data'!B1323","v":"i"},{"$f":"'Source Data'!C1323","v":0.35041499999999998},{"$f":"'Source Data'!D1323","v":"Possible increase in outage durations"},{"$f":"'Source Data'!E1323","v":0},{"$f":"'Source Data'!F1323","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible increase in outage durations0"}]
[{"$f":"'Source Data'!A1324","v":"dgm.5"},{"$f":"'Source Data'!B1324","v":"i"},{"$f":"'Source Data'!C1324","v":0.51143899999999998},{"$f":"'Source Data'!D1324","v":"Decrease in operational efficiency and increase in utility power losses"},{"$f":"'Source Data'!E1324","v":0},{"$f":"'Source Data'!F1324","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Decrease in operational efficiency and increase in utility power losses0"}]
[{"$f":"'Source Data'!A1325","v":"dgm.5"},{"$f":"'Source Data'!B1325","v":"i"},{"$f":"'Source Data'!C1325","v":6.1408400000000002E-2},{"$f":"'Source Data'!D1325","v":"Decrease in service reliability"},{"$f":"'Source Data'!E1325","v":0},{"$f":"'Source Data'!F1325","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Decrease in service reliability0"}]
[{"$f":"'Source Data'!A1326","v":"dgm.5"},{"$f":"'Source Data'!B1326","v":"i"},{"$f":"'Source Data'!C1326","v":5.9686500000000003E-2},{"$f":"'Source Data'!D1326","v":"Decrease in customer satisfaction"},{"$f":"'Source Data'!E1326","v":0},{"$f":"'Source Data'!F1326","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Decrease in customer satisfaction0"}]
[{"$f":"'Source Data'!A1327","v":"dgm.5"},{"$f":"'Source Data'!B1327","v":"m"},{"$f":"'Source Data'!C1327","v":0.47386200000000001},{"$f":"'Source Data'!D1327","v":"maintain patches"},{"$f":"'Source Data'!E1327","v":" "},{"$f":"'Source Data'!F1327","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain patches "}]
[{"$f":"'Source Data'!A1328","v":"dgm.5"},{"$f":"'Source Data'!B1328","v":"m"},{"$f":"'Source Data'!C1328","v":0.24377099999999999},{"$f":"'Source Data'!D1328","v":"create audit logs"},{"$f":"'Source Data'!E1328","v":" of all program changes and updates"},{"$f":"'Source Data'!F1328","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all program changes and updates"}]
[{"$f":"'Source Data'!A1329","v":"dgm.5"},{"$f":"'Source Data'!B1329","v":"m"},{"$f":"'Source Data'!C1329","v":0.117807},{"$f":"'Source Data'!D1329","v":"detect abnormal behavior"},{"$f":"'Source Data'!E1329","v":" of voltage on feeders via selected AMI meters or alternative devices that provide redundant information"},{"$f":"'Source Data'!F1329","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal behavior of voltage on feeders via selected AMI meters or alternative devices that provide redundant information"}]
[{"$f":"'Source Data'!A1330","v":"dgm.5"},{"$f":"'Source Data'!B1330","v":"m"},{"$f":"'Source Data'!C1330","v":0.288076},{"$f":"'Source Data'!D1330","v":"check software file integrity"},{"$f":"'Source Data'!E1330","v":" (digital signatures) for driver installation"},{"$f":"'Source Data'!F1330","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"check software file integrity (digital signatures) for driver installation"}]
[{"$f":"'Source Data'!A1331","v":"dgm.5"},{"$f":"'Source Data'!B1331","v":"m"},{"$f":"'Source Data'!C1331","v":0.243087},{"$f":"'Source Data'!D1331","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E1331","v":" on DMS hosts"},{"$f":"'Source Data'!F1331","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention on DMS hosts"}]
[{"$f":"'Source Data'!A1332","v":"dgm.5"},{"$f":"'Source Data'!B1332","v":"m"},{"$f":"'Source Data'!C1332","v":0.34342699999999998},{"$f":"'Source Data'!D1332","v":"implement configuration management"},{"$f":"'Source Data'!E1332","v":" for all software updates including patches and firmware updates"},{"$f":"'Source Data'!F1332","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management for all software updates including patches and firmware updates"}]
[{"$f":"'Source Data'!A1333","v":"dgm.5"},{"$f":"'Source Data'!B1333","v":"m"},{"$f":"'Source Data'!C1333","v":3.1736599999999997E-2},{"$f":"'Source Data'!D1333","v":"maintain anti-virus"},{"$f":"'Source Data'!E1333","v":" on DMS hosts"},{"$f":"'Source Data'!F1333","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"maintain anti-virus on DMS hosts"}]
[{"$f":"'Source Data'!A1334","v":"dgm.5"},{"$f":"'Source Data'!B1334","v":"m"},{"$f":"'Source Data'!C1334","v":0.98677400000000004},{"$f":"'Source Data'!D1334","v":"require application whitelisting"},{"$f":"'Source Data'!E1334","v":" on DMS hosts"},{"$f":"'Source Data'!F1334","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require application whitelisting on DMS hosts"}]
[{"$f":"'Source Data'!A1335","v":"dgm.5"},{"$f":"'Source Data'!B1335","v":"m"},{"$f":"'Source Data'!C1335","v":0.12983500000000001},{"$f":"'Source Data'!D1335","v":"require backup"},{"$f":"'Source Data'!E1335","v":" when primary DMS is inoperable"},{"$f":"'Source Data'!F1335","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require backup when primary DMS is inoperable"}]
[{"$f":"'Source Data'!A1336","v":"dgm.5"},{"$f":"'Source Data'!B1336","v":"m"},{"$f":"'Source Data'!C1336","v":0.45703700000000003},{"$f":"'Source Data'!D1336","v":"require multi-factor authentication"},{"$f":"'Source Data'!E1336","v":" for remote access"},{"$f":"'Source Data'!F1336","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication for remote access"}]
[{"$f":"'Source Data'!A1337","v":"dgm.5"},{"$f":"'Source Data'!B1337","v":"m"},{"$f":"'Source Data'!C1337","v":0.113686},{"$f":"'Source Data'!D1337","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E1337","v":" to limit privileges to modify software files"},{"$f":"'Source Data'!F1337","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit privileges to modify software files"}]
[{"$f":"'Source Data'!A1338","v":"dgm.6"},{"$f":"'Source Data'!B1338","v":"t"},{"$f":"'Source Data'!C1338","v":0.66791},{"$f":"'Source Data'!D1338","v":"Spoofed Substation Field Devices Influence Automated Responses"},{"$f":"'Source Data'!E1338","v":0},{"$f":"'Source Data'!F1338","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Spoofed Substation Field Devices Influence Automated Responses0"}]
[{"$f":"'Source Data'!A1339","v":"dgm.6"},{"$f":"'Source Data'!B1339","v":"d"},{"$f":"'Source Data'!C1339","v":0.413746},{"$f":"'Source Data'!D1339","v":"Threat agent spoofs data inputs from field devices at substations and below to cause the DMS to report a false system state. This could cause operator or automated responses that are inappropriate."},{"$f":"'Source Data'!E1339","v":0},{"$f":"'Source Data'!F1339","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat agent spoofs data inputs from field devices at substations and below to cause the DMS to report a false system state. This could cause operator or automated responses that are inappropriate.0"}]
[{"$f":"'Source Data'!A1340","v":"dgm.6"},{"$f":"'Source Data'!B1340","v":"v"},{"$f":"'Source Data'!C1340","v":0.175071},{"$f":"'Source Data'!D1340","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Source Data'!E1340","v":" in the communications between field devices and the DMS,"},{"$f":"'Source Data'!F1340","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits messages to be modified by unauthorized individuals in the communications between field devices and the DMS,"}]
[{"$f":"'Source Data'!A1341","v":"dgm.6"},{"$f":"'Source Data'!B1341","v":"v"},{"$f":"'Source Data'!C1341","v":0.52576900000000004},{"$f":"'Source Data'!D1341","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E1341","v":" in the communications between field devices and the DMS,"},{"$f":"'Source Data'!F1341","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in the communications between field devices and the DMS,"}]
[{"$f":"'Source Data'!A1342","v":"dgm.6"},{"$f":"'Source Data'!B1342","v":"v"},{"$f":"'Source Data'!C1342","v":9.3832899999999997E-2},{"$f":"'Source Data'!D1342","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E1342","v":" "},{"$f":"'Source Data'!F1342","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals "}]
[{"$f":"'Source Data'!A1343","v":"dgm.6"},{"$f":"'Source Data'!B1343","v":"i"},{"$f":"'Source Data'!C1343","v":0.13683400000000001},{"$f":"'Source Data'!D1343","v":"Inappropriate fault-clearing actions, feeder sectionalization, and overuse of remedial capabilities leading to loss of power to customers"},{"$f":"'Source Data'!E1343","v":0},{"$f":"'Source Data'!F1343","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inappropriate fault-clearing actions, feeder sectionalization, and overuse of remedial capabilities leading to loss of power to customers0"}]
[{"$f":"'Source Data'!A1344","v":"dgm.6"},{"$f":"'Source Data'!B1344","v":"i"},{"$f":"'Source Data'!C1344","v":0.39222600000000002},{"$f":"'Source Data'!D1344","v":"Volt/VAR controls are wrongly applied or adjusted based on erroneous data, possibly triggering over/under voltage trips"},{"$f":"'Source Data'!E1344","v":0},{"$f":"'Source Data'!F1344","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Volt/VAR controls are wrongly applied or adjusted based on erroneous data, possibly triggering over/under voltage trips0"}]
[{"$f":"'Source Data'!A1345","v":"dgm.6"},{"$f":"'Source Data'!B1345","v":"i"},{"$f":"'Source Data'!C1345","v":0.16542499999999999},{"$f":"'Source Data'!D1345","v":"Collected meter data is incorrect or inaccurate, leading to possible loss in revenue"},{"$f":"'Source Data'!E1345","v":0},{"$f":"'Source Data'!F1345","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Collected meter data is incorrect or inaccurate, leading to possible loss in revenue0"}]
[{"$f":"'Source Data'!A1346","v":"dgm.6"},{"$f":"'Source Data'!B1346","v":"m"},{"$f":"'Source Data'!C1346","v":0.31622699999999998},{"$f":"'Source Data'!D1346","v":"authenticate messages"},{"$f":"'Source Data'!E1346","v":" in communication from the field to control centers"},{"$f":"'Source Data'!F1346","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate messages in communication from the field to control centers"}]
[{"$f":"'Source Data'!A1347","v":"dgm.6"},{"$f":"'Source Data'!B1347","v":"m"},{"$f":"'Source Data'!C1347","v":0.10569099999999999},{"$f":"'Source Data'!D1347","v":"detect unusual patterns"},{"$f":"'Source Data'!E1347","v":" of inputs that could indicate they are not trustworthy, by comparing inputs to each other and previous inputs"},{"$f":"'Source Data'!F1347","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of inputs that could indicate they are not trustworthy, by comparing inputs to each other and previous inputs"}]
[{"$f":"'Source Data'!A1348","v":"dgm.6"},{"$f":"'Source Data'!B1348","v":"m"},{"$f":"'Source Data'!C1348","v":0.70744499999999999},{"$f":"'Source Data'!D1348","v":"restrict communication access"},{"$f":"'Source Data'!E1348","v":" "},{"$f":"'Source Data'!F1348","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict communication access "}]
[{"$f":"'Source Data'!A1349","v":"dgm.6"},{"$f":"'Source Data'!B1349","v":"m"},{"$f":"'Source Data'!C1349","v":0.18326999999999999},{"$f":"'Source Data'!D1349","v":"encrypt communication paths"},{"$f":"'Source Data'!E1349","v":" "},{"$f":"'Source Data'!F1349","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths "}]
[{"$f":"'Source Data'!A1350","v":"dgm.7"},{"$f":"'Source Data'!B1350","v":"t"},{"$f":"'Source Data'!C1350","v":3.5641600000000002E-2},{"$f":"'Source Data'!D1350","v":"QoS Spoofed to Create Denial of Service for DGM Communications"},{"$f":"'Source Data'!E1350","v":0},{"$f":"'Source Data'!F1350","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"QoS Spoofed to Create Denial of Service for DGM Communications0"}]
[{"$f":"'Source Data'!A1351","v":"dgm.7"},{"$f":"'Source Data'!B1351","v":"d"},{"$f":"'Source Data'!C1351","v":0.241648},{"$f":"'Source Data'!D1351","v":"Assuming the same communications system serves DGM, DR, AMI, and many other services at the distribution level, a Quality of Service (QoS) allocation of bandwidth is necessary. QoS can be spoofed and if end device classifications are trusted, a threat agent can escalate the priority of malevolent data streams. If denial of service is the goal, the threat agent could spoof the QoS of flooded ICMP packets to prevent the transmission and reception of monitoring and control packets."},{"$f":"'Source Data'!E1351","v":0},{"$f":"'Source Data'!F1351","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Assuming the same communications system serves DGM, DR, AMI, and many other services at the distribution level, a Quality of Service (QoS) allocation of bandwidth is necessary. QoS can be spoofed and if end device classifications are trusted, a threat agent can escalate the priority of malevolent data streams. If denial of service is the goal, the threat agent could spoof the QoS of flooded ICMP packets to prevent the transmission and reception of monitoring and control packets.0"}]
[{"$f":"'Source Data'!A1352","v":"dgm.7"},{"$f":"'Source Data'!B1352","v":"v"},{"$f":"'Source Data'!C1352","v":4.1574399999999997E-2},{"$f":"'Source Data'!D1352","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Source Data'!E1352","v":" for QoS mechanisms that rely on devices to report their own classification,"},{"$f":"'Source Data'!F1352","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system assumes data inputs and resulting calculations are accurate for QoS mechanisms that rely on devices to report their own classification,"}]
[{"$f":"'Source Data'!A1353","v":"dgm.7"},{"$f":"'Source Data'!B1353","v":"v"},{"$f":"'Source Data'!C1353","v":0.109863},{"$f":"'Source Data'!D1353","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Source Data'!E1353","v":" to communication networks."},{"$f":"'Source Data'!F1353","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interfaces permit unnecessary traffic flows to communication networks."}]
[{"$f":"'Source Data'!A1354","v":"dgm.7"},{"$f":"'Source Data'!B1354","v":"i"},{"$f":"'Source Data'!C1354","v":0.70142000000000004},{"$f":"'Source Data'!D1354","v":"An end device could cause a denial of service to critical applications such as control of feeder sectionalizers and capacitor banks. In combination with a volatile electrical grid situation, this could lead to power failures"},{"$f":"'Source Data'!E1354","v":0},{"$f":"'Source Data'!F1354","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An end device could cause a denial of service to critical applications such as control of feeder sectionalizers and capacitor banks. In combination with a volatile electrical grid situation, this could lead to power failures0"}]
[{"$f":"'Source Data'!A1355","v":"dgm.7"},{"$f":"'Source Data'!B1355","v":"i"},{"$f":"'Source Data'!C1355","v":0.69819600000000004},{"$f":"'Source Data'!D1355","v":"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations"},{"$f":"'Source Data'!E1355","v":0},{"$f":"'Source Data'!F1355","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations0"}]
[{"$f":"'Source Data'!A1356","v":"dgm.7"},{"$f":"'Source Data'!B1356","v":"i"},{"$f":"'Source Data'!C1356","v":0.10868999999999999},{"$f":"'Source Data'!D1356","v":"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment"},{"$f":"'Source Data'!E1356","v":0},{"$f":"'Source Data'!F1356","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment0"}]
[{"$f":"'Source Data'!A1357","v":"dgm.7"},{"$f":"'Source Data'!B1357","v":"i"},{"$f":"'Source Data'!C1357","v":0.71928300000000001},{"$f":"'Source Data'!D1357","v":"Denial of service in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions"},{"$f":"'Source Data'!E1357","v":0},{"$f":"'Source Data'!F1357","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Denial of service in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions0"}]
[{"$f":"'Source Data'!A1358","v":"dgm.7"},{"$f":"'Source Data'!B1358","v":"m"},{"$f":"'Source Data'!C1358","v":0.77602700000000002},{"$f":"'Source Data'!D1358","v":"profile equipment"},{"$f":"'Source Data'!E1358","v":" (end devices) based on their profile of ports and traffic"},{"$f":"'Source Data'!F1358","v":"profile"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"profile equipment (end devices) based on their profile of ports and traffic"}]
[{"$f":"'Source Data'!A1359","v":"dgm.7"},{"$f":"'Source Data'!B1359","v":"m"},{"$f":"'Source Data'!C1359","v":0.39776699999999998},{"$f":"'Source Data'!D1359","v":"design for trust"},{"$f":"'Source Data'!E1359","v":" by analysis of equipment profiles"},{"$f":"'Source Data'!F1359","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design for trust by analysis of equipment profiles"}]
[{"$f":"'Source Data'!A1360","v":"dgm.7"},{"$f":"'Source Data'!B1360","v":"m"},{"$f":"'Source Data'!C1360","v":0.11576},{"$f":"'Source Data'!D1360","v":"restrict network access"},{"$f":"'Source Data'!E1360","v":" to the control system network"},{"$f":"'Source Data'!F1360","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict network access to the control system network"}]
[{"$f":"'Source Data'!A1361","v":"dgm.7"},{"$f":"'Source Data'!B1361","v":"m"},{"$f":"'Source Data'!C1361","v":0.18076600000000001},{"$f":"'Source Data'!D1361","v":"encrypt communication paths"},{"$f":"'Source Data'!E1361","v":" to prevent spoofing"},{"$f":"'Source Data'!F1361","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths to prevent spoofing"}]
[{"$f":"'Source Data'!A1362","v":"dgm.7"},{"$f":"'Source Data'!B1362","v":"m"},{"$f":"'Source Data'!C1362","v":0.356489},{"$f":"'Source Data'!D1362","v":"authenticate users"},{"$f":"'Source Data'!E1362","v":" to prevent spoofing"},{"$f":"'Source Data'!F1362","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users to prevent spoofing"}]
[{"$f":"'Source Data'!A1363","v":"dgm.8"},{"$f":"'Source Data'!B1363","v":"t"},{"$f":"'Source Data'!C1363","v":0.87504800000000005},{"$f":"'Source Data'!D1363","v":"Supply Chain Vulnerabilities Used to Compromise DGM Equipment"},{"$f":"'Source Data'!E1363","v":0},{"$f":"'Source Data'!F1363","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Supply Chain Vulnerabilities Used to Compromise DGM Equipment0"}]
[{"$f":"'Source Data'!A1364","v":"dgm.8"},{"$f":"'Source Data'!B1364","v":"d"},{"$f":"'Source Data'!C1364","v":0.68314600000000003},{"$f":"'Source Data'!D1364","v":"Lifecycle attacks against equipment during development, production, shipping, and maintenance can introduce deliberate errors that will result in failure under special conditions. For example, a threat agent might upload modified firmware in a relay during production that introduces a back door for changing relay settings and set points. This could render the relay inoperable or cause it to operate unexpectedly."},{"$f":"'Source Data'!E1364","v":0},{"$f":"'Source Data'!F1364","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Lifecycle attacks against equipment during development, production, shipping, and maintenance can introduce deliberate errors that will result in failure under special conditions. For example, a threat agent might upload modified firmware in a relay during production that introduces a back door for changing relay settings and set points. This could render the relay inoperable or cause it to operate unexpectedly.0"}]
[{"$f":"'Source Data'!A1365","v":"dgm.8"},{"$f":"'Source Data'!B1365","v":"v"},{"$f":"'Source Data'!C1365","v":0.964808},{"$f":"'Source Data'!D1365","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1365","v":" during software/firmware development,"},{"$f":"'Source Data'!F1365","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes during software/firmware development,"}]
[{"$f":"'Source Data'!A1366","v":"dgm.8"},{"$f":"'Source Data'!B1366","v":"v"},{"$f":"'Source Data'!C1366","v":7.4787400000000002E-3},{"$f":"'Source Data'!D1366","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1366","v":" to software/firmware at suppliers of equipment, maintenance, and transportation,"},{"$f":"'Source Data'!F1366","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to software/firmware at suppliers of equipment, maintenance, and transportation,"}]
[{"$f":"'Source Data'!A1367","v":"dgm.8"},{"$f":"'Source Data'!B1367","v":"v"},{"$f":"'Source Data'!C1367","v":0.76108200000000004},{"$f":"'Source Data'!D1367","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1367","v":" to software/firmware by utility employees with access to modify field equipment."},{"$f":"'Source Data'!F1367","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes to software/firmware by utility employees with access to modify field equipment."}]
[{"$f":"'Source Data'!A1368","v":"dgm.8"},{"$f":"'Source Data'!B1368","v":"i"},{"$f":"'Source Data'!C1368","v":0.93409600000000004},{"$f":"'Source Data'!D1368","v":"Any ill effect, including the most severe, is possible using this mechanism"},{"$f":"'Source Data'!E1368","v":0},{"$f":"'Source Data'!F1368","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Any ill effect, including the most severe, is possible using this mechanism0"}]
[{"$f":"'Source Data'!A1369","v":"dgm.8"},{"$f":"'Source Data'!B1369","v":"m"},{"$f":"'Source Data'!C1369","v":0.91451800000000005},{"$f":"'Source Data'!D1369","v":"require spares"},{"$f":"'Source Data'!E1369","v":" for critical components"},{"$f":"'Source Data'!F1369","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require spares for critical components"}]
[{"$f":"'Source Data'!A1370","v":"dgm.8"},{"$f":"'Source Data'!B1370","v":"m"},{"$f":"'Source Data'!C1370","v":0.73170500000000005},{"$f":"'Source Data'!D1370","v":"implement configuration management"},{"$f":"'Source Data'!E1370","v":" for developers of equipment"},{"$f":"'Source Data'!F1370","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management for developers of equipment"}]
[{"$f":"'Source Data'!A1371","v":"dgm.8"},{"$f":"'Source Data'!B1371","v":"m"},{"$f":"'Source Data'!C1371","v":0.39005600000000001},{"$f":"'Source Data'!D1371","v":"verify personnel"},{"$f":"'Source Data'!E1371","v":" including developers of equipment, utility employees and contract maintenance personnel through thorough employee background checks"},{"$f":"'Source Data'!F1371","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify personnel including developers of equipment, utility employees and contract maintenance personnel through thorough employee background checks"}]
[{"$f":"'Source Data'!A1372","v":"dgm.8"},{"$f":"'Source Data'!B1372","v":"m"},{"$f":"'Source Data'!C1372","v":0.424516},{"$f":"'Source Data'!D1372","v":"conduct code review"},{"$f":"'Source Data'!E1372","v":" on DMS systems"},{"$f":"'Source Data'!F1372","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"conduct code review on DMS systems"}]
[{"$f":"'Source Data'!A1373","v":"dgm.8"},{"$f":"'Source Data'!B1373","v":"m"},{"$f":"'Source Data'!C1373","v":6.7232200000000006E-2},{"$f":"'Source Data'!D1373","v":"vulnerability scan before install"},{"$f":"'Source Data'!E1373","v":" of the code base"},{"$f":"'Source Data'!F1373","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"vulnerability scan before install of the code base"}]
[{"$f":"'Source Data'!A1374","v":"dgm.8"},{"$f":"'Source Data'!B1374","v":"m"},{"$f":"'Source Data'!C1374","v":0.77671000000000001},{"$f":"'Source Data'!D1374","v":"create audit logs"},{"$f":"'Source Data'!E1374","v":" of all code changes"},{"$f":"'Source Data'!F1374","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all code changes"}]
[{"$f":"'Source Data'!A1375","v":"dgm.8"},{"$f":"'Source Data'!B1375","v":"m"},{"$f":"'Source Data'!C1375","v":0.208088},{"$f":"'Source Data'!D1375","v":"design for trust"},{"$f":"'Source Data'!E1375","v":" by introducing the concept of devices of varying degrees of trust along with associated certifications for their associated supply chains"},{"$f":"'Source Data'!F1375","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design for trust by introducing the concept of devices of varying degrees of trust along with associated certifications for their associated supply chains"}]
[{"$f":"'Source Data'!A1376","v":"dgm.8"},{"$f":"'Source Data'!B1376","v":"m"},{"$f":"'Source Data'!C1376","v":0.110236},{"$f":"'Source Data'!D1376","v":"restrict access"},{"$f":"'Source Data'!E1376","v":" to software/firmware during development"},{"$f":"'Source Data'!F1376","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict access to software/firmware during development"}]
[{"$f":"'Source Data'!A1377","v":"dgm.8"},{"$f":"'Source Data'!B1377","v":"m"},{"$f":"'Source Data'!C1377","v":0.90417899999999995},{"$f":"'Source Data'!D1377","v":"confirm action"},{"$f":"'Source Data'!E1377","v":" taken by contract maintenance personnel that modifies equipment"},{"$f":"'Source Data'!F1377","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"confirm action taken by contract maintenance personnel that modifies equipment"}]
[{"$f":"'Source Data'!A1378","v":"dgm.8"},{"$f":"'Source Data'!B1378","v":"m"},{"$f":"'Source Data'!C1378","v":0.76752500000000001},{"$f":"'Source Data'!D1378","v":"enforce least privilege"},{"$f":"'Source Data'!E1378","v":" for utility employees for access to modify field equipment"},{"$f":"'Source Data'!F1378","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege for utility employees for access to modify field equipment"}]
[{"$f":"'Source Data'!A1379","v":"dgm.9"},{"$f":"'Source Data'!B1379","v":"t"},{"$f":"'Source Data'!C1379","v":0.188694},{"$f":"'Source Data'!D1379","v":"Weakened Security during Disaster enables DGM Compromise"},{"$f":"'Source Data'!E1379","v":0},{"$f":"'Source Data'!F1379","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Weakened Security during Disaster enables DGM Compromise0"}]
[{"$f":"'Source Data'!A1380","v":"dgm.9"},{"$f":"'Source Data'!B1380","v":"d"},{"$f":"'Source Data'!C1380","v":0.59372899999999995},{"$f":"'Source Data'!D1380","v":"A threat agent could take advantage of the confusion, lack of security, and hasty reconstitution of the distribution grid after a disaster. For example, a threat agent could delay the recovery effort by leveraging temporary communications with low security to access DMS to switch breakers. Likewise this objective could be achieved by subverting weak physical security at substations (due to damage or communication outages) to access engineering or console ports or relays to change settings and render them inoperable. Further, the interception of temporary communications with low security might support reconnaissance of high priority vulnerabilities to aid in future attacks."},{"$f":"'Source Data'!E1380","v":0},{"$f":"'Source Data'!F1380","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent could take advantage of the confusion, lack of security, and hasty reconstitution of the distribution grid after a disaster. For example, a threat agent could delay the recovery effort by leveraging temporary communications with low security to access DMS to switch breakers. Likewise this objective could be achieved by subverting weak physical security at substations (due to damage or communication outages) to access engineering or console ports or relays to change settings and render them inoperable. Further, the interception of temporary communications with low security might support reconnaissance of high priority vulnerabilities to aid in future attacks.0"}]
[{"$f":"'Source Data'!A1381","v":"dgm.9"},{"$f":"'Source Data'!B1381","v":"v"},{"$f":"'Source Data'!C1381","v":0.92010700000000001},{"$f":"'Source Data'!D1381","v":"emergency response policy, procedures, or execution intentionally disregards security controls to speed recovery"},{"$f":"'Source Data'!E1381","v":" "},{"$f":"'Source Data'!F1381","v":"Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"emergency response policy, procedures, or execution intentionally disregards security controls to speed recovery "}]
[{"$f":"'Source Data'!A1382","v":"dgm.9"},{"$f":"'Source Data'!B1382","v":"v"},{"$f":"'Source Data'!C1382","v":0.31973600000000002},{"$f":"'Source Data'!D1382","v":"emergency response procedures unintentionally omit security controls"},{"$f":"'Source Data'!E1382","v":" either in the procedures themselves or during their execution"},{"$f":"'Source Data'!F1382","v":"Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"emergency response procedures unintentionally omit security controls either in the procedures themselves or during their execution"}]
[{"$f":"'Source Data'!A1383","v":"dgm.9"},{"$f":"'Source Data'!B1383","v":"i"},{"$f":"'Source Data'!C1383","v":0.882239},{"$f":"'Source Data'!D1383","v":"Delay, damage, disruption, or denial of the recovery effort"},{"$f":"'Source Data'!E1383","v":0},{"$f":"'Source Data'!F1383","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Delay, damage, disruption, or denial of the recovery effort0"}]
[{"$f":"'Source Data'!A1384","v":"dgm.9"},{"$f":"'Source Data'!B1384","v":"i"},{"$f":"'Source Data'!C1384","v":0.67158399999999996},{"$f":"'Source Data'!D1384","v":"Damage, disruption, or destruction of a system or components long after the disaster recovery"},{"$f":"'Source Data'!E1384","v":0},{"$f":"'Source Data'!F1384","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Damage, disruption, or destruction of a system or components long after the disaster recovery0"}]
[{"$f":"'Source Data'!A1385","v":"dgm.9"},{"$f":"'Source Data'!B1385","v":"i"},{"$f":"'Source Data'!C1385","v":0.48661500000000002},{"$f":"'Source Data'!D1385","v":"Theft of historian, configuration, or customer information that could support future attacks"},{"$f":"'Source Data'!E1385","v":0},{"$f":"'Source Data'!F1385","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Theft of historian, configuration, or customer information that could support future attacks0"}]
[{"$f":"'Source Data'!A1386","v":"dgm.9"},{"$f":"'Source Data'!B1386","v":"m"},{"$f":"'Source Data'!C1386","v":0.46595900000000001},{"$f":"'Source Data'!D1386","v":"implement configuration management"},{"$f":"'Source Data'!E1386","v":" in the DGM before and after disasters"},{"$f":"'Source Data'!F1386","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management in the DGM before and after disasters"}]
[{"$f":"'Source Data'!A1387","v":"dgm.9"},{"$f":"'Source Data'!B1387","v":"m"},{"$f":"'Source Data'!C1387","v":0.50066900000000003},{"$f":"'Source Data'!D1387","v":"define policy"},{"$f":"'Source Data'!E1387","v":" for emergency response that ensures security during a recovery effort"},{"$f":"'Source Data'!F1387","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define policy for emergency response that ensures security during a recovery effort"}]
[{"$f":"'Source Data'!A1388","v":"dgm.9"},{"$f":"'Source Data'!B1388","v":"m"},{"$f":"'Source Data'!C1388","v":0.77044999999999997},{"$f":"'Source Data'!D1388","v":"prioritize recovery activities"},{"$f":"'Source Data'!E1388","v":" for physical security including personnel authentication and access control during the recovery effort"},{"$f":"'Source Data'!F1388","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"prioritize recovery activities for physical security including personnel authentication and access control during the recovery effort"}]
[{"$f":"'Source Data'!A1389","v":"dgm.9"},{"$f":"'Source Data'!B1389","v":"m"},{"$f":"'Source Data'!C1389","v":0.64186299999999996},{"$f":"'Source Data'!D1389","v":"review recovery response"},{"$f":"'Source Data'!E1389","v":" after the disaster to verify repairs, configurations, and changes are correct"},{"$f":"'Source Data'!F1389","v":"analyze"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"review recovery response after the disaster to verify repairs, configurations, and changes are correct"}]
[{"$f":"'Source Data'!A1390","v":"dgm.9"},{"$f":"'Source Data'!B1390","v":"m"},{"$f":"'Source Data'!C1390","v":0.77198800000000001},{"$f":"'Source Data'!D1390","v":"verify correct operation"},{"$f":"'Source Data'!E1390","v":" on the DGM systems before deployment"},{"$f":"'Source Data'!F1390","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify correct operation on the DGM systems before deployment"}]
[{"$f":"'Source Data'!A1391","v":"dgm.10"},{"$f":"'Source Data'!B1391","v":"t"},{"$f":"'Source Data'!C1391","v":0.122403},{"$f":"'Source Data'!D1391","v":"Switched Capacitor Banks are Manipulated to Degrade Power Quality"},{"$f":"'Source Data'!E1391","v":0},{"$f":"'Source Data'!F1391","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Switched Capacitor Banks are Manipulated to Degrade Power Quality0"}]
[{"$f":"'Source Data'!A1392","v":"dgm.10"},{"$f":"'Source Data'!B1392","v":"d"},{"$f":"'Source Data'!C1392","v":0.63384200000000002},{"$f":"'Source Data'!D1392","v":"Switched capacitor banks can create large switching transients when connected to a utility feeder, generating voltage spikes up to twice the rated voltage and can be exacerbated when two are switched on back-to-back. A threat agent social engineers DMS Human Machine Interface (HMI) passwords to gain control of switched capacitor bank relays to repeatedly switch capacitor banks on and off, generating cascading voltage spikes and instability to trip protection devices."},{"$f":"'Source Data'!E1392","v":0},{"$f":"'Source Data'!F1392","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Switched capacitor banks can create large switching transients when connected to a utility feeder, generating voltage spikes up to twice the rated voltage and can be exacerbated when two are switched on back-to-back. A threat agent social engineers DMS Human Machine Interface (HMI) passwords to gain control of switched capacitor bank relays to repeatedly switch capacitor banks on and off, generating cascading voltage spikes and instability to trip protection devices.0"}]
[{"$f":"'Source Data'!A1393","v":"dgm.10"},{"$f":"'Source Data'!B1393","v":"v"},{"$f":"'Source Data'!C1393","v":0.69525099999999995},{"$f":"'Source Data'!D1393","v":"workforce may be unaware of recommended precautions"},{"$f":"'Source Data'!E1393","v":" to block social engineering attacks, such as impersonating persons of authority, phishing and rogue USB devices,"},{"$f":"'Source Data'!F1393","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"workforce may be unaware of recommended precautions to block social engineering attacks, such as impersonating persons of authority, phishing and rogue USB devices,"}]
[{"$f":"'Source Data'!A1394","v":"dgm.10"},{"$f":"'Source Data'!B1394","v":"v"},{"$f":"'Source Data'!C1394","v":0.75493699999999997},{"$f":"'Source Data'!D1394","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1394","v":" to DMS,"},{"$f":"'Source Data'!F1394","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to DMS,"}]
[{"$f":"'Source Data'!A1395","v":"dgm.10"},{"$f":"'Source Data'!B1395","v":"v"},{"$f":"'Source Data'!C1395","v":0.228799},{"$f":"'Source Data'!D1395","v":"users and hardware/software entities are given access unnecessary for their roles"},{"$f":"'Source Data'!E1395","v":" to critical DMS functions,"},{"$f":"'Source Data'!F1395","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users and hardware/software entities are given access unnecessary for their roles to critical DMS functions,"}]
[{"$f":"'Source Data'!A1396","v":"dgm.10"},{"$f":"'Source Data'!B1396","v":"v"},{"$f":"'Source Data'!C1396","v":0.47257100000000002},{"$f":"'Source Data'!D1396","v":"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data"},{"$f":"'Source Data'!E1396","v":" in the DMS system."},{"$f":"'Source Data'!F1396","v":"Insufficient Identity Validation or Background Checks (6.2.2.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data in the DMS system."}]
[{"$f":"'Source Data'!A1397","v":"dgm.10"},{"$f":"'Source Data'!B1397","v":"i"},{"$f":"'Source Data'!C1397","v":0.59037700000000004},{"$f":"'Source Data'!D1397","v":"Repeated voltage spikes may damage customer or utility equipment"},{"$f":"'Source Data'!E1397","v":0},{"$f":"'Source Data'!F1397","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Repeated voltage spikes may damage customer or utility equipment0"}]
[{"$f":"'Source Data'!A1398","v":"dgm.10"},{"$f":"'Source Data'!B1398","v":"i"},{"$f":"'Source Data'!C1398","v":0.87845300000000004},{"$f":"'Source Data'!D1398","v":"Possible loss of customer power due to false operation of protective devices"},{"$f":"'Source Data'!E1398","v":0},{"$f":"'Source Data'!F1398","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible loss of customer power due to false operation of protective devices0"}]
[{"$f":"'Source Data'!A1399","v":"dgm.10"},{"$f":"'Source Data'!B1399","v":"m"},{"$f":"'Source Data'!C1399","v":0.12154},{"$f":"'Source Data'!D1399","v":"train personnel"},{"$f":"'Source Data'!E1399","v":" on the threat of social engineering attacks and perform social engineering exercises (such as company generated phishing emails or rogue USB drives) to engage employees"},{"$f":"'Source Data'!F1399","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel on the threat of social engineering attacks and perform social engineering exercises (such as company generated phishing emails or rogue USB drives) to engage employees"}]
[{"$f":"'Source Data'!A1400","v":"dgm.10"},{"$f":"'Source Data'!B1400","v":"m"},{"$f":"'Source Data'!C1400","v":0.46496700000000002},{"$f":"'Source Data'!D1400","v":"require synchronous functions"},{"$f":"'Source Data'!E1400","v":" for closing control, surge arrestors, or pre-insertion resistors to minimize capacitor bank switching transients"},{"$f":"'Source Data'!F1400","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require synchronous functions for closing control, surge arrestors, or pre-insertion resistors to minimize capacitor bank switching transients"}]
[{"$f":"'Source Data'!A1401","v":"dgm.10"},{"$f":"'Source Data'!B1401","v":"m"},{"$f":"'Source Data'!C1401","v":0.49670399999999998},{"$f":"'Source Data'!D1401","v":"restrict physical access"},{"$f":"'Source Data'!E1401","v":" to engineering consoles and HMIs"},{"$f":"'Source Data'!F1401","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access to engineering consoles and HMIs"}]
[{"$f":"'Source Data'!A1402","v":"dgm.10"},{"$f":"'Source Data'!B1402","v":"m"},{"$f":"'Source Data'!C1402","v":0.48347800000000002},{"$f":"'Source Data'!D1402","v":"require single sign-on"},{"$f":"'Source Data'!E1402","v":" practices"},{"$f":"'Source Data'!F1402","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require single sign-on practices"}]
[{"$f":"'Source Data'!A1403","v":"dgm.10"},{"$f":"'Source Data'!B1403","v":"m"},{"$f":"'Source Data'!C1403","v":0.46918599999999999},{"$f":"'Source Data'!D1403","v":"enforce least privilege"},{"$f":"'Source Data'!E1403","v":" for access to critical DMS functions"},{"$f":"'Source Data'!F1403","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce least privilege for access to critical DMS functions"}]
[{"$f":"'Source Data'!A1404","v":"dgm.10"},{"$f":"'Source Data'!B1404","v":"m"},{"$f":"'Source Data'!C1404","v":0.754251},{"$f":"'Source Data'!D1404","v":"verify personnel"},{"$f":"'Source Data'!E1404","v":" that have access to critical DMS functions"},{"$f":"'Source Data'!F1404","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify personnel that have access to critical DMS functions"}]
[{"$f":"'Source Data'!A1405","v":"dgm.11"},{"$f":"'Source Data'!B1405","v":"t"},{"$f":"'Source Data'!C1405","v":0.613313},{"$f":"'Source Data'!D1405","v":"Threat Agent Triggers Blackout via Remote Access to Distribution System"},{"$f":"'Source Data'!E1405","v":0},{"$f":"'Source Data'!F1405","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat Agent Triggers Blackout via Remote Access to Distribution System0"}]
[{"$f":"'Source Data'!A1406","v":"dgm.11"},{"$f":"'Source Data'!B1406","v":"d"},{"$f":"'Source Data'!C1406","v":0.281223},{"$f":"'Source Data'!D1406","v":"A threat agent performs reconnaissance of utility communications, electrical infrastructure, and ancillary systems to identify critical feeders and electrical equipment. Threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent manufactures an artificial cascade through sequential tripping of select critical feeders and components, causing automated tripping of generation sources due to power and voltage fluctuations. A blackout of varying degree and potential equipment damage ensues. The remote connections might be established using a variety of methods or combination of methods. These include, but are not limited to, using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly."},{"$f":"'Source Data'!E1406","v":0},{"$f":"'Source Data'!F1406","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent performs reconnaissance of utility communications, electrical infrastructure, and ancillary systems to identify critical feeders and electrical equipment. Threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent manufactures an artificial cascade through sequential tripping of select critical feeders and components, causing automated tripping of generation sources due to power and voltage fluctuations. A blackout of varying degree and potential equipment damage ensues. The remote connections might be established using a variety of methods or combination of methods. These include, but are not limited to, using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly.0"}]
[{"$f":"'Source Data'!A1407","v":"dgm.11"},{"$f":"'Source Data'!B1407","v":"v"},{"$f":"'Source Data'!C1407","v":0.69496800000000003},{"$f":"'Source Data'!D1407","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"},{"$f":"'Source Data'!E1407","v":" specifically linemen and maintenance personnel company laptops used for remote connections,"},{"$f":"'Source Data'!F1407","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals specifically linemen and maintenance personnel company laptops used for remote connections,"}]
[{"$f":"'Source Data'!A1408","v":"dgm.11"},{"$f":"'Source Data'!B1408","v":"v"},{"$f":"'Source Data'!C1408","v":0.87003900000000001},{"$f":"'Source Data'!D1408","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E1408","v":" to company computers,"},{"$f":"'Source Data'!F1408","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to company computers,"}]
[{"$f":"'Source Data'!A1409","v":"dgm.11"},{"$f":"'Source Data'!B1409","v":"v"},{"$f":"'Source Data'!C1409","v":0.48964099999999999},{"$f":"'Source Data'!D1409","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1409","v":" to proprietary utility documents and information,"},{"$f":"'Source Data'!F1409","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to proprietary utility documents and information,"}]
[{"$f":"'Source Data'!A1410","v":"dgm.11"},{"$f":"'Source Data'!B1410","v":"v"},{"$f":"'Source Data'!C1410","v":0.626475},{"$f":"'Source Data'!D1410","v":"configuration changes are not verified for correctness"},{"$f":"'Source Data'!E1410","v":" to prevent and detect human error in data center configuration (e.g., Ethernet cable plugged into wrong port),"},{"$f":"'Source Data'!F1410","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configuration changes are not verified for correctness to prevent and detect human error in data center configuration (e.g., Ethernet cable plugged into wrong port),"}]
[{"$f":"'Source Data'!A1411","v":"dgm.11"},{"$f":"'Source Data'!B1411","v":"v"},{"$f":"'Source Data'!C1411","v":1.8701099999999998E-2},{"$f":"'Source Data'!D1411","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1411","v":" by allowing remote access for vendors to do application maintenance and troubleshooting,"},{"$f":"'Source Data'!F1411","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes by allowing remote access for vendors to do application maintenance and troubleshooting,"}]
[{"$f":"'Source Data'!A1412","v":"dgm.11"},{"$f":"'Source Data'!B1412","v":"v"},{"$f":"'Source Data'!C1412","v":0.18412700000000001},{"$f":"'Source Data'!D1412","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E1412","v":" in the distribution control communication channel,"},{"$f":"'Source Data'!F1412","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals in the distribution control communication channel,"}]
[{"$f":"'Source Data'!A1413","v":"dgm.11"},{"$f":"'Source Data'!B1413","v":"v"},{"$f":"'Source Data'!C1413","v":0.50035399999999997},{"$f":"'Source Data'!D1413","v":"system design limits opportunity for system recovery using reconfiguration"},{"$f":"'Source Data'!E1413","v":" such as distribution networks that are more radial in nature than meshed, making network reconfiguration to restore power more difficult."},{"$f":"'Source Data'!F1413","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system design limits opportunity for system recovery using reconfiguration such as distribution networks that are more radial in nature than meshed, making network reconfiguration to restore power more difficult."}]
[{"$f":"'Source Data'!A1414","v":"dgm.11"},{"$f":"'Source Data'!B1414","v":"i"},{"$f":"'Source Data'!C1414","v":0.60604499999999994},{"$f":"'Source Data'!D1414","v":"Loss of customer power"},{"$f":"'Source Data'!E1414","v":0},{"$f":"'Source Data'!F1414","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of customer power0"}]
[{"$f":"'Source Data'!A1415","v":"dgm.11"},{"$f":"'Source Data'!B1415","v":"i"},{"$f":"'Source Data'!C1415","v":0.31348900000000002},{"$f":"'Source Data'!D1415","v":"Disclosure of proprietary utility documents or information"},{"$f":"'Source Data'!E1415","v":0},{"$f":"'Source Data'!F1415","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Disclosure of proprietary utility documents or information0"}]
[{"$f":"'Source Data'!A1416","v":"dgm.11"},{"$f":"'Source Data'!B1416","v":"i"},{"$f":"'Source Data'!C1416","v":0.49675900000000001},{"$f":"'Source Data'!D1416","v":"Possible customer and utility equipment damage"},{"$f":"'Source Data'!E1416","v":0},{"$f":"'Source Data'!F1416","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible customer and utility equipment damage0"}]
[{"$f":"'Source Data'!A1417","v":"dgm.11"},{"$f":"'Source Data'!B1417","v":"m"},{"$f":"'Source Data'!C1417","v":0.53239999999999998},{"$f":"'Source Data'!D1417","v":"require strong passwords"},{"$f":"'Source Data'!E1417","v":" for company devices and systems"},{"$f":"'Source Data'!F1417","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require strong passwords for company devices and systems"}]
[{"$f":"'Source Data'!A1418","v":"dgm.11"},{"$f":"'Source Data'!B1418","v":"m"},{"$f":"'Source Data'!C1418","v":0.77404799999999996},{"$f":"'Source Data'!D1418","v":"train personnel"},{"$f":"'Source Data'!E1418","v":" to protect company information and documents from unauthorized disclosure"},{"$f":"'Source Data'!F1418","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel to protect company information and documents from unauthorized disclosure"}]
[{"$f":"'Source Data'!A1419","v":"dgm.11"},{"$f":"'Source Data'!B1419","v":"m"},{"$f":"'Source Data'!C1419","v":0.81562299999999999},{"$f":"'Source Data'!D1419","v":"define policy"},{"$f":"'Source Data'!E1419","v":" on handling sensitive information. This includes substation one-line diagrams, equipment information, communication architectures, protection schemes, load profiles, etc."},{"$f":"'Source Data'!F1419","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define policy on handling sensitive information. This includes substation one-line diagrams, equipment information, communication architectures, protection schemes, load profiles, etc."}]
[{"$f":"'Source Data'!A1420","v":"dgm.11"},{"$f":"'Source Data'!B1420","v":"m"},{"$f":"'Source Data'!C1420","v":0.92548600000000003},{"$f":"'Source Data'!D1420","v":"train personnel"},{"$f":"'Source Data'!E1420","v":" (operations and maintenance employees) to handle and protect company computing devices securely, incorporating two-factor authentication, requirements on storing devices, and reporting instructions in cases of loss or theft"},{"$f":"'Source Data'!F1420","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel (operations and maintenance employees) to handle and protect company computing devices securely, incorporating two-factor authentication, requirements on storing devices, and reporting instructions in cases of loss or theft"}]
[{"$f":"'Source Data'!A1421","v":"dgm.11"},{"$f":"'Source Data'!B1421","v":"m"},{"$f":"'Source Data'!C1421","v":0.62690699999999999},{"$f":"'Source Data'!D1421","v":"create audit logs"},{"$f":"'Source Data'!E1421","v":" of all changes in HMI control actions"},{"$f":"'Source Data'!F1421","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all changes in HMI control actions"}]
[{"$f":"'Source Data'!A1422","v":"dgm.11"},{"$f":"'Source Data'!B1422","v":"m"},{"$f":"'Source Data'!C1422","v":0.325102},{"$f":"'Source Data'!D1422","v":"generate alerts"},{"$f":"'Source Data'!E1422","v":" for all changes in HMI control actions"},{"$f":"'Source Data'!F1422","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts for all changes in HMI control actions"}]
[{"$f":"'Source Data'!A1423","v":"dgm.11"},{"$f":"'Source Data'!B1423","v":"m"},{"$f":"'Source Data'!C1423","v":0.43379200000000001},{"$f":"'Source Data'!D1423","v":"restrict remote access"},{"$f":"'Source Data'!E1423","v":" of remote vendor connections (e.g., physically disconnect remote connections when not in use)"},{"$f":"'Source Data'!F1423","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access of remote vendor connections (e.g., physically disconnect remote connections when not in use)"}]
[{"$f":"'Source Data'!A1424","v":"dgm.11"},{"$f":"'Source Data'!B1424","v":"m"},{"$f":"'Source Data'!C1424","v":0.15307599999999999},{"$f":"'Source Data'!D1424","v":"encrypt communication paths"},{"$f":"'Source Data'!E1424","v":" for distribution control communications"},{"$f":"'Source Data'!F1424","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths for distribution control communications"}]
[{"$f":"'Source Data'!A1425","v":"dgm.11"},{"$f":"'Source Data'!B1425","v":"m"},{"$f":"'Source Data'!C1425","v":0.92910300000000001},{"$f":"'Source Data'!D1425","v":"require two-person rule"},{"$f":"'Source Data'!E1425","v":" for correct DMS configuration"},{"$f":"'Source Data'!F1425","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require two-person rule for correct DMS configuration"}]
[{"$f":"'Source Data'!A1426","v":"dgm.11"},{"$f":"'Source Data'!B1426","v":"m"},{"$f":"'Source Data'!C1426","v":0.32686999999999999},{"$f":"'Source Data'!D1426","v":"implement configuration management"},{"$f":"'Source Data'!E1426","v":" for configuration documents"},{"$f":"'Source Data'!F1426","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management for configuration documents"}]
[{"$f":"'Source Data'!A1427","v":"dgm.11"},{"$f":"'Source Data'!B1427","v":"m"},{"$f":"'Source Data'!C1427","v":0.44263000000000002},{"$f":"'Source Data'!D1427","v":"isolate networks"},{"$f":"'Source Data'!E1427","v":" (distribution control networks) by segmenting the distribution control network itself"},{"$f":"'Source Data'!F1427","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate networks (distribution control networks) by segmenting the distribution control network itself"}]
[{"$f":"'Source Data'!A1428","v":"dgm.11"},{"$f":"'Source Data'!B1428","v":"m"},{"$f":"'Source Data'!C1428","v":0.942936},{"$f":"'Source Data'!D1428","v":"confirm action"},{"$f":"'Source Data'!E1428","v":" to modify data center physical configuration"},{"$f":"'Source Data'!F1428","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"confirm action to modify data center physical configuration"}]
[{"$f":"'Source Data'!A1429","v":"dgm.12"},{"$f":"'Source Data'!B1429","v":"t"},{"$f":"'Source Data'!C1429","v":0.62339599999999995},{"$f":"'Source Data'!D1429","v":"Hijacked Substation Wireless Damages Substation Equipment"},{"$f":"'Source Data'!E1429","v":0},{"$f":"'Source Data'!F1429","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Hijacked Substation Wireless Damages Substation Equipment0"}]
[{"$f":"'Source Data'!A1430","v":"dgm.12"},{"$f":"'Source Data'!B1430","v":"d"},{"$f":"'Source Data'!C1430","v":0.97988600000000003},{"$f":"'Source Data'!D1430","v":"A threat agent carries out a man in the middle attack, hijacking the wireless communications channel to a substation transformer. The threat agent uses this capability to disable transformer cooling fans and overheat the device. Depending on the transformer and its controller, this could be done through a direct command or by drastically increasing oil temperature setpoints. Many transformers are also custom built and have long lead times for replacement or repair."},{"$f":"'Source Data'!E1430","v":0},{"$f":"'Source Data'!F1430","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent carries out a man in the middle attack, hijacking the wireless communications channel to a substation transformer. The threat agent uses this capability to disable transformer cooling fans and overheat the device. Depending on the transformer and its controller, this could be done through a direct command or by drastically increasing oil temperature setpoints. Many transformers are also custom built and have long lead times for replacement or repair.0"}]
[{"$f":"'Source Data'!A1431","v":"dgm.12"},{"$f":"'Source Data'!B1431","v":"v"},{"$f":"'Source Data'!C1431","v":0.85493300000000005},{"$f":"'Source Data'!D1431","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E1431","v":" between the transformer and the substation controller,"},{"$f":"'Source Data'!F1431","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access between the transformer and the substation controller,"}]
[{"$f":"'Source Data'!A1432","v":"dgm.12"},{"$f":"'Source Data'!B1432","v":"v"},{"$f":"'Source Data'!C1432","v":0.53808},{"$f":"'Source Data'!D1432","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E1432","v":" in the wireless communication channel,"},{"$f":"'Source Data'!F1432","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals in the wireless communication channel,"}]
[{"$f":"'Source Data'!A1433","v":"dgm.12"},{"$f":"'Source Data'!B1433","v":"v"},{"$f":"'Source Data'!C1433","v":0.502888},{"$f":"'Source Data'!D1433","v":"emergency situations may not have the appropriate replacement equipment, some of which require long lead times for repair or replacement"},{"$f":"'Source Data'!E1433","v":" (custom built transformers)."},{"$f":"'Source Data'!F1433","v":"Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"emergency situations may not have the appropriate replacement equipment, some of which require long lead times for repair or replacement (custom built transformers)."}]
[{"$f":"'Source Data'!A1434","v":"dgm.12"},{"$f":"'Source Data'!B1434","v":"i"},{"$f":"'Source Data'!C1434","v":0.51036700000000002},{"$f":"'Source Data'!D1434","v":"Loss of customer power"},{"$f":"'Source Data'!E1434","v":0},{"$f":"'Source Data'!F1434","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of customer power0"}]
[{"$f":"'Source Data'!A1435","v":"dgm.12"},{"$f":"'Source Data'!B1435","v":"i"},{"$f":"'Source Data'!C1435","v":0.27144800000000002},{"$f":"'Source Data'!D1435","v":"Damage to critical substation equipment"},{"$f":"'Source Data'!E1435","v":0},{"$f":"'Source Data'!F1435","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Damage to critical substation equipment0"}]
[{"$f":"'Source Data'!A1436","v":"dgm.12"},{"$f":"'Source Data'!B1436","v":"i"},{"$f":"'Source Data'!C1436","v":0.205544},{"$f":"'Source Data'!D1436","v":"Monetary loss"},{"$f":"'Source Data'!E1436","v":0},{"$f":"'Source Data'!F1436","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Monetary loss0"}]
[{"$f":"'Source Data'!A1437","v":"dgm.12"},{"$f":"'Source Data'!B1437","v":"m"},{"$f":"'Source Data'!C1437","v":0.120062},{"$f":"'Source Data'!D1437","v":"authenticate users"},{"$f":"'Source Data'!E1437","v":" of wireless communications"},{"$f":"'Source Data'!F1437","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users of wireless communications"}]
[{"$f":"'Source Data'!A1438","v":"dgm.12"},{"$f":"'Source Data'!B1438","v":"m"},{"$f":"'Source Data'!C1438","v":0.85176700000000005},{"$f":"'Source Data'!D1438","v":"encrypt communication paths"},{"$f":"'Source Data'!E1438","v":" for wireless communications"},{"$f":"'Source Data'!F1438","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths for wireless communications"}]
[{"$f":"'Source Data'!A1439","v":"dgm.12"},{"$f":"'Source Data'!B1439","v":"m"},{"$f":"'Source Data'!C1439","v":0.24182400000000001},{"$f":"'Source Data'!D1439","v":"design for trust"},{"$f":"'Source Data'!E1439","v":" by replacing wireless communications with wired ones"},{"$f":"'Source Data'!F1439","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design for trust by replacing wireless communications with wired ones"}]
[{"$f":"'Source Data'!A1440","v":"dgm.12"},{"$f":"'Source Data'!B1440","v":"m"},{"$f":"'Source Data'!C1440","v":0.66634000000000004},{"$f":"'Source Data'!D1440","v":"create audit logs"},{"$f":"'Source Data'!E1440","v":" of all changes in control functions and set points"},{"$f":"'Source Data'!F1440","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all changes in control functions and set points"}]
[{"$f":"'Source Data'!A1441","v":"dgm.12"},{"$f":"'Source Data'!B1441","v":"m"},{"$f":"'Source Data'!C1441","v":0.733572},{"$f":"'Source Data'!D1441","v":"generate alerts"},{"$f":"'Source Data'!E1441","v":" for unusual changes in control functions and set points"},{"$f":"'Source Data'!F1441","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts for unusual changes in control functions and set points"}]
[{"$f":"'Source Data'!A1442","v":"dgm.13"},{"$f":"'Source Data'!B1442","v":"t"},{"$f":"'Source Data'!C1442","v":0.51028200000000001},{"$f":"'Source Data'!D1442","v":"Poor Account Management Compromises DMS and Causes Power Loss"},{"$f":"'Source Data'!E1442","v":0},{"$f":"'Source Data'!F1442","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Poor Account Management Compromises DMS and Causes Power Loss0"}]
[{"$f":"'Source Data'!A1443","v":"dgm.13"},{"$f":"'Source Data'!B1443","v":"d"},{"$f":"'Source Data'!C1443","v":0.71836999999999995},{"$f":"'Source Data'!D1443","v":"After a maintenance employee retires, computer services personnel forgot to deactivate the employees account on the DMS network. A week later, a threat agent uses the employee's credentials to access the DMS network. The threat agent alters DMS switching schedules so that automated and manual switching actions trip the wrong lines after a fault or before maintenance to cause power interruptions for critical loads, such as hospitals or prisons."},{"$f":"'Source Data'!E1443","v":0},{"$f":"'Source Data'!F1443","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"After a maintenance employee retires, computer services personnel forgot to deactivate the employees account on the DMS network. A week later, a threat agent uses the employee's credentials to access the DMS network. The threat agent alters DMS switching schedules so that automated and manual switching actions trip the wrong lines after a fault or before maintenance to cause power interruptions for critical loads, such as hospitals or prisons.0"}]
[{"$f":"'Source Data'!A1444","v":"dgm.13"},{"$f":"'Source Data'!B1444","v":"v"},{"$f":"'Source Data'!C1444","v":0.90706500000000001},{"$f":"'Source Data'!D1444","v":"workforce not trained in proper procedures"},{"$f":"'Source Data'!E1444","v":" to check for human error in account management"},{"$f":"'Source Data'!F1444","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"workforce not trained in proper procedures to check for human error in account management"}]
[{"$f":"'Source Data'!A1445","v":"dgm.13"},{"$f":"'Source Data'!B1445","v":"v"},{"$f":"'Source Data'!C1445","v":0.50079300000000004},{"$f":"'Source Data'!D1445","v":"adherence to policies and procedures degrades over time"},{"$f":"'Source Data'!E1445","v":" introducing human error in account management"},{"$f":"'Source Data'!F1445","v":"Inadequate Periodic Security Audits (6.2.3.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"adherence to policies and procedures degrades over time introducing human error in account management"}]
[{"$f":"'Source Data'!A1446","v":"dgm.13"},{"$f":"'Source Data'!B1446","v":"v"},{"$f":"'Source Data'!C1446","v":0.4209},{"$f":"'Source Data'!D1446","v":"human error in adherence to policies and procedures"},{"$f":"'Source Data'!E1446","v":" to check for human error in account management"},{"$f":"'Source Data'!F1446","v":"Inadequate Periodic Security Audits (6.2.3.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"human error in adherence to policies and procedures to check for human error in account management"}]
[{"$f":"'Source Data'!A1447","v":"dgm.13"},{"$f":"'Source Data'!B1447","v":"i"},{"$f":"'Source Data'!C1447","v":0.74063599999999996},{"$f":"'Source Data'!D1447","v":"Loss of critical customer power"},{"$f":"'Source Data'!E1447","v":0},{"$f":"'Source Data'!F1447","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of critical customer power0"}]
[{"$f":"'Source Data'!A1448","v":"dgm.13"},{"$f":"'Source Data'!B1448","v":"i"},{"$f":"'Source Data'!C1448","v":0.62287400000000004},{"$f":"'Source Data'!D1448","v":"Possible loss of human lives"},{"$f":"'Source Data'!E1448","v":0},{"$f":"'Source Data'!F1448","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible loss of human lives0"}]
[{"$f":"'Source Data'!A1449","v":"dgm.13"},{"$f":"'Source Data'!B1449","v":"i"},{"$f":"'Source Data'!C1449","v":0.294458},{"$f":"'Source Data'!D1449","v":"Negative publicity"},{"$f":"'Source Data'!E1449","v":0},{"$f":"'Source Data'!F1449","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Negative publicity0"}]
[{"$f":"'Source Data'!A1450","v":"dgm.13"},{"$f":"'Source Data'!B1450","v":"m"},{"$f":"'Source Data'!C1450","v":0.78107300000000002},{"$f":"'Source Data'!D1450","v":"require credential revocation"},{"$f":"'Source Data'!E1450","v":" in a timely manner for passwords of former employees"},{"$f":"'Source Data'!F1450","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require credential revocation in a timely manner for passwords of former employees"}]
[{"$f":"'Source Data'!A1451","v":"dgm.13"},{"$f":"'Source Data'!B1451","v":"m"},{"$f":"'Source Data'!C1451","v":0.247033},{"$f":"'Source Data'!D1451","v":"generate alarms"},{"$f":"'Source Data'!E1451","v":" for loss of power to ensure timely restoration of power"},{"$f":"'Source Data'!F1451","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alarms for loss of power to ensure timely restoration of power"}]
[{"$f":"'Source Data'!A1452","v":"dgm.13"},{"$f":"'Source Data'!B1452","v":"m"},{"$f":"'Source Data'!C1452","v":0.92640699999999998},{"$f":"'Source Data'!D1452","v":"perform audit"},{"$f":"'Source Data'!E1452","v":" of live accounts periodically to verify and encourage adherence to procedures"},{"$f":"'Source Data'!F1452","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"perform audit of live accounts periodically to verify and encourage adherence to procedures"}]
[{"$f":"'Source Data'!A1453","v":"dgm.14"},{"$f":"'Source Data'!B1453","v":"t"},{"$f":"'Source Data'!C1453","v":0.74770099999999995},{"$f":"'Source Data'!D1453","v":"Power loss due to lack of serial communication authentication"},{"$f":"'Source Data'!E1453","v":0},{"$f":"'Source Data'!F1453","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Power loss due to lack of serial communication authentication0"}]
[{"$f":"'Source Data'!A1454","v":"dgm.14"},{"$f":"'Source Data'!B1454","v":"d"},{"$f":"'Source Data'!C1454","v":0.51815199999999995},{"$f":"'Source Data'!D1454","v":"Serial communications to substations over phone lines often lack authentication of field devices, such as RTUs.┬áThis might allow a threat agent to directly dial into modems attached to RTU equipment by war dialing city phone numbers or company phone extensions. Such techniques could allow a threat agent to send breaker trip commands to substation relays and disconnect feeders."},{"$f":"'Source Data'!E1454","v":0},{"$f":"'Source Data'!F1454","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Serial communications to substations over phone lines often lack authentication of field devices, such as RTUs.┬áThis might allow a threat agent to directly dial into modems attached to RTU equipment by war dialing city phone numbers or company phone extensions. Such techniques could allow a threat agent to send breaker trip commands to substation relays and disconnect feeders.0"}]
[{"$f":"'Source Data'!A1455","v":"dgm.14"},{"$f":"'Source Data'!B1455","v":"v"},{"$f":"'Source Data'!C1455","v":0.16001499999999999},{"$f":"'Source Data'!D1455","v":"physical access to a serial port may enable logical access by unauthorized entities"},{"$f":"'Source Data'!E1455","v":" to communications at substations,"},{"$f":"'Source Data'!F1455","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access to a serial port may enable logical access by unauthorized entities to communications at substations,"}]
[{"$f":"'Source Data'!A1456","v":"dgm.14"},{"$f":"'Source Data'!B1456","v":"v"},{"$f":"'Source Data'!C1456","v":0.93200300000000003},{"$f":"'Source Data'!D1456","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E1456","v":" to substation relays and RTU (e.g., no passwords or default passwords),"},{"$f":"'Source Data'!F1456","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to substation relays and RTU (e.g., no passwords or default passwords),"}]
[{"$f":"'Source Data'!A1457","v":"dgm.14"},{"$f":"'Source Data'!B1457","v":"v"},{"$f":"'Source Data'!C1457","v":5.4406099999999999E-2},{"$f":"'Source Data'!D1457","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Source Data'!E1457","v":" "},{"$f":"'Source Data'!F1457","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"publicly accessible and/or third party controlled links used "}]
[{"$f":"'Source Data'!A1458","v":"dgm.14"},{"$f":"'Source Data'!B1458","v":"v"},{"$f":"'Source Data'!C1458","v":0.68824799999999997},{"$f":"'Source Data'!D1458","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E1458","v":" using public communications channels without encryption."},{"$f":"'Source Data'!F1458","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals using public communications channels without encryption."}]
[{"$f":"'Source Data'!A1459","v":"dgm.14"},{"$f":"'Source Data'!B1459","v":"i"},{"$f":"'Source Data'!C1459","v":0.38349899999999998},{"$f":"'Source Data'!D1459","v":"Loss of customer power"},{"$f":"'Source Data'!E1459","v":0},{"$f":"'Source Data'!F1459","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of customer power0"}]
[{"$f":"'Source Data'!A1460","v":"dgm.14"},{"$f":"'Source Data'!B1460","v":"i"},{"$f":"'Source Data'!C1460","v":0.138436},{"$f":"'Source Data'!D1460","v":"Monetary loss"},{"$f":"'Source Data'!E1460","v":0},{"$f":"'Source Data'!F1460","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Monetary loss0"}]
[{"$f":"'Source Data'!A1461","v":"dgm.14"},{"$f":"'Source Data'!B1461","v":"i"},{"$f":"'Source Data'!C1461","v":0.36723499999999998},{"$f":"'Source Data'!D1461","v":"Negative publicity"},{"$f":"'Source Data'!E1461","v":0},{"$f":"'Source Data'!F1461","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Negative publicity0"}]
[{"$f":"'Source Data'!A1462","v":"dgm.14"},{"$f":"'Source Data'!B1462","v":"m"},{"$f":"'Source Data'!C1462","v":0.83980600000000005},{"$f":"'Source Data'!D1462","v":"authenticate users"},{"$f":"'Source Data'!E1462","v":" of serial communications using strong passwords"},{"$f":"'Source Data'!F1462","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"authenticate users of serial communications using strong passwords"}]
[{"$f":"'Source Data'!A1463","v":"dgm.14"},{"$f":"'Source Data'!B1463","v":"m"},{"$f":"'Source Data'!C1463","v":0.43018299999999998},{"$f":"'Source Data'!D1463","v":"encrypt communication paths"},{"$f":"'Source Data'!E1463","v":" for serial communications using low latency encryption devices"},{"$f":"'Source Data'!F1463","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths for serial communications using low latency encryption devices"}]
[{"$f":"'Source Data'!A1464","v":"dgm.14"},{"$f":"'Source Data'!B1464","v":"m"},{"$f":"'Source Data'!C1464","v":0.30863600000000002},{"$f":"'Source Data'!D1464","v":"design for trust"},{"$f":"'Source Data'!E1464","v":" and migrate serial communications to field devices from public phone lines to private communication channels"},{"$f":"'Source Data'!F1464","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"design for trust and migrate serial communications to field devices from public phone lines to private communication channels"}]
[{"$f":"'Source Data'!A1465","v":"dgm.15"},{"$f":"'Source Data'!B1465","v":"t"},{"$f":"'Source Data'!C1465","v":0.430176},{"$f":"'Source Data'!D1465","v":"Threat Agent Causes Worker Electrocution via Remote Access to Distribution System"},{"$f":"'Source Data'!E1465","v":0},{"$f":"'Source Data'!F1465","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat Agent Causes Worker Electrocution via Remote Access to Distribution System0"}]
[{"$f":"'Source Data'!A1466","v":"dgm.15"},{"$f":"'Source Data'!B1466","v":"d"},{"$f":"'Source Data'!C1466","v":0.89514300000000002},{"$f":"'Source Data'!D1466","v":"A threat agent performs reconnaissance of utility maintenance operations to identify current or scheduled maintenance on distribution lines and equipment performed by utility linemen. The threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent energizes distribution lines or equipment that are under maintenance by linemen to elicit injury or death by electrocution. The remote connections might be established using a variety of methods or combination of methods. These include but are not limited to: using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly."},{"$f":"'Source Data'!E1466","v":0},{"$f":"'Source Data'!F1466","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent performs reconnaissance of utility maintenance operations to identify current or scheduled maintenance on distribution lines and equipment performed by utility linemen. The threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent energizes distribution lines or equipment that are under maintenance by linemen to elicit injury or death by electrocution. The remote connections might be established using a variety of methods or combination of methods. These include but are not limited to: using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly.0"}]
[{"$f":"'Source Data'!A1467","v":"dgm.15"},{"$f":"'Source Data'!B1467","v":"v"},{"$f":"'Source Data'!C1467","v":0.391847},{"$f":"'Source Data'!D1467","v":"critical operations are not locked out during maintenance"},{"$f":"'Source Data'!E1467","v":" (automation system actions),"},{"$f":"'Source Data'!F1467","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"critical operations are not locked out during maintenance (automation system actions),"}]
[{"$f":"'Source Data'!A1468","v":"dgm.15"},{"$f":"'Source Data'!B1468","v":"v"},{"$f":"'Source Data'!C1468","v":0.87532500000000002},{"$f":"'Source Data'!D1468","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"},{"$f":"'Source Data'!E1468","v":" for linemen and maintenance personnel company laptops used for remote connections,"},{"$f":"'Source Data'!F1468","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals for linemen and maintenance personnel company laptops used for remote connections,"}]
[{"$f":"'Source Data'!A1469","v":"dgm.15"},{"$f":"'Source Data'!B1469","v":"v"},{"$f":"'Source Data'!C1469","v":0.48863800000000002},{"$f":"'Source Data'!D1469","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E1469","v":" to company computers,"},{"$f":"'Source Data'!F1469","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to company computers,"}]
[{"$f":"'Source Data'!A1470","v":"dgm.15"},{"$f":"'Source Data'!B1470","v":"v"},{"$f":"'Source Data'!C1470","v":0.46482899999999999},{"$f":"'Source Data'!D1470","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1470","v":" to proprietary utility documents and information,"},{"$f":"'Source Data'!F1470","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to proprietary utility documents and information,"}]
[{"$f":"'Source Data'!A1471","v":"dgm.15"},{"$f":"'Source Data'!B1471","v":"v"},{"$f":"'Source Data'!C1471","v":0.334868},{"$f":"'Source Data'!D1471","v":"configuration changes are not verified for correctness"},{"$f":"'Source Data'!E1471","v":" to prevent and detect human error in data center configuration (e.g., Ethernet cable plugged into wrong port),"},{"$f":"'Source Data'!F1471","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configuration changes are not verified for correctness to prevent and detect human error in data center configuration (e.g., Ethernet cable plugged into wrong port),"}]
[{"$f":"'Source Data'!A1472","v":"dgm.15"},{"$f":"'Source Data'!B1472","v":"v"},{"$f":"'Source Data'!C1472","v":0.73067700000000002},{"$f":"'Source Data'!D1472","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1472","v":" by allowing remote access for vendors to do application maintenance and troubleshooting,"},{"$f":"'Source Data'!F1472","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes by allowing remote access for vendors to do application maintenance and troubleshooting,"}]
[{"$f":"'Source Data'!A1473","v":"dgm.15"},{"$f":"'Source Data'!B1473","v":"v"},{"$f":"'Source Data'!C1473","v":0.22031800000000001},{"$f":"'Source Data'!D1473","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E1473","v":" in distribution control communications,"},{"$f":"'Source Data'!F1473","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals in distribution control communications,"}]
[{"$f":"'Source Data'!A1474","v":"dgm.15"},{"$f":"'Source Data'!B1474","v":"v"},{"$f":"'Source Data'!C1474","v":0.84679300000000002},{"$f":"'Source Data'!D1474","v":"system design limits opportunity for system recovery using reconfiguration"},{"$f":"'Source Data'!E1474","v":" such as distribution networks that are more radial in nature than meshed, making network reconfiguration to restore power more difficult."},{"$f":"'Source Data'!F1474","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system design limits opportunity for system recovery using reconfiguration such as distribution networks that are more radial in nature than meshed, making network reconfiguration to restore power more difficult."}]
[{"$f":"'Source Data'!A1475","v":"dgm.15"},{"$f":"'Source Data'!B1475","v":"i"},{"$f":"'Source Data'!C1475","v":0.86549399999999999},{"$f":"'Source Data'!D1475","v":"Maintenance personnel injury or death"},{"$f":"'Source Data'!E1475","v":0},{"$f":"'Source Data'!F1475","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Maintenance personnel injury or death0"}]
[{"$f":"'Source Data'!A1476","v":"dgm.15"},{"$f":"'Source Data'!B1476","v":"i"},{"$f":"'Source Data'!C1476","v":4.9620600000000001E-2},{"$f":"'Source Data'!D1476","v":"Damage to company reputation"},{"$f":"'Source Data'!E1476","v":0},{"$f":"'Source Data'!F1476","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Damage to company reputation0"}]
[{"$f":"'Source Data'!A1477","v":"dgm.15"},{"$f":"'Source Data'!B1477","v":"i"},{"$f":"'Source Data'!C1477","v":0.54997499999999999},{"$f":"'Source Data'!D1477","v":"Financial loss"},{"$f":"'Source Data'!E1477","v":0},{"$f":"'Source Data'!F1477","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Financial loss0"}]
[{"$f":"'Source Data'!A1478","v":"dgm.15"},{"$f":"'Source Data'!B1478","v":"i"},{"$f":"'Source Data'!C1478","v":0.15601899999999999},{"$f":"'Source Data'!D1478","v":"Possible customer and utility equipment damage"},{"$f":"'Source Data'!E1478","v":0},{"$f":"'Source Data'!F1478","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Possible customer and utility equipment damage0"}]
[{"$f":"'Source Data'!A1479","v":"dgm.15"},{"$f":"'Source Data'!B1479","v":"m"},{"$f":"'Source Data'!C1479","v":0.46950799999999998},{"$f":"'Source Data'!D1479","v":"define procedures"},{"$f":"'Source Data'!E1479","v":" that will disallow remote DMS control actions on lines and equipment that are under maintenance"},{"$f":"'Source Data'!F1479","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define procedures that will disallow remote DMS control actions on lines and equipment that are under maintenance"}]
[{"$f":"'Source Data'!A1480","v":"dgm.15"},{"$f":"'Source Data'!B1480","v":"m"},{"$f":"'Source Data'!C1480","v":0.96626699999999999},{"$f":"'Source Data'!D1480","v":"require strong passwords"},{"$f":"'Source Data'!E1480","v":" with complexity requirements on company devices and systems"},{"$f":"'Source Data'!F1480","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require strong passwords with complexity requirements on company devices and systems"}]
[{"$f":"'Source Data'!A1481","v":"dgm.15"},{"$f":"'Source Data'!B1481","v":"m"},{"$f":"'Source Data'!C1481","v":0.498668},{"$f":"'Source Data'!D1481","v":"train personnel"},{"$f":"'Source Data'!E1481","v":" to protect company information and documents from unauthorized disclosure"},{"$f":"'Source Data'!F1481","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel to protect company information and documents from unauthorized disclosure"}]
[{"$f":"'Source Data'!A1482","v":"dgm.15"},{"$f":"'Source Data'!B1482","v":"m"},{"$f":"'Source Data'!C1482","v":0.27271600000000001},{"$f":"'Source Data'!D1482","v":"define policy"},{"$f":"'Source Data'!E1482","v":" on handling sensitive information. This includes one-lines, equipment information, communication architectures, protection schemes, load profiles, etc."},{"$f":"'Source Data'!F1482","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define policy on handling sensitive information. This includes one-lines, equipment information, communication architectures, protection schemes, load profiles, etc."}]
[{"$f":"'Source Data'!A1483","v":"dgm.15"},{"$f":"'Source Data'!B1483","v":"m"},{"$f":"'Source Data'!C1483","v":8.8338899999999998E-2},{"$f":"'Source Data'!D1483","v":"train personnel"},{"$f":"'Source Data'!E1483","v":" (operations and maintenance employees) to handle and protect company computing devices securely, incorporating two-factor authentication, requirements on storing devices, and reporting instructions in cases of loss or theft"},{"$f":"'Source Data'!F1483","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel (operations and maintenance employees) to handle and protect company computing devices securely, incorporating two-factor authentication, requirements on storing devices, and reporting instructions in cases of loss or theft"}]
[{"$f":"'Source Data'!A1484","v":"dgm.15"},{"$f":"'Source Data'!B1484","v":"m"},{"$f":"'Source Data'!C1484","v":1.38253E-2},{"$f":"'Source Data'!D1484","v":"create audit logs"},{"$f":"'Source Data'!E1484","v":" of all changes in HMI control actions"},{"$f":"'Source Data'!F1484","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"create audit logs of all changes in HMI control actions"}]
[{"$f":"'Source Data'!A1485","v":"dgm.15"},{"$f":"'Source Data'!B1485","v":"m"},{"$f":"'Source Data'!C1485","v":0.64073199999999997},{"$f":"'Source Data'!D1485","v":"generate alerts"},{"$f":"'Source Data'!E1485","v":" for all changes in HMI control actions"},{"$f":"'Source Data'!F1485","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts for all changes in HMI control actions"}]
[{"$f":"'Source Data'!A1486","v":"dgm.15"},{"$f":"'Source Data'!B1486","v":"m"},{"$f":"'Source Data'!C1486","v":0.96583399999999997},{"$f":"'Source Data'!D1486","v":"restrict remote access"},{"$f":"'Source Data'!E1486","v":" of remote vendor connections (e.g., physically disconnect remote connections when not in use)"},{"$f":"'Source Data'!F1486","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict remote access of remote vendor connections (e.g., physically disconnect remote connections when not in use)"}]
[{"$f":"'Source Data'!A1487","v":"dgm.15"},{"$f":"'Source Data'!B1487","v":"m"},{"$f":"'Source Data'!C1487","v":0.39962700000000001},{"$f":"'Source Data'!D1487","v":"encrypt communication paths"},{"$f":"'Source Data'!E1487","v":" for distribution control communications"},{"$f":"'Source Data'!F1487","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths for distribution control communications"}]
[{"$f":"'Source Data'!A1488","v":"dgm.15"},{"$f":"'Source Data'!B1488","v":"m"},{"$f":"'Source Data'!C1488","v":0.55270300000000006},{"$f":"'Source Data'!D1488","v":"require two-person rule"},{"$f":"'Source Data'!E1488","v":" to verify DMS configuration"},{"$f":"'Source Data'!F1488","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require two-person rule to verify DMS configuration"}]
[{"$f":"'Source Data'!A1489","v":"dgm.15"},{"$f":"'Source Data'!B1489","v":"m"},{"$f":"'Source Data'!C1489","v":0.48180600000000001},{"$f":"'Source Data'!D1489","v":"implement configuration management"},{"$f":"'Source Data'!E1489","v":" of DMS configuration documents"},{"$f":"'Source Data'!F1489","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"implement configuration management of DMS configuration documents"}]
[{"$f":"'Source Data'!A1490","v":"dgm.15"},{"$f":"'Source Data'!B1490","v":"m"},{"$f":"'Source Data'!C1490","v":0.80867699999999998},{"$f":"'Source Data'!D1490","v":"isolate networks"},{"$f":"'Source Data'!E1490","v":" (distribution control networks) by segmenting the distribution control network itself"},{"$f":"'Source Data'!F1490","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate networks (distribution control networks) by segmenting the distribution control network itself"}]
[{"$f":"'Source Data'!A1491","v":"dgm.15"},{"$f":"'Source Data'!B1491","v":"m"},{"$f":"'Source Data'!C1491","v":0.34793400000000002},{"$f":"'Source Data'!D1491","v":"confirm action"},{"$f":"'Source Data'!E1491","v":" to modify the data center physical configuration"},{"$f":"'Source Data'!F1491","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"confirm action to modify the data center physical configuration"}]
[{"$f":"'Source Data'!A1492","v":"dgm.16"},{"$f":"'Source Data'!B1492","v":"t"},{"$f":"'Source Data'!C1492","v":0.251307},{"$f":"'Source Data'!D1492","v":"Threat agent compromises serial control link to substation"},{"$f":"'Source Data'!E1492","v":0},{"$f":"'Source Data'!F1492","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat agent compromises serial control link to substation0"}]
[{"$f":"'Source Data'!A1493","v":"dgm.16"},{"$f":"'Source Data'!B1493","v":"d"},{"$f":"'Source Data'!C1493","v":0.87470300000000001},{"$f":"'Source Data'!D1493","v":"The Telco/Commercial Service Provider (CSP) provides communications capability between the utility's substation and headend/control center. Both wired and wireless based interfaces may be involved depending on the particular utility standards and site-specific constraints. Wired-based communication links can be analog or digital leased lines, while wireless interfaces are typically radio, cellular or even satellite based. To establish the Telco/CSP end-to-end communications, a point of demarcation (Demarc) is provided where the local utility owned communications infrastructure interfaces the telco owned network infrastructure (Figure 3). A knowledgeable threat agent can compromise the serial communications at the Demarc by intercepting and selectively modifying communicated data to masquerade as a user (man-in-the-middle) or replay attack, in which the threat agent captures control messages and subsequent retransmission with the intent of producing an unauthorized effect. This can potentially compromise both real-time (sometimes referred to as operational) traffic as well as non-real-time (sometimes referred to as non-operational) traffic. In the context of real-time data exchanges, the substation gateway or RTU in the substation or the SCADA Front End Processor (FEP) at the headend can be affected by manipulating command and control messages in the direction of the substation or information messages in the direction of the head end. In the case of non-operational data exchanges, IED settings can be potentially manipulated."},{"$f":"'Source Data'!E1493","v":0},{"$f":"'Source Data'!F1493","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The Telco/Commercial Service Provider (CSP) provides communications capability between the utility's substation and headend/control center. Both wired and wireless based interfaces may be involved depending on the particular utility standards and site-specific constraints. Wired-based communication links can be analog or digital leased lines, while wireless interfaces are typically radio, cellular or even satellite based. To establish the Telco/CSP end-to-end communications, a point of demarcation (Demarc) is provided where the local utility owned communications infrastructure interfaces the telco owned network infrastructure (Figure 3). A knowledgeable threat agent can compromise the serial communications at the Demarc by intercepting and selectively modifying communicated data to masquerade as a user (man-in-the-middle) or replay attack, in which the threat agent captures control messages and subsequent retransmission with the intent of producing an unauthorized effect. This can potentially compromise both real-time (sometimes referred to as operational) traffic as well as non-real-time (sometimes referred to as non-operational) traffic. In the context of real-time data exchanges, the substation gateway or RTU in the substation or the SCADA Front End Processor (FEP) at the headend can be affected by manipulating command and control messages in the direction of the substation or information messages in the direction of the head end. In the case of non-operational data exchanges, IED settings can be potentially manipulated.0"}]
[{"$f":"'Source Data'!A1494","v":"dgm.16"},{"$f":"'Source Data'!B1494","v":"v"},{"$f":"'Source Data'!C1494","v":0.85458900000000004},{"$f":"'Source Data'!D1494","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1494","v":" to the utility or Telco/ISP,"},{"$f":"'Source Data'!F1494","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to the utility or Telco/ISP,"}]
[{"$f":"'Source Data'!A1495","v":"dgm.16"},{"$f":"'Source Data'!B1495","v":"v"},{"$f":"'Source Data'!C1495","v":0.70952199999999999},{"$f":"'Source Data'!D1495","v":"unnecessary network access is permitted"},{"$f":"'Source Data'!E1495","v":" allowing access of threat agent to the demarc or within the service providers network CSU/DSU,"},{"$f":"'Source Data'!F1495","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"unnecessary network access is permitted allowing access of threat agent to the demarc or within the service providers network CSU/DSU,"}]
[{"$f":"'Source Data'!A1496","v":"dgm.16"},{"$f":"'Source Data'!B1496","v":"v"},{"$f":"'Source Data'!C1496","v":0.24760199999999999},{"$f":"'Source Data'!D1496","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Source Data'!E1496","v":" to substation gateway/RTU or SCADA FEP,"},{"$f":"'Source Data'!F1496","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system relies on credentials that are easy to obtain for access to substation gateway/RTU or SCADA FEP,"}]
[{"$f":"'Source Data'!A1497","v":"dgm.16"},{"$f":"'Source Data'!B1497","v":"v"},{"$f":"'Source Data'!C1497","v":0.75048999999999999},{"$f":"'Source Data'!D1497","v":"users lack visibility of unapproved access"},{"$f":"'Source Data'!E1497","v":" to the demarc,"},{"$f":"'Source Data'!F1497","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of unapproved access to the demarc,"}]
[{"$f":"'Source Data'!A1498","v":"dgm.16"},{"$f":"'Source Data'!B1498","v":"v"},{"$f":"'Source Data'!C1498","v":0.26085700000000001},{"$f":"'Source Data'!D1498","v":"commands or other messages may be inserted on the network by unauthorized individuals"},{"$f":"'Source Data'!E1498","v":" in the communication protocol,"},{"$f":"'Source Data'!F1498","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"commands or other messages may be inserted on the network by unauthorized individuals in the communication protocol,"}]
[{"$f":"'Source Data'!A1499","v":"dgm.16"},{"$f":"'Source Data'!B1499","v":"v"},{"$f":"'Source Data'!C1499","v":0.53230500000000003},{"$f":"'Source Data'!D1499","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Source Data'!E1499","v":" over the serial link."},{"$f":"'Source Data'!F1499","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system makes messages accessible to unauthorized individuals over the serial link."}]
[{"$f":"'Source Data'!A1500","v":"dgm.16"},{"$f":"'Source Data'!B1500","v":"v"},{"$f":"'Source Data'!C1500","v":0.40148200000000001},{"$f":"'Source Data'!D1500","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Source Data'!E1500","v":" in the communication protocol"},{"$f":"'Source Data'!F1500","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message in the communication protocol"}]
[{"$f":"'Source Data'!A1501","v":"dgm.16"},{"$f":"'Source Data'!B1501","v":"v"},{"$f":"'Source Data'!C1501","v":0.54672699999999996},{"$f":"'Source Data'!D1501","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Source Data'!E1501","v":" over the serial link"},{"$f":"'Source Data'!F1501","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command over the serial link"}]
[{"$f":"'Source Data'!A1502","v":"dgm.16"},{"$f":"'Source Data'!B1502","v":"i"},{"$f":"'Source Data'!C1502","v":0.73784899999999998},{"$f":"'Source Data'!D1502","v":"Loss of customer power, possibly to critical customers (e.g., hospital)"},{"$f":"'Source Data'!E1502","v":0},{"$f":"'Source Data'!F1502","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of customer power, possibly to critical customers (e.g., hospital)0"}]
[{"$f":"'Source Data'!A1503","v":"dgm.16"},{"$f":"'Source Data'!B1503","v":"i"},{"$f":"'Source Data'!C1503","v":0.85791099999999998},{"$f":"'Source Data'!D1503","v":"Potential customer and utility equipment damage"},{"$f":"'Source Data'!E1503","v":0},{"$f":"'Source Data'!F1503","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential customer and utility equipment damage0"}]
[{"$f":"'Source Data'!A1504","v":"dgm.16"},{"$f":"'Source Data'!B1504","v":"i"},{"$f":"'Source Data'!C1504","v":0.70967800000000003},{"$f":"'Source Data'!D1504","v":"Financial loss associated with any equipment damage or restoration to normal operations"},{"$f":"'Source Data'!E1504","v":0},{"$f":"'Source Data'!F1504","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Financial loss associated with any equipment damage or restoration to normal operations0"}]
[{"$f":"'Source Data'!A1505","v":"dgm.16"},{"$f":"'Source Data'!B1505","v":"i"},{"$f":"'Source Data'!C1505","v":0.95150199999999996},{"$f":"'Source Data'!D1505","v":"Increase in public safety concerns (e.g., loss of heating or cooling on extremely cold or hot days)"},{"$f":"'Source Data'!E1505","v":0},{"$f":"'Source Data'!F1505","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Increase in public safety concerns (e.g., loss of heating or cooling on extremely cold or hot days)0"}]
[{"$f":"'Source Data'!A1506","v":"dgm.16"},{"$f":"'Source Data'!B1506","v":"i"},{"$f":"'Source Data'!C1506","v":0.61784099999999997},{"$f":"'Source Data'!D1506","v":"Negative impact on customer service due to increase in calls and complaints"},{"$f":"'Source Data'!E1506","v":0},{"$f":"'Source Data'!F1506","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Negative impact on customer service due to increase in calls and complaints0"}]
[{"$f":"'Source Data'!A1507","v":"dgm.16"},{"$f":"'Source Data'!B1507","v":"i"},{"$f":"'Source Data'!C1507","v":0.35141299999999998},{"$f":"'Source Data'!D1507","v":"Damage to goodwill toward utility"},{"$f":"'Source Data'!E1507","v":0},{"$f":"'Source Data'!F1507","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Damage to goodwill toward utility0"}]
[{"$f":"'Source Data'!A1508","v":"dgm.16"},{"$f":"'Source Data'!B1508","v":"m"},{"$f":"'Source Data'!C1508","v":0.86169499999999999},{"$f":"'Source Data'!D1508","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E1508","v":" to protect the confidentiality of communications and the cryptographic keys,"},{"$f":"'Source Data'!F1508","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms to protect the confidentiality of communications and the cryptographic keys,"}]
[{"$f":"'Source Data'!A1509","v":"dgm.16"},{"$f":"'Source Data'!B1509","v":"m"},{"$f":"'Source Data'!C1509","v":0.58006599999999997},{"$f":"'Source Data'!D1509","v":"require approved key management"},{"$f":"'Source Data'!E1509","v":" to protect the cryptographic keys,"},{"$f":"'Source Data'!F1509","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved key management to protect the cryptographic keys,"}]
[{"$f":"'Source Data'!A1510","v":"dgm.16"},{"$f":"'Source Data'!B1510","v":"m"},{"$f":"'Source Data'!C1510","v":0.48713000000000001},{"$f":"'Source Data'!D1510","v":"detect unusual patterns"},{"$f":"'Source Data'!E1510","v":" of energy usage on Generation Automation (all utilities have some type of revenue protection scheme, but these may not be adequate),"},{"$f":"'Source Data'!F1510","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unusual patterns of energy usage on Generation Automation (all utilities have some type of revenue protection scheme, but these may not be adequate),"}]
[{"$f":"'Source Data'!A1511","v":"dgm.16"},{"$f":"'Source Data'!B1511","v":"m"},{"$f":"'Source Data'!C1511","v":0.98792400000000002},{"$f":"'Source Data'!D1511","v":"detect unauthorized access"},{"$f":"'Source Data'!E1511","v":" in network traffic between substation and headend,"},{"$f":"'Source Data'!F1511","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect unauthorized access in network traffic between substation and headend,"}]
[{"$f":"'Source Data'!A1512","v":"dgm.16"},{"$f":"'Source Data'!B1512","v":"m"},{"$f":"'Source Data'!C1512","v":0.40882299999999999},{"$f":"'Source Data'!D1512","v":"require authentication"},{"$f":"'Source Data'!E1512","v":" on all data exchanges"},{"$f":"'Source Data'!F1512","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require authentication on all data exchanges"}]
[{"$f":"'Source Data'!A1513","v":"dgm.16"},{"$f":"'Source Data'!B1513","v":"m"},{"$f":"'Source Data'!C1513","v":0.14945900000000001},{"$f":"'Source Data'!D1513","v":"encrypt communication paths"},{"$f":"'Source Data'!E1513","v":" for serial messaging by using bump-in-the-wire solution,"},{"$f":"'Source Data'!F1513","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"encrypt communication paths for serial messaging by using bump-in-the-wire solution,"}]
[{"$f":"'Source Data'!A1514","v":"dgm.16"},{"$f":"'Source Data'!B1514","v":"m"},{"$f":"'Source Data'!C1514","v":0.77233300000000005},{"$f":"'Source Data'!D1514","v":"require multi-factor authentication"},{"$f":"'Source Data'!E1514","v":" by Telco/ISP to the device containing CSU/DSU units through service level agreement (SLA),"},{"$f":"'Source Data'!F1514","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require multi-factor authentication by Telco/ISP to the device containing CSU/DSU units through service level agreement (SLA),"}]
[{"$f":"'Source Data'!A1515","v":"dgm.16"},{"$f":"'Source Data'!B1515","v":"m"},{"$f":"'Source Data'!C1515","v":6.6791699999999996E-2},{"$f":"'Source Data'!D1515","v":"require tamper detection and response"},{"$f":"'Source Data'!E1515","v":" by Telco/ISP for the Demarc through SLA,"},{"$f":"'Source Data'!F1515","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require tamper detection and response by Telco/ISP for the Demarc through SLA,"}]
[{"$f":"'Source Data'!A1516","v":"dgm.16"},{"$f":"'Source Data'!B1516","v":"m"},{"$f":"'Source Data'!C1516","v":0.84786499999999998},{"$f":"'Source Data'!D1516","v":"restrict physical access"},{"$f":"'Source Data'!E1516","v":" by implementing personnel security control procedures."},{"$f":"'Source Data'!F1516","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"restrict physical access by implementing personnel security control procedures."}]
[{"$f":"'Source Data'!A1517","v":"generic.1"},{"$f":"'Source Data'!B1517","v":"t"},{"$f":"'Source Data'!C1517","v":9.4897800000000004E-2},{"$f":"'Source Data'!D1517","v":"Malicious and Non-malicious Insiders Pose Range of Threats"},{"$f":"'Source Data'!E1517","v":0},{"$f":"'Source Data'!F1517","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Malicious and Non-malicious Insiders Pose Range of Threats0"}]
[{"$f":"'Source Data'!A1518","v":"generic.1"},{"$f":"'Source Data'!B1518","v":"d"},{"$f":"'Source Data'!C1518","v":0.84259899999999999},{"$f":"'Source Data'!D1518","v":"Authorized personnel - who may be operators, engineering staff or administrators, become active threat agents with legitimate access to IT, field systems, and/or control networks."},{"$f":"'Source Data'!E1518","v":0},{"$f":"'Source Data'!F1518","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authorized personnel - who may be operators, engineering staff or administrators, become active threat agents with legitimate access to IT, field systems, and/or control networks.0"}]
[{"$f":"'Source Data'!A1519","v":"generic.1"},{"$f":"'Source Data'!B1519","v":"v"},{"$f":"'Source Data'!C1519","v":0.36075099999999999},{"$f":"'Source Data'!D1519","v":"users and hardware/software entities are given access unnecessary for their roles"},{"$f":"'Source Data'!E1519","v":" to perform duties that should be separated,"},{"$f":"'Source Data'!F1519","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users and hardware/software entities are given access unnecessary for their roles to perform duties that should be separated,"}]
[{"$f":"'Source Data'!A1520","v":"generic.1"},{"$f":"'Source Data'!B1520","v":"v"},{"$f":"'Source Data'!C1520","v":0.52076599999999995},{"$f":"'Source Data'!D1520","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1520","v":" "},{"$f":"'Source Data'!F1520","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes "}]
[{"$f":"'Source Data'!A1521","v":"generic.1"},{"$f":"'Source Data'!B1521","v":"v"},{"$f":"'Source Data'!C1521","v":0.452768},{"$f":"'Source Data'!D1521","v":"users lack visibility of unapproved access"},{"$f":"'Source Data'!E1521","v":" when privileges are elevated for access to security-relevant or operationally critical functions,"},{"$f":"'Source Data'!F1521","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of unapproved access when privileges are elevated for access to security-relevant or operationally critical functions,"}]
[{"$f":"'Source Data'!A1522","v":"generic.1"},{"$f":"'Source Data'!B1522","v":"v"},{"$f":"'Source Data'!C1522","v":0.50717500000000004},{"$f":"'Source Data'!D1522","v":"speed of incident response process is not appropriate for incident"},{"$f":"'Source Data'!E1522","v":" "},{"$f":"'Source Data'!F1522","v":"Inadequate Incident Response Process (6.2.3.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"speed of incident response process is not appropriate for incident "}]
[{"$f":"'Source Data'!A1523","v":"generic.1"},{"$f":"'Source Data'!B1523","v":"i"},{"$f":"'Source Data'!C1523","v":0.19542300000000001},{"$f":"'Source Data'!D1523","v":"Authorized personnel with legitimate access can inflict significant damage on a system either intentionally or by mistake. The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration."},{"$f":"'Source Data'!E1523","v":0},{"$f":"'Source Data'!F1523","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authorized personnel with legitimate access can inflict significant damage on a system either intentionally or by mistake. The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration.0"}]
[{"$f":"'Source Data'!A1524","v":"generic.1"},{"$f":"'Source Data'!B1524","v":"m"},{"$f":"'Source Data'!C1524","v":0.57892200000000005},{"$f":"'Source Data'!D1524","v":"require separation of duty"},{"$f":"'Source Data'!E1524","v":" "},{"$f":"'Source Data'!F1524","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require separation of duty "}]
[{"$f":"'Source Data'!A1525","v":"generic.1"},{"$f":"'Source Data'!B1525","v":"m"},{"$f":"'Source Data'!C1525","v":0.71735800000000005},{"$f":"'Source Data'!D1525","v":"use Role-Based Access Control"},{"$f":"'Source Data'!E1525","v":" to limit access"},{"$f":"'Source Data'!F1525","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"use Role-Based Access Control to limit access"}]
[{"$f":"'Source Data'!A1526","v":"generic.1"},{"$f":"'Source Data'!B1526","v":"m"},{"$f":"'Source Data'!C1526","v":8.4593000000000002E-2},{"$f":"'Source Data'!D1526","v":"detect abnormal behavior"},{"$f":"'Source Data'!E1526","v":" including out-of-policy behavior by authorized users in control networks through protection mechanisms and situational awareness (SIEM, IDS, firewalls, logging, and monitoring)"},{"$f":"'Source Data'!F1526","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal behavior including out-of-policy behavior by authorized users in control networks through protection mechanisms and situational awareness (SIEM, IDS, firewalls, logging, and monitoring)"}]
[{"$f":"'Source Data'!A1527","v":"generic.1"},{"$f":"'Source Data'!B1527","v":"m"},{"$f":"'Source Data'!C1527","v":0.92439899999999997},{"$f":"'Source Data'!D1527","v":"define procedures"},{"$f":"'Source Data'!E1527","v":" concerning access to security-relevant and operationally critical functionality"},{"$f":"'Source Data'!F1527","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define procedures concerning access to security-relevant and operationally critical functionality"}]
[{"$f":"'Source Data'!A1528","v":"generic.1"},{"$f":"'Source Data'!B1528","v":"m"},{"$f":"'Source Data'!C1528","v":0.49675999999999998},{"$f":"'Source Data'!D1528","v":"define procedures"},{"$f":"'Source Data'!E1528","v":" for processing suspected or confirmed security incidents involving an insider"},{"$f":"'Source Data'!F1528","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define procedures for processing suspected or confirmed security incidents involving an insider"}]
[{"$f":"'Source Data'!A1529","v":"generic.2"},{"$f":"'Source Data'!B1529","v":"t"},{"$f":"'Source Data'!C1529","v":0.35458200000000001},{"$f":"'Source Data'!D1529","v":"Inadequate Network Segregation Enables Access for Threat Agents"},{"$f":"'Source Data'!E1529","v":0},{"$f":"'Source Data'!F1529","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inadequate Network Segregation Enables Access for Threat Agents0"}]
[{"$f":"'Source Data'!A1530","v":"generic.2"},{"$f":"'Source Data'!B1530","v":"d"},{"$f":"'Source Data'!C1530","v":0.66321699999999995},{"$f":"'Source Data'!D1530","v":"A threat agent compromises an asset that has access to the Internet via the \"business\" network. The asset on the business network also has access to a control system asset or network. The compromise of the business network asset provides a pivot point for the threat agent to gain control of a control system asset or network."},{"$f":"'Source Data'!E1530","v":0},{"$f":"'Source Data'!F1530","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent compromises an asset that has access to the Internet via the \"business\" network. The asset on the business network also has access to a control system asset or network. The compromise of the business network asset provides a pivot point for the threat agent to gain control of a control system asset or network.0"}]
[{"$f":"'Source Data'!A1531","v":"generic.2"},{"$f":"'Source Data'!B1531","v":"v"},{"$f":"'Source Data'!C1531","v":9.3393500000000004E-2},{"$f":"'Source Data'!D1531","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles"},{"$f":"'Source Data'!E1531","v":" such as using virtual local area networks (VLANs) for security or using the same networks for business operations and control systems,"},{"$f":"'Source Data'!F1531","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles such as using virtual local area networks (VLANs) for security or using the same networks for business operations and control systems,"}]
[{"$f":"'Source Data'!A1532","v":"generic.2"},{"$f":"'Source Data'!B1532","v":"v"},{"$f":"'Source Data'!C1532","v":0.988537},{"$f":"'Source Data'!D1532","v":"users lack visibility of unapproved access"},{"$f":"'Source Data'!E1532","v":" to show remote command and control of a business asset has been obtained,"},{"$f":"'Source Data'!F1532","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of unapproved access to show remote command and control of a business asset has been obtained,"}]
[{"$f":"'Source Data'!A1533","v":"generic.2"},{"$f":"'Source Data'!B1533","v":"v"},{"$f":"'Source Data'!C1533","v":0.380384},{"$f":"'Source Data'!D1533","v":"users lack visibility of threat activity"},{"$f":"'Source Data'!E1533","v":" between the business operations network and the Internet to notice when an incident is occurring,"},{"$f":"'Source Data'!F1533","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"users lack visibility of threat activity between the business operations network and the Internet to notice when an incident is occurring,"}]
[{"$f":"'Source Data'!A1534","v":"generic.2"},{"$f":"'Source Data'!B1534","v":"v"},{"$f":"'Source Data'!C1534","v":0.25570900000000002},{"$f":"'Source Data'!D1534","v":"network is connected to untrusted networks"},{"$f":"'Source Data'!E1534","v":" that are viewed as trusted, specifically the control systems network is connected to the business network and views the business network as trusted."},{"$f":"'Source Data'!F1534","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"network is connected to untrusted networks that are viewed as trusted, specifically the control systems network is connected to the business network and views the business network as trusted."}]
[{"$f":"'Source Data'!A1535","v":"generic.2"},{"$f":"'Source Data'!B1535","v":"i"},{"$f":"'Source Data'!C1535","v":0.74434699999999998},{"$f":"'Source Data'!D1535","v":"The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration"},{"$f":"'Source Data'!E1535","v":0},{"$f":"'Source Data'!F1535","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration0"}]
[{"$f":"'Source Data'!A1536","v":"generic.2"},{"$f":"'Source Data'!B1536","v":"m"},{"$f":"'Source Data'!C1536","v":0.51420699999999997},{"$f":"'Source Data'!D1536","v":"isolate networks"},{"$f":"'Source Data'!E1536","v":" that host business systems from those that host control systems"},{"$f":"'Source Data'!F1536","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate networks that host business systems from those that host control systems"}]
[{"$f":"'Source Data'!A1537","v":"generic.2"},{"$f":"'Source Data'!B1537","v":"m"},{"$f":"'Source Data'!C1537","v":0.97903600000000002},{"$f":"'Source Data'!D1537","v":"generate alerts"},{"$f":"'Source Data'!E1537","v":" using a SEIM and monitor alerts according to the associated risks. This includes alerts generated by firewalls, anti-virus, and specific systems,"},{"$f":"'Source Data'!F1537","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"generate alerts using a SEIM and monitor alerts according to the associated risks. This includes alerts generated by firewalls, anti-virus, and specific systems,"}]
[{"$f":"'Source Data'!A1538","v":"generic.2"},{"$f":"'Source Data'!B1538","v":"m"},{"$f":"'Source Data'!C1538","v":0.31390499999999999},{"$f":"'Source Data'!D1538","v":"isolate networks"},{"$f":"'Source Data'!E1538","v":" with a defensible, defense in depth, network architecture that includes a demilitarized zone (DMZ)"},{"$f":"'Source Data'!F1538","v":"isolate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"isolate networks with a defensible, defense in depth, network architecture that includes a demilitarized zone (DMZ)"}]
[{"$f":"'Source Data'!A1539","v":"generic.2"},{"$f":"'Source Data'!B1539","v":"m"},{"$f":"'Source Data'!C1539","v":4.45814E-2},{"$f":"'Source Data'!D1539","v":"enforce restrictive firewall rules"},{"$f":"'Source Data'!E1539","v":" to achieve network isolation"},{"$f":"'Source Data'!F1539","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"enforce restrictive firewall rules to achieve network isolation"}]
[{"$f":"'Source Data'!A1540","v":"generic.2"},{"$f":"'Source Data'!B1540","v":"m"},{"$f":"'Source Data'!C1540","v":0.264899},{"$f":"'Source Data'!D1540","v":"require intrusion detection and prevention"},{"$f":"'Source Data'!E1540","v":" "},{"$f":"'Source Data'!F1540","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require intrusion detection and prevention "}]
[{"$f":"'Source Data'!A1541","v":"generic.2"},{"$f":"'Source Data'!B1541","v":"m"},{"$f":"'Source Data'!C1541","v":0.111692},{"$f":"'Source Data'!D1541","v":"train personnel"},{"$f":"'Source Data'!E1541","v":" to monitor traffic to and from the Internet to recognize when an incident is occurring"},{"$f":"'Source Data'!F1541","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel to monitor traffic to and from the Internet to recognize when an incident is occurring"}]
[{"$f":"'Source Data'!A1542","v":"generic.2"},{"$f":"'Source Data'!B1542","v":"m"},{"$f":"'Source Data'!C1542","v":0.977186},{"$f":"'Source Data'!D1542","v":"define incident response plan"},{"$f":"'Source Data'!E1542","v":" to reduce response time when incidents do occur"},{"$f":"'Source Data'!F1542","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define incident response plan to reduce response time when incidents do occur"}]
[{"$f":"'Source Data'!A1543","v":"generic.2"},{"$f":"'Source Data'!B1543","v":"m"},{"$f":"'Source Data'!C1543","v":2.6806699999999999E-2},{"$f":"'Source Data'!D1543","v":"define contingency plan"},{"$f":"'Source Data'!E1543","v":" as part of the incident response plan to maintain adequate resiliency in high-priority control systems"},{"$f":"'Source Data'!F1543","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define contingency plan as part of the incident response plan to maintain adequate resiliency in high-priority control systems"}]
[{"$f":"'Source Data'!A1544","v":"generic.3"},{"$f":"'Source Data'!B1544","v":"t"},{"$f":"'Source Data'!C1544","v":0.57678099999999999},{"$f":"'Source Data'!D1544","v":"Portable Media Enables Access Despite Network Controls"},{"$f":"'Source Data'!E1544","v":0},{"$f":"'Source Data'!F1544","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Portable Media Enables Access Despite Network Controls0"}]
[{"$f":"'Source Data'!A1545","v":"generic.3"},{"$f":"'Source Data'!B1545","v":"d"},{"$f":"'Source Data'!C1545","v":0.73280000000000001},{"$f":"'Source Data'!D1545","v":"A threat agent introduces counterfeit firmware or software, a virus, or malware via removable media to obtain partial or total control of a device or networked system."},{"$f":"'Source Data'!E1545","v":0},{"$f":"'Source Data'!F1545","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent introduces counterfeit firmware or software, a virus, or malware via removable media to obtain partial or total control of a device or networked system.0"}]
[{"$f":"'Source Data'!A1546","v":"generic.3"},{"$f":"'Source Data'!B1546","v":"v"},{"$f":"'Source Data'!C1546","v":0.20230899999999999},{"$f":"'Source Data'!D1546","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Source Data'!E1546","v":" to interfaces such as USB, Firewire, or serial ports that allows the unrestricted ability to load software or firmware to devices."},{"$f":"'Source Data'!F1546","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"physical access may be obtained by unauthorized individuals to interfaces such as USB, Firewire, or serial ports that allows the unrestricted ability to load software or firmware to devices."}]
[{"$f":"'Source Data'!A1547","v":"generic.3"},{"$f":"'Source Data'!B1547","v":"i"},{"$f":"'Source Data'!C1547","v":0.168576},{"$f":"'Source Data'!D1547","v":"The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration."},{"$f":"'Source Data'!E1547","v":0},{"$f":"'Source Data'!F1547","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration.0"}]
[{"$f":"'Source Data'!A1548","v":"generic.3"},{"$f":"'Source Data'!B1548","v":"m"},{"$f":"'Source Data'!C1548","v":0.66724300000000003},{"$f":"'Source Data'!D1548","v":"configure for least functionality"},{"$f":"'Source Data'!E1548","v":" by permanently physically disabling unnecessary interfaces with epoxy or other methods or physically removing them"},{"$f":"'Source Data'!F1548","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by permanently physically disabling unnecessary interfaces with epoxy or other methods or physically removing them"}]
[{"$f":"'Source Data'!A1549","v":"generic.3"},{"$f":"'Source Data'!B1549","v":"m"},{"$f":"'Source Data'!C1549","v":0.93995899999999999},{"$f":"'Source Data'!D1549","v":"configure for least functionality"},{"$f":"'Source Data'!E1549","v":" by using software controls or other non-physical methods to disable unnecessary interfaces on equipment"},{"$f":"'Source Data'!F1549","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"configure for least functionality by using software controls or other non-physical methods to disable unnecessary interfaces on equipment"}]
[{"$f":"'Source Data'!A1550","v":"generic.3"},{"$f":"'Source Data'!B1550","v":"m"},{"$f":"'Source Data'!C1550","v":2.8298199999999999E-2},{"$f":"'Source Data'!D1550","v":"verify settings"},{"$f":"'Source Data'!E1550","v":" on equipment before the equipment is installed in the field"},{"$f":"'Source Data'!F1550","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"verify settings on equipment before the equipment is installed in the field"}]
[{"$f":"'Source Data'!A1551","v":"generic.3"},{"$f":"'Source Data'!B1551","v":"m"},{"$f":"'Source Data'!C1551","v":4.2123399999999998E-2},{"$f":"'Source Data'!D1551","v":"test before installation"},{"$f":"'Source Data'!E1551","v":" of equipment in the field"},{"$f":"'Source Data'!F1551","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test before installation of equipment in the field"}]
[{"$f":"'Source Data'!A1552","v":"generic.3"},{"$f":"'Source Data'!B1552","v":"m"},{"$f":"'Source Data'!C1552","v":0.68285499999999999},{"$f":"'Source Data'!D1552","v":"vulnerability scan before install"},{"$f":"'Source Data'!E1552","v":" of equipment in the field"},{"$f":"'Source Data'!F1552","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"vulnerability scan before install of equipment in the field"}]
[{"$f":"'Source Data'!A1553","v":"generic.3"},{"$f":"'Source Data'!B1553","v":"m"},{"$f":"'Source Data'!C1553","v":0.64868999999999999},{"$f":"'Source Data'!D1553","v":"require periodic walk-downs"},{"$f":"'Source Data'!E1553","v":" of equipment to help ensure there are not any new unauthorized devices connected"},{"$f":"'Source Data'!F1553","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require periodic walk-downs of equipment to help ensure there are not any new unauthorized devices connected"}]
[{"$f":"'Source Data'!A1554","v":"generic.3"},{"$f":"'Source Data'!B1554","v":"m"},{"$f":"'Source Data'!C1554","v":4.83168E-2},{"$f":"'Source Data'!D1554","v":"define policy"},{"$f":"'Source Data'!E1554","v":" outlining acceptable and unacceptable use of portable computing devices in a business/corporate local area network (LAN) environment and a control LAN environment"},{"$f":"'Source Data'!F1554","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define policy outlining acceptable and unacceptable use of portable computing devices in a business/corporate local area network (LAN) environment and a control LAN environment"}]
[{"$f":"'Source Data'!A1555","v":"generic.3"},{"$f":"'Source Data'!B1555","v":"m"},{"$f":"'Source Data'!C1555","v":0.60102},{"$f":"'Source Data'!D1555","v":"train personnel"},{"$f":"'Source Data'!E1555","v":" under a user awareness training program that includes portable media guidelines"},{"$f":"'Source Data'!F1555","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"train personnel under a user awareness training program that includes portable media guidelines"}]
[{"$f":"'Source Data'!A1556","v":"generic.4"},{"$f":"'Source Data'!B1556","v":"t"},{"$f":"'Source Data'!C1556","v":8.2825999999999997E-2},{"$f":"'Source Data'!D1556","v":"Supply Chain Attacks Weaken Trust in Equipment"},{"$f":"'Source Data'!E1556","v":0},{"$f":"'Source Data'!F1556","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Supply Chain Attacks Weaken Trust in Equipment0"}]
[{"$f":"'Source Data'!A1557","v":"generic.4"},{"$f":"'Source Data'!B1557","v":"d"},{"$f":"'Source Data'!C1557","v":0.89150300000000005},{"$f":"'Source Data'!D1557","v":"An adversary replaces a legitimate device with a maliciously altered device and introduces the device into the supply chain without directly compromising a manufacturing entity. This can be done by buying a legitimate device, buying or creating a malicious device and returning the malicious device in place of the legitimate device as an exchange. Alteration may be a modification or deletion of existing functions or addition of unexpected functions."},{"$f":"'Source Data'!E1557","v":0},{"$f":"'Source Data'!F1557","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An adversary replaces a legitimate device with a maliciously altered device and introduces the device into the supply chain without directly compromising a manufacturing entity. This can be done by buying a legitimate device, buying or creating a malicious device and returning the malicious device in place of the legitimate device as an exchange. Alteration may be a modification or deletion of existing functions or addition of unexpected functions.0"}]
[{"$f":"'Source Data'!A1558","v":"generic.4"},{"$f":"'Source Data'!B1558","v":"v"},{"$f":"'Source Data'!C1558","v":0.14280999999999999},{"$f":"'Source Data'!D1558","v":"sensitive data remains on disposed equipment"},{"$f":"'Source Data'!E1558","v":" and allows a threat agent to acquire and reverse engineer equipment,"},{"$f":"'Source Data'!F1558","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"sensitive data remains on disposed equipment and allows a threat agent to acquire and reverse engineer equipment,"},"Moderate"]
[{"$f":"'Source Data'!A1559","v":"generic.4"},{"$f":"'Source Data'!B1559","v":"v"},{"$f":"'Source Data'!C1559","v":1.7512900000000001E-2},{"$f":"'Source Data'!D1559","v":"system permits unauthorized changes"},{"$f":"'Source Data'!E1559","v":" in the supply chain."},{"$f":"'Source Data'!F1559","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"system permits unauthorized changes in the supply chain."},"Moderate"]
[{"$f":"'Source Data'!A1560","v":"generic.4"},{"$f":"'Source Data'!B1560","v":"i"},{"$f":"'Source Data'!C1560","v":0.87210200000000004},{"$f":"'Source Data'!D1560","v":"Depending on the level of sophistication of the threat agent, this scenario can result in the complete loss of confidentiality, integrity, and availability of systems using equipment from an infiltrated supply chain."},{"$f":"'Source Data'!E1560","v":0},{"$f":"'Source Data'!F1560","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Depending on the level of sophistication of the threat agent, this scenario can result in the complete loss of confidentiality, integrity, and availability of systems using equipment from an infiltrated supply chain.0"}]
[{"$f":"'Source Data'!A1561","v":"generic.4"},{"$f":"'Source Data'!B1561","v":"m"},{"$f":"'Source Data'!C1561","v":0.58162400000000003},{"$f":"'Source Data'!D1561","v":"define SLA"},{"$f":"'Source Data'!E1561","v":" for procurement which verifies the manufacture and origin of equipment from a known good and reputable source"},{"$f":"'Source Data'!F1561","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define SLA for procurement which verifies the manufacture and origin of equipment from a known good and reputable source"},"Partially Implemented"]
[{"$f":"'Source Data'!A1562","v":"generic.4"},{"$f":"'Source Data'!B1562","v":"m"},{"$f":"'Source Data'!C1562","v":0.82922600000000002},{"$f":"'Source Data'!D1562","v":"define policy"},{"$f":"'Source Data'!E1562","v":" addressing disposal which prevents the acquisition of sensitive parts from excessed or disposed devices"},{"$f":"'Source Data'!F1562","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"define policy addressing disposal which prevents the acquisition of sensitive parts from excessed or disposed devices"}]
[{"$f":"'Source Data'!A1563","v":"generic.4"},{"$f":"'Source Data'!B1563","v":"m"},{"$f":"'Source Data'!C1563","v":0.57971600000000001},{"$f":"'Source Data'!D1563","v":"require approved cryptographic algorithms"},{"$f":"'Source Data'!E1563","v":" to prevent a threat agent from reverse engineering devices which are acquired outside of the legitimate supply chain"},{"$f":"'Source Data'!F1563","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"require approved cryptographic algorithms to prevent a threat agent from reverse engineering devices which are acquired outside of the legitimate supply chain"}]
[{"$f":"'Source Data'!A1564","v":"generic.4"},{"$f":"'Source Data'!B1564","v":"m"},{"$f":"'Source Data'!C1564","v":0.84057199999999999},{"$f":"'Source Data'!D1564","v":"perform audit"},{"$f":"'Source Data'!E1564","v":" of the supply chain periodically to ensure adequate quality control"},{"$f":"'Source Data'!F1564","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"perform audit of the supply chain periodically to ensure adequate quality control"}]
[{"$f":"'Source Data'!A1565","v":"generic.4"},{"$f":"'Source Data'!B1565","v":"m"},{"$f":"'Source Data'!C1565","v":0.37287700000000001},{"$f":"'Source Data'!D1565","v":"detect abnormal behavior"},{"$f":"'Source Data'!E1565","v":" that may indicate supply chain issues, such as unauthorized communications or behavior by deployed devices in the system network"},{"$f":"'Source Data'!F1565","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"detect abnormal behavior that may indicate supply chain issues, such as unauthorized communications or behavior by deployed devices in the system network"}]
[{"$f":"'Source Data'!A1566","v":"generic.4"},{"$f":"'Source Data'!B1566","v":"m"},{"$f":"'Source Data'!C1566","v":0.110726},{"$f":"'Source Data'!D1566","v":"test before installation"},{"$f":"'Source Data'!E1566","v":" to detect unwanted functionality before putting devices into production. The objective is to validate functionality and usability"},{"$f":"'Source Data'!F1566","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"test before installation to detect unwanted functionality before putting devices into production. The objective is to validate functionality and usability"}]
[{"$f":"'Source Data'!A1567","v":"gen.1"},{"$f":"'Source Data'!B1567","v":"t"},{"$f":"'Source Data'!C1567","v":0.18282699999999999},{"$f":"'Source Data'!D1567","v":"Threat agent adds spurious trip parameters on remotely located plant support equipment and trips unit offline."},{"$f":"'Source Data'!E1567","v":0},{"$f":"'Source Data'!F1567","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat agent adds spurious trip parameters on remotely located plant support equipment and trips unit offline.0"}]
[{"$f":"'Source Data'!A1568","v":"gen.1"},{"$f":"'Source Data'!B1568","v":"d"},{"$f":"'Source Data'!C1568","v":0.89150300000000005},{"$f":"'Source Data'!D1568","v":"A threat agent gains physical access to a river water pump house, connects a laptop to the local controls network, and adds a time-delay trip to the circulating water pumps triggered off of a normal value. This causes loss of cooling water flow resulting in the loss of condenser vacuum tripping the turbine and causing the plant to be tripped off line."},{"$f":"'Source Data'!E1568","v":0},{"$f":"'Source Data'!F1568","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent gains physical access to a river water pump house, connects a laptop to the local controls network, and adds a time-delay trip to the circulating water pumps triggered off of a normal value. This causes loss of cooling water flow resulting in the loss of condenser vacuum tripping the turbine and causing the plant to be tripped off line.0"}]
[{"$f":"'Source Data'!A1569","v":"gen.1"},{"$f":"'Source Data'!B1569","v":"v"},{"$f":"'Source Data'!C1569","v":0.14280999999999999},{"$f":"'Source Data'!D1569","v":"Physical access may be obtained by unauthorized individuals as many sites have pump houses"},{"$f":"'Source Data'!E1569","v":"well outside of the security perimeter of the plant."},{"$f":"'Source Data'!F1569","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Physical access may be obtained by unauthorized individuals as many sites have pump houseswell outside of the security perimeter of the plant."}]
[{"$f":"'Source Data'!A1570","v":"gen.1"},{"$f":"'Source Data'!B1570","v":"v"},{"$f":"'Source Data'!C1570","v":1.7513000000000001E-2},{"$f":"'Source Data'!D1570","v":"System relies on credentials that are easy to obtain for access to make configuration changes to"},{"$f":"'Source Data'!E1570","v":"the equipment controls."},{"$f":"'Source Data'!F1570","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System relies on credentials that are easy to obtain for access to make configuration changes tothe equipment controls."}]
[{"$f":"'Source Data'!A1571","v":"gen.1"},{"$f":"'Source Data'!B1571","v":"v"},{"$f":"'Source Data'!C1571","v":1.75131E-2},{"$f":"'Source Data'!D1571","v":"System permits unauthorized changes to the"},{"$f":"'Source Data'!E1571","v":" configuration."},{"$f":"'Source Data'!F1571","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits unauthorized changes to the configuration."}]
[{"$f":"'Source Data'!A1572","v":"gen.1"},{"$f":"'Source Data'!B1572","v":"v"},{"$f":"'Source Data'!C1572","v":1.7512900000000001E-2},{"$f":"'Source Data'!D1572","v":"Commands or other messages may be inserted on the network by unauthorized individuals"},{"$f":"'Source Data'!E1572","v":" resulting in unauthenticated changes to sensitive parameters."},{"$f":"'Source Data'!F1572","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Commands or other messages may be inserted on the network by unauthorized individuals resulting in unauthenticated changes to sensitive parameters."}]
[{"$f":"'Source Data'!A1573","v":"gen.1"},{"$f":"'Source Data'!B1573","v":"i"},{"$f":"'Source Data'!C1573","v":0.87210200000000004},{"$f":"'Source Data'!D1573","v":"Inadequate cooling water to the condenser will lead to a loss of vacuum that will trip the turbine."},{"$f":"'Source Data'!E1573","v":0},{"$f":"'Source Data'!F1573","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Inadequate cooling water to the condenser will lead to a loss of vacuum that will trip the turbine.0"}]
[{"$f":"'Source Data'!A1574","v":"gen.1"},{"$f":"'Source Data'!B1574","v":"i"},{"$f":"'Source Data'!C1574","v":0.87210299999999996},{"$f":"'Source Data'!D1574","v":"Improper cooling water levels could damage the condenser and turbine."},{"$f":"'Source Data'!E1574","v":0},{"$f":"'Source Data'!F1574","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Improper cooling water levels could damage the condenser and turbine.0"}]
[{"$f":"'Source Data'!A1575","v":"gen.1"},{"$f":"'Source Data'!B1575","v":"i"},{"$f":"'Source Data'!C1575","v":0.87210399999999999},{"$f":"'Source Data'!D1575","v":"Lost generation."},{"$f":"'Source Data'!E1575","v":0},{"$f":"'Source Data'!F1575","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Lost generation.0"}]
[{"$f":"'Source Data'!A1576","v":"gen.1"},{"$f":"'Source Data'!B1576","v":"i"},{"$f":"'Source Data'!C1576","v":0.87210500000000002},{"$f":"'Source Data'!D1576","v":"Time and expense to diagnose the problem."},{"$f":"'Source Data'!E1576","v":0},{"$f":"'Source Data'!F1576","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Time and expense to diagnose the problem.0"}]
[{"$f":"'Source Data'!A1577","v":"gen.1"},{"$f":"'Source Data'!B1577","v":"i"},{"$f":"'Source Data'!C1577","v":0.872116},{"$f":"'Source Data'!D1577","v":"Plant thermal cycle gives greater opportunity for boiler tube leak."},{"$f":"'Source Data'!E1577","v":0},{"$f":"'Source Data'!F1577","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Plant thermal cycle gives greater opportunity for boiler tube leak.0"}]
[{"$f":"'Source Data'!A1578","v":"gen.1"},{"$f":"'Source Data'!B1578","v":"m"},{"$f":"'Source Data'!C1578","v":0.58162400000000003},{"$f":"'Source Data'!D1578","v":"Restrict physical access to the pump house using, for example, card swipes, pin codes,"},{"$f":"'Source Data'!E1578","v":" etc."},{"$f":"'Source Data'!F1578","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict physical access to the pump house using, for example, card swipes, pin codes, etc."}]
[{"$f":"'Source Data'!A1579","v":"gen.1"},{"$f":"'Source Data'!B1579","v":"m"},{"$f":"'Source Data'!C1579","v":0.82922700000000005},{"$f":"'Source Data'!D1579","v":"Define procedures to evaluate the credibility of high intake level readings from a pump house."},{"$f":"'Source Data'!E1579","v":"For a spurious reading, other plant indications related to open loop cooling system would not be consistent."},{"$f":"'Source Data'!F1579","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Define procedures to evaluate the credibility of high intake level readings from a pump house.For a spurious reading, other plant indications related to open loop cooling system would not be consistent."}]
[{"$f":"'Source Data'!A1580","v":"gen.1"},{"$f":"'Source Data'!B1580","v":"m"},{"$f":"'Source Data'!C1580","v":0.57971799999999996},{"$f":"'Source Data'!D1580","v":"Require periodic physical surveillance of intake structures and equipment,"},{"$f":"'Source Data'!E1580","v":" (new common mitigation)."},{"$f":"'Source Data'!F1580","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require periodic physical surveillance of intake structures and equipment, (new common mitigation)."}]
[{"$f":"'Source Data'!A1581","v":"gen.1"},{"$f":"'Source Data'!B1581","v":"m"},{"$f":"'Source Data'!C1581","v":0.58162499999999995},{"$f":"'Source Data'!D1581","v":"Restrict physical access by implementing personnel security control"},{"$f":"'Source Data'!E1581","v":" procedures."},{"$f":"'Source Data'!F1581","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict physical access by implementing personnel security control procedures."}]
[{"$f":"'Source Data'!A1582","v":"gen.1"},{"$f":"'Source Data'!B1582","v":"m"},{"$f":"'Source Data'!C1582","v":0.82922300000000004},{"$f":"'Source Data'!D1582","v":"Restrict configuration access to limit who has access and can make configuration"},{"$f":"'Source Data'!E1582","v":" changes."},{"$f":"'Source Data'!F1582","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict configuration access to limit who has access and can make configuration changes."}]
[{"$f":"'Source Data'!A1583","v":"gen.1"},{"$f":"'Source Data'!B1583","v":"m"},{"$f":"'Source Data'!C1583","v":0.57971899999999998},{"$f":"'Source Data'!D1583","v":"Require video surveillance of the human interfaces to the pump house"},{"$f":"'Source Data'!E1583","v":" equipment."},{"$f":"'Source Data'!F1583","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require video surveillance of the human interfaces to the pump house equipment."}]
[{"$f":"'Source Data'!A1584","v":"gen.1"},{"$f":"'Source Data'!B1584","v":"m"},{"$f":"'Source Data'!C1584","v":0.84057300000000001},{"$f":"'Source Data'!D1584","v":"Authenticate users for all user interface"},{"$f":"'Source Data'!E1584","v":" interactions."},{"$f":"'Source Data'!F1584","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authenticate users for all user interface interactions."}]
[{"$f":"'Source Data'!A1585","v":"gen.1"},{"$f":"'Source Data'!B1585","v":"m"},{"$f":"'Source Data'!C1585","v":0.37287399999999998},{"$f":"'Source Data'!D1585","v":"Authenticate users so that physical access to the system(s) does not"},{"$f":"'Source Data'!E1585","v":"automatically grant logical access."},{"$f":"'Source Data'!F1585","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authenticate users so that physical access to the system(s) does notautomatically grant logical access."}]
[{"$f":"'Source Data'!A1586","v":"gen.1"},{"$f":"'Source Data'!B1586","v":"m"},{"$f":"'Source Data'!C1586","v":0.11075},{"$f":"'Source Data'!D1586","v":"Generate alarms on remote equipment when there is evidence of tampering of"},{"$f":"'Source Data'!E1586","v":"controls and instrumentation."},{"$f":"'Source Data'!F1586","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Generate alarms on remote equipment when there is evidence of tampering ofcontrols and instrumentation."}]
[{"$f":"'Source Data'!A1587","v":"gen.2"},{"$f":"'Source Data'!B1587","v":"t"},{"$f":"'Source Data'!C1587","v":0.18282799999999999},{"$f":"'Source Data'!D1587","v":"Fuel handling system inoperable after incorrect programmable logic controller motor start parameters are loaded from corrupted reference configuration"},{"$f":"'Source Data'!E1587","v":0},{"$f":"'Source Data'!F1587","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Fuel handling system inoperable after incorrect programmable logic controller motor start parameters are loaded from corrupted reference configuration0"}]
[{"$f":"'Source Data'!A1588","v":"gen.2"},{"$f":"'Source Data'!B1588","v":"d"},{"$f":"'Source Data'!C1588","v":0.89150399999999996},{"$f":"'Source Data'!D1588","v":"An employee that has access to a laptop with the configuration files for the fuel handling programmable logic controllers makes accidental changes to parameters that affect the logic for disabling the main conveyor on plugged fuel chutes at a key transfer point. These changes will go unnoticed until the next time the laptop is used to load the configuration into the networked programmable logic controllers. Once the altered parameters are loaded û the conveyor continues to run even when the chute is plugged. This will continue until the control logic can be reconfigured and verified. When the chute is plugged, coal will begin to pile up quickly and spill."},{"$f":"'Source Data'!E1588","v":0},{"$f":"'Source Data'!F1588","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"An employee that has access to a laptop with the configuration files for the fuel handling programmable logic controllers makes accidental changes to parameters that affect the logic for disabling the main conveyor on plugged fuel chutes at a key transfer point. These changes will go unnoticed until the next time the laptop is used to load the configuration into the networked programmable logic controllers. Once the altered parameters are loaded û the conveyor continues to run even when the chute is plugged. This will continue until the control logic can be reconfigured and verified. When the chute is plugged, coal will begin to pile up quickly and spill.0"}]
[{"$f":"'Source Data'!A1589","v":"gen.2"},{"$f":"'Source Data'!B1589","v":"v"},{"$f":"'Source Data'!C1589","v":0.14282},{"$f":"'Source Data'!D1589","v":"Configuration changes are not verified for correctness as an individual user is able to modify the referenced"},{"$f":"'Source Data'!E1589","v":" configuration."},{"$f":"'Source Data'!F1589","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Configuration changes are not verified for correctness as an individual user is able to modify the referenced configuration."}]
[{"$f":"'Source Data'!A1590","v":"gen.2"},{"$f":"'Source Data'!B1590","v":"i"},{"$f":"'Source Data'!C1590","v":0.87211300000000003},{"$f":"'Source Data'!D1590","v":"Resources required to diagnose and repair the control logic."},{"$f":"'Source Data'!E1590","v":0},{"$f":"'Source Data'!F1590","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Resources required to diagnose and repair the control logic.0"}]
[{"$f":"'Source Data'!A1591","v":"gen.2"},{"$f":"'Source Data'!B1591","v":"i"},{"$f":"'Source Data'!C1591","v":0.87211399999999994},{"$f":"'Source Data'!D1591","v":"Coal falling from high elevation can damage equipment and endanger personnel."},{"$f":"'Source Data'!E1591","v":0},{"$f":"'Source Data'!F1591","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Coal falling from high elevation can damage equipment and endanger personnel.0"}]
[{"$f":"'Source Data'!A1592","v":"gen.2"},{"$f":"'Source Data'!B1592","v":"i"},{"$f":"'Source Data'!C1592","v":0.87211499999999997},{"$f":"'Source Data'!D1592","v":"If the logic is not repaired in time, the plant's generation would be compromised."},{"$f":"'Source Data'!E1592","v":0},{"$f":"'Source Data'!F1592","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"If the logic is not repaired in time, the plant's generation would be compromised.0"}]
[{"$f":"'Source Data'!A1593","v":"gen.2"},{"$f":"'Source Data'!B1593","v":"m"},{"$f":"'Source Data'!C1593","v":0.58163399999999998},{"$f":"'Source Data'!D1593","v":"Create audit log of all changes to programmable logic"},{"$f":"'Source Data'!E1593","v":" controllers."},{"$f":"'Source Data'!F1593","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Create audit log of all changes to programmable logic controllers."}]
[{"$f":"'Source Data'!A1594","v":"gen.2"},{"$f":"'Source Data'!B1594","v":"m"},{"$f":"'Source Data'!C1594","v":0.829237},{"$f":"'Source Data'!D1594","v":"Implement configuration management to reduce the likelihood that a threat agent can compromise"},{"$f":"'Source Data'!E1594","v":" an entire system. (Note: Storing the master copy of the programmable logic controller configuration for the system on a laptop allows for untracked changes to the master configuration."},{"$f":"'Source Data'!F1594","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Implement configuration management to reduce the likelihood that a threat agent can compromise an entire system. (Note: Storing the master copy of the programmable logic controller configuration for the system on a laptop allows for untracked changes to the master configuration."}]
[{"$f":"'Source Data'!A1595","v":"gen.2"},{"$f":"'Source Data'!B1595","v":"m"},{"$f":"'Source Data'!C1595","v":0.57972800000000002},{"$f":"'Source Data'!D1595","v":"Restrict configuration access to limit who has access and can make configuration"},{"$f":"'Source Data'!E1595","v":" changes."},{"$f":"'Source Data'!F1595","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict configuration access to limit who has access and can make configuration changes."}]
[{"$f":"'Source Data'!A1596","v":"gen.2"},{"$f":"'Source Data'!B1596","v":"m"},{"$f":"'Source Data'!C1596","v":0.58163500000000001},{"$f":"'Source Data'!D1596","v":"Require two-person rule for configuration"},{"$f":"'Source Data'!E1596","v":" changes."},{"$f":"'Source Data'!F1596","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require two-person rule for configuration changes."}]
[{"$f":"'Source Data'!A1597","v":"gen.2"},{"$f":"'Source Data'!B1597","v":"m"},{"$f":"'Source Data'!C1597","v":0.829233},{"$f":"'Source Data'!D1597","v":"Validate data to ensure correctness of"},{"$f":"'Source Data'!E1597","v":" changes."},{"$f":"'Source Data'!F1597","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Validate data to ensure correctness of changes."}]
[{"$f":"'Source Data'!A1780","v":0},{"$f":"'Source Data'!B1780","v":0},{"$f":"'Source Data'!C1780","v":0},{"$f":"'Source Data'!D1780","v":0},{"$f":"'Source Data'!E1780","v":0},{"$f":"'Source Data'!F1598","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"00"}]
[{"$f":"'Source Data'!A1599","v":"gen.3"},{"$f":"'Source Data'!B1599","v":"t"},{"$f":"'Source Data'!C1599","v":0.28282800000000002},{"$f":"'Source Data'!D1599","v":"Threat actor causes chemical spill using vendor remote access"},{"$f":"'Source Data'!E1599","v":0},{"$f":"'Source Data'!F1599","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat actor causes chemical spill using vendor remote access0"}]
[{"$f":"'Source Data'!A1600","v":"gen.3"},{"$f":"'Source Data'!B1600","v":"d"},{"$f":"'Source Data'!C1600","v":0.99150400000000005},{"$f":"'Source Data'!D1600","v":"A representative of a vendor contracted to manage inventory and chemistry within the generation plant has remote, logical access through an insecure cellular connection. Remote access grants configuration control to the storage tank level instrumentation signals, day tank levels, and pump settings. A threat agent utilizes the cellular connection to access the system and modify the level indication causing the tanks to be overfilled with hazardous chemicals"},{"$f":"'Source Data'!E1600","v":0},{"$f":"'Source Data'!F1600","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A representative of a vendor contracted to manage inventory and chemistry within the generation plant has remote, logical access through an insecure cellular connection. Remote access grants configuration control to the storage tank level instrumentation signals, day tank levels, and pump settings. A threat agent utilizes the cellular connection to access the system and modify the level indication causing the tanks to be overfilled with hazardous chemicals0"}]
[{"$f":"'Source Data'!A1601","v":"gen.3"},{"$f":"'Source Data'!B1601","v":"v"},{"$f":"'Source Data'!C1601","v":0.91428200000000004},{"$f":"'Source Data'!D1601","v":"System relies on credentials that are easy to obtain for access to potentially damaging"},{"$f":"'Source Data'!E1601","v":" controls."},{"$f":"'Source Data'!F1601","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System relies on credentials that are easy to obtain for access to potentially damaging controls."}]
[{"$f":"'Source Data'!A1601","v":"gen.3"},{"$f":"'Source Data'!B1601","v":"v"},{"$f":"'Source Data'!C1601","v":0.91428200000000004},{"$f":"'Source Data'!D1601","v":"System relies on credentials that are easy to obtain for access to potentially damaging"},{"$f":"'Source Data'!E1601","v":" controls."},{"$f":"'Source Data'!F1602","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System relies on credentials that are easy to obtain for access to potentially damaging controls."}]
[{"$f":"'Source Data'!A1603","v":"gen.3"},{"$f":"'Source Data'!B1603","v":"v"},{"$f":"'Source Data'!C1603","v":0.91428399999999999},{"$f":"'Source Data'!D1603","v":"Remote access may be obtained by unauthorized"},{"$f":"'Source Data'!E1603","v":" individual."},{"$f":"'Source Data'!F1603","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Remote access may be obtained by unauthorized individual."}]
[{"$f":"'Source Data'!A1604","v":"gen.3"},{"$f":"'Source Data'!B1604","v":"v"},{"$f":"'Source Data'!C1604","v":0.91428500000000001},{"$f":"'Source Data'!D1604","v":"Users lack visibility that unauthorized changes were made to the configuration"},{"$f":"'Source Data'!E1604","v":" parameters."},{"$f":"'Source Data'!F1604","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Users lack visibility that unauthorized changes were made to the configuration parameters."}]
[{"$f":"'Source Data'!A1605","v":"gen.3"},{"$f":"'Source Data'!B1605","v":"i"},{"$f":"'Source Data'!C1605","v":0.972113},{"$f":"'Source Data'!D1605","v":"Hazardous chemical spills of any size are reportable to environmental authorities."},{"$f":"'Source Data'!E1605","v":0},{"$f":"'Source Data'!F1605","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Hazardous chemical spills of any size are reportable to environmental authorities.0"}]
[{"$f":"'Source Data'!A1606","v":"gen.3"},{"$f":"'Source Data'!B1606","v":"i"},{"$f":"'Source Data'!C1606","v":0.97211400000000003},{"$f":"'Source Data'!D1606","v":"Personnel and equipment are endangered by the uncontrolled hazardous chemical release."},{"$f":"'Source Data'!E1606","v":0},{"$f":"'Source Data'!F1606","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Personnel and equipment are endangered by the uncontrolled hazardous chemical release.0"}]
[{"$f":"'Source Data'!A1607","v":"gen.3"},{"$f":"'Source Data'!B1607","v":"i"},{"$f":"'Source Data'!C1607","v":0.97211499999999995},{"$f":"'Source Data'!D1607","v":"Impact may continue even after the laptop is retrieved if a copy of the laptop's operating system and/or applications can be exfiltrated or recreated by the threat agent."},{"$f":"'Source Data'!E1607","v":0},{"$f":"'Source Data'!F1607","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Impact may continue even after the laptop is retrieved if a copy of the laptop's operating system and/or applications can be exfiltrated or recreated by the threat agent.0"}]
[{"$f":"'Source Data'!A1608","v":"gen.3"},{"$f":"'Source Data'!B1608","v":"m"},{"$f":"'Source Data'!C1608","v":0.98163400000000001},{"$f":"'Source Data'!D1608","v":"Generate alerts when changes are made to the control"},{"$f":"'Source Data'!E1608","v":" system."},{"$f":"'Source Data'!F1608","v":"alert"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Generate alerts when changes are made to the control system."}]
[{"$f":"'Source Data'!A1609","v":"gen.3"},{"$f":"'Source Data'!B1609","v":"m"},{"$f":"'Source Data'!C1609","v":0.92923699999999998},{"$f":"'Source Data'!D1609","v":"Create audit logs to track who has made system configuration"},{"$f":"'Source Data'!E1609","v":" modifications."},{"$f":"'Source Data'!F1609","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Create audit logs to track who has made system configuration modifications."}]
[{"$f":"'Source Data'!A1610","v":"gen.3"},{"$f":"'Source Data'!B1610","v":"m"},{"$f":"'Source Data'!C1610","v":0.679728},{"$f":"'Source Data'!D1610","v":"Restrict configuration access to limit who has access and can make configuration"},{"$f":"'Source Data'!E1610","v":" changes."},{"$f":"'Source Data'!F1610","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict configuration access to limit who has access and can make configuration changes."}]
[{"$f":"'Source Data'!A1611","v":"gen.3"},{"$f":"'Source Data'!B1611","v":"m"},{"$f":"'Source Data'!C1611","v":0.68163499999999999},{"$f":"'Source Data'!D1611","v":"Require approval of all changes through the configuration management"},{"$f":"'Source Data'!E1611","v":" process."},{"$f":"'Source Data'!F1611","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require approval of all changes through the configuration management process."}]
[{"$f":"'Source Data'!A1612","v":"gen.3"},{"$f":"'Source Data'!B1612","v":"m"},{"$f":"'Source Data'!C1612","v":0.62923300000000004},{"$f":"'Source Data'!D1612","v":"Require two-person rule for configuration changes to include a local"},{"$f":"'Source Data'!E1612","v":" resource."},{"$f":"'Source Data'!F1612","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require two-person rule for configuration changes to include a local resource."}]
[{"$f":"'Source Data'!A1613","v":"gen.3"},{"$f":"'Source Data'!B1613","v":"m"},{"$f":"'Source Data'!C1613","v":0.67972900000000003},{"$f":"'Source Data'!D1613","v":"Design for security in the generation plant"},{"$f":"'Source Data'!E1613","v":" system."},{"$f":"'Source Data'!F1613","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Design for security in the generation plant system."}]
[{"$f":"'Source Data'!A1614","v":"gen.4"},{"$f":"'Source Data'!B1614","v":"t"},{"$f":"'Source Data'!C1614","v":0.12828290000000001},{"$f":"'Source Data'!D1614","v":"Protective disconnect relays disabled on switchgear damaging generator"},{"$f":"'Source Data'!E1614","v":0},{"$f":"'Source Data'!F1614","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Protective disconnect relays disabled on switchgear damaging generator0"}]
[{"$f":"'Source Data'!A1615","v":"gen.4"},{"$f":"'Source Data'!B1615","v":"d"},{"$f":"'Source Data'!C1615","v":0.19915040000000001},{"$f":"'Source Data'!D1615","v":"A technician installing replacement relays in a switchyard encounters an error on a generator protection relay that has remote access enabled. The technician û unfamiliar with this error - engages a public Internet message board to get diagnostic information for the relay. A threat agent - posing as an expert on the message board û targets the technician with a spear phishing attack to gain credentials necessary for remote access. The threat agent then acquires access to the generator protection relay and changes the configuration causing it to not open when appropriate. The failure of the protective relay to disconnect keeps the generator tied to the grid during a plant shutdown. This ômotorsö the generator and significantly damages the generator and keeps the plant off-line until the generator can be repaired off-site."},{"$f":"'Source Data'!E1615","v":0},{"$f":"'Source Data'!F1615","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A technician installing replacement relays in a switchyard encounters an error on a generator protection relay that has remote access enabled. The technician û unfamiliar with this error - engages a public Internet message board to get diagnostic information for the relay. A threat agent - posing as an expert on the message board û targets the technician with a spear phishing attack to gain credentials necessary for remote access. The threat agent then acquires access to the generator protection relay and changes the configuration causing it to not open when appropriate. The failure of the protective relay to disconnect keeps the generator tied to the grid during a plant shutdown. This ômotorsö the generator and significantly damages the generator and keeps the plant off-line until the generator can be repaired off-site.0"}]
[{"$f":"'Source Data'!A1616","v":"gen.4"},{"$f":"'Source Data'!B1616","v":"v"},{"$f":"'Source Data'!C1616","v":0.1914283},{"$f":"'Source Data'!D1616","v":"System relies on credentials that are easy to obtain for access to the network interface"},{"$f":"'Source Data'!E1616","v":" device."},{"$f":"'Source Data'!F1616","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System relies on credentials that are easy to obtain for access to the network interface device."}]
[{"$f":"'Source Data'!A1617","v":"gen.4"},{"$f":"'Source Data'!B1617","v":"v"},{"$f":"'Source Data'!C1617","v":0.1914284},{"$f":"'Source Data'!D1617","v":"System permits potentially harmful command sequences by allowing for disabling the disconnect capability to be modified"},{"$f":"'Source Data'!E1617","v":" remotely."},{"$f":"'Source Data'!F1617","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits potentially harmful command sequences by allowing for disabling the disconnect capability to be modified remotely."}]
[{"$f":"'Source Data'!A1618","v":"gen.4"},{"$f":"'Source Data'!B1618","v":"v"},{"$f":"'Source Data'!C1618","v":0.1914285},{"$f":"'Source Data'!D1618","v":"Remote access may be obtained by unauthorized"},{"$f":"'Source Data'!E1618","v":" individuals."},{"$f":"'Source Data'!F1618","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Remote access may be obtained by unauthorized individuals."}]
[{"$f":"'Source Data'!A1619","v":"gen.4"},{"$f":"'Source Data'!B1619","v":"v"},{"$f":"'Source Data'!C1619","v":0.1914286},{"$f":"'Source Data'!D1619","v":"Workforce may be unaware of recommended precautions to block social engineering attacks, such as spear"},{"$f":"'Source Data'!E1619","v":" phishing."},{"$f":"'Source Data'!F1619","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Workforce may be unaware of recommended precautions to block social engineering attacks, such as spear phishing."}]
[{"$f":"'Source Data'!A1620","v":"gen.4"},{"$f":"'Source Data'!B1620","v":"v"},{"$f":"'Source Data'!C1620","v":0.19142870000000001},{"$f":"'Source Data'!D1620","v":"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing"},{"$f":"'Source Data'!E1620","v":" techniques."},{"$f":"'Source Data'!F1620","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing techniques."}]
[{"$f":"'Source Data'!A1621","v":"gen.4"},{"$f":"'Source Data'!B1621","v":"i"},{"$f":"'Source Data'!C1621","v":0.19721130000000001},{"$f":"'Source Data'!D1621","v":"Damage to the generator."},{"$f":"'Source Data'!E1621","v":0},{"$f":"'Source Data'!F1621","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Damage to the generator.0"}]
[{"$f":"'Source Data'!A1622","v":"gen.4"},{"$f":"'Source Data'!B1622","v":"i"},{"$f":"'Source Data'!C1622","v":0.19721140000000001},{"$f":"'Source Data'!D1622","v":"Loss of revenue affected generating units until generator can be repaired which is usually performed off-site."},{"$f":"'Source Data'!E1622","v":0},{"$f":"'Source Data'!F1622","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of revenue affected generating units until generator can be repaired which is usually performed off-site.0"}]
[{"$f":"'Source Data'!A1623","v":"gen.4"},{"$f":"'Source Data'!B1623","v":"i"},{"$f":"'Source Data'!C1623","v":0.19721150000000001},{"$f":"'Source Data'!D1623","v":"Depending on generating contracts, cost of replacement power while unit is out."},{"$f":"'Source Data'!E1623","v":0},{"$f":"'Source Data'!F1623","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Depending on generating contracts, cost of replacement power while unit is out.0"}]
[{"$f":"'Source Data'!A1624","v":"gen.4"},{"$f":"'Source Data'!B1624","v":"m"},{"$f":"'Source Data'!C1624","v":0.19816339999999999},{"$f":"'Source Data'!D1624","v":"Authenticate users that modify configuration"},{"$f":"'Source Data'!E1624","v":" settings."},{"$f":"'Source Data'!F1624","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authenticate users that modify configuration settings."}]
[{"$f":"'Source Data'!A1625","v":"gen.4"},{"$f":"'Source Data'!B1625","v":"m"},{"$f":"'Source Data'!C1625","v":0.1929237},{"$f":"'Source Data'!D1625","v":"Require multi-factor authentication for remote connection to the"},{"$f":"'Source Data'!E1625","v":" substation."},{"$f":"'Source Data'!F1625","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require multi-factor authentication for remote connection to the substation."}]
[{"$f":"'Source Data'!A1626","v":"gen.4"},{"$f":"'Source Data'!B1626","v":"m"},{"$f":"'Source Data'!C1626","v":0.16797280000000001},{"$f":"'Source Data'!D1626","v":"Restrict configuration access to limit who has access and can make configuration"},{"$f":"'Source Data'!E1626","v":" changes."},{"$f":"'Source Data'!F1626","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict configuration access to limit who has access and can make configuration changes."}]
[{"$f":"'Source Data'!A1627","v":"gen.4"},{"$f":"'Source Data'!B1627","v":"m"},{"$f":"'Source Data'!C1627","v":0.16816349999999999},{"$f":"'Source Data'!D1627","v":"Train personnel regarding"},{"$f":"'Source Data'!E1627","v":" spear-phishing."},{"$f":"'Source Data'!F1627","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Train personnel regarding spear-phishing."}]
[{"$f":"'Source Data'!A1628","v":"gen.4"},{"$f":"'Source Data'!B1628","v":"m"},{"$f":"'Source Data'!C1628","v":0.16292329999999999},{"$f":"'Source Data'!D1628","v":"Create audit logs of configuration"},{"$f":"'Source Data'!E1628","v":" changes."},{"$f":"'Source Data'!F1628","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Create audit logs of configuration changes."}]
[{"$f":"'Source Data'!A1629","v":"gen.5"},{"$f":"'Source Data'!B1629","v":"t"},{"$f":"'Source Data'!C1629","v":0.22828280000000001},{"$f":"'Source Data'!D1629","v":"Main transformer is out-of-service after being damaged through deluge system being remotely activated"},{"$f":"'Source Data'!E1629","v":0},{"$f":"'Source Data'!F1629","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Main transformer is out-of-service after being damaged through deluge system being remotely activated0"}]
[{"$f":"'Source Data'!A1630","v":"gen.5"},{"$f":"'Source Data'!B1630","v":"d"},{"$f":"'Source Data'!C1630","v":0.29915039999999998},{"$f":"'Source Data'!D1630","v":"A malicious technician within the company contracted to monitor and service the fire protection system on the plants substations installs a leave behind wireless network device during periodic maintenance. Using remote access and control of the system, the technician then alters the system settings, specifically, blocking the logic that generates fire alarms on the fire panel in the Main Control Rooms so no alarms are received in the control room. The technician then provides a false fire detection signal to the system. The fire signal activates the deluge system on the main turbine. This causes damage to the main turbine. The plant trips offline and the main turbine is disabled. [Note: For systems which only operate during emergencies, but which could damage or incapacitate equipment if caused to operate spuriously, it would seem prudent to periodically verify setpoints and control configurations.]"},{"$f":"'Source Data'!E1630","v":0},{"$f":"'Source Data'!F1630","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A malicious technician within the company contracted to monitor and service the fire protection system on the plants substations installs a leave behind wireless network device during periodic maintenance. Using remote access and control of the system, the technician then alters the system settings, specifically, blocking the logic that generates fire alarms on the fire panel in the Main Control Rooms so no alarms are received in the control room. The technician then provides a false fire detection signal to the system. The fire signal activates the deluge system on the main turbine. This causes damage to the main turbine. The plant trips offline and the main turbine is disabled. [Note: For systems which only operate during emergencies, but which could damage or incapacitate equipment if caused to operate spuriously, it would seem prudent to periodically verify setpoints and control configurations.]0"}]
[{"$f":"'Source Data'!A1631","v":"gen.5"},{"$f":"'Source Data'!B1631","v":"v"},{"$f":"'Source Data'!C1631","v":0.29142820000000003},{"$f":"'Source Data'!D1631","v":"Unnecessary access is permitted to critical functions such as commands to activate the deluge system and to make changes to the alerting"},{"$f":"'Source Data'!E1631","v":" logic."},{"$f":"'Source Data'!F1631","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unnecessary access is permitted to critical functions such as commands to activate the deluge system and to make changes to the alerting logic."}]
[{"$f":"'Source Data'!A1632","v":"gen.5"},{"$f":"'Source Data'!B1632","v":"v"},{"$f":"'Source Data'!C1632","v":0.29142829999999997},{"$f":"'Source Data'!D1632","v":"System permits unauthorized changes to the system"},{"$f":"'Source Data'!E1632","v":" settings."},{"$f":"'Source Data'!F1632","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits unauthorized changes to the system settings."}]
[{"$f":"'Source Data'!A1633","v":"gen.5"},{"$f":"'Source Data'!B1633","v":"v"},{"$f":"'Source Data'!C1633","v":0.29142839999999998},{"$f":"'Source Data'!D1633","v":"Configuration changes are not verified for correctness to prevent and detect unauthorized setting"},{"$f":"'Source Data'!E1633","v":" changes."},{"$f":"'Source Data'!F1633","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Configuration changes are not verified for correctness to prevent and detect unauthorized setting changes."}]
[{"$f":"'Source Data'!A1634","v":"gen.5"},{"$f":"'Source Data'!B1634","v":"i"},{"$f":"'Source Data'!C1634","v":0.29721130000000001},{"$f":"'Source Data'!D1634","v":"Units served by the fire protection system will trip offline resulting in associated costs to restart the unit and to purchase replacement power and challenges grid stability at the moment that the plant is taken offline."},{"$f":"'Source Data'!E1634","v":0},{"$f":"'Source Data'!F1634","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Units served by the fire protection system will trip offline resulting in associated costs to restart the unit and to purchase replacement power and challenges grid stability at the moment that the plant is taken offline.0"}]
[{"$f":"'Source Data'!A1635","v":"gen.5"},{"$f":"'Source Data'!B1635","v":"i"},{"$f":"'Source Data'!C1635","v":0.29721140000000001},{"$f":"'Source Data'!D1635","v":"Any unexpected plant trip stresses the major plant components (generator, turbine and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts."},{"$f":"'Source Data'!E1635","v":0},{"$f":"'Source Data'!F1635","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Any unexpected plant trip stresses the major plant components (generator, turbine and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts.0"}]
[{"$f":"'Source Data'!A1636","v":"gen.5"},{"$f":"'Source Data'!B1636","v":"i"},{"$f":"'Source Data'!C1636","v":0.29721150000000002},{"$f":"'Source Data'!D1636","v":"Long term down time of plant if damage to transformer is severe because of long lead time of new equipment."},{"$f":"'Source Data'!E1636","v":0},{"$f":"'Source Data'!F1636","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Long term down time of plant if damage to transformer is severe because of long lead time of new equipment.0"}]
[{"$f":"'Source Data'!A1637","v":"gen.5"},{"$f":"'Source Data'!B1637","v":"m"},{"$f":"'Source Data'!C1637","v":0.29816340000000002},{"$f":"'Source Data'!D1637","v":"Prevent remote modification of critical control"},{"$f":"'Source Data'!E1637","v":" logic."},{"$f":"'Source Data'!F1637","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Prevent remote modification of critical control logic."}]
[{"$f":"'Source Data'!A1638","v":"gen.5"},{"$f":"'Source Data'!B1638","v":"m"},{"$f":"'Source Data'!C1638","v":0.29292370000000001},{"$f":"'Source Data'!D1638","v":"Require physical connection to perform changes to critical control logic and to activate fire protection"},{"$f":"'Source Data'!E1638","v":" system."},{"$f":"'Source Data'!F1638","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require physical connection to perform changes to critical control logic and to activate fire protection system."}]
[{"$f":"'Source Data'!A1639","v":"gen.5"},{"$f":"'Source Data'!B1639","v":"m"},{"$f":"'Source Data'!C1639","v":0.26797280000000001},{"$f":"'Source Data'!D1639","v":"Implement configuration management to reduce the likelihood that one person can implement changes that impact the"},{"$f":"'Source Data'!E1639","v":" system."},{"$f":"'Source Data'!F1639","v":"track"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Implement configuration management to reduce the likelihood that one person can implement changes that impact the system."}]
[{"$f":"'Source Data'!A1640","v":"gen.5"},{"$f":"'Source Data'!B1640","v":"m"},{"$f":"'Source Data'!C1640","v":0.2681635},{"$f":"'Source Data'!D1640","v":"Restrict configuration access to limit who has access and can make configuration"},{"$f":"'Source Data'!E1640","v":" changes."},{"$f":"'Source Data'!F1640","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict configuration access to limit who has access and can make configuration changes."}]
[{"$f":"'Source Data'!A1641","v":"gen.5"},{"$f":"'Source Data'!B1641","v":"m"},{"$f":"'Source Data'!C1641","v":0.26292330000000003},{"$f":"'Source Data'!D1641","v":"Detect unauthorized devices û in this case, rouge wireless"},{"$f":"'Source Data'!E1641","v":" devices."},{"$f":"'Source Data'!F1641","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Detect unauthorized devices û in this case, rouge wireless devices."}]
[{"$f":"'Source Data'!A1642","v":"gen.5"},{"$f":"'Source Data'!B1642","v":"m"},{"$f":"'Source Data'!C1642","v":0.26797290000000001},{"$f":"'Source Data'!D1642","v":"Configure for least functionality by removing unnecessary interfaces from production"},{"$f":"'Source Data'!E1642","v":" devices."},{"$f":"'Source Data'!F1642","v":"secure design and implementation"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Configure for least functionality by removing unnecessary interfaces from production devices."}]
[{"$f":"'Source Data'!A1643","v":"gen.6"},{"$f":"'Source Data'!B1643","v":"t"},{"$f":"'Source Data'!C1643","v":0.32828279999999999},{"$f":"'Source Data'!D1643","v":"Precipitator HMI interface disabled through malware introduced through update."},{"$f":"'Source Data'!E1643","v":0},{"$f":"'Source Data'!F1643","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Precipitator HMI interface disabled through malware introduced through update.0"}]
[{"$f":"'Source Data'!A1644","v":"gen.6"},{"$f":"'Source Data'!B1644","v":"d"},{"$f":"'Source Data'!C1644","v":0.39915040000000002},{"$f":"'Source Data'!D1644","v":"A vendor is onsite and updating an HMI for the precipitator and installs software using a USB drive that is infected with malware. The malware disables the HMI for the precipitator, consequently disabling the local control capabilities for the precipitator. The loss of control can result in an environmental violation and will require the system to be restored. Restoration of the system may require that the precipitator be taken off line."},{"$f":"'Source Data'!E1644","v":0},{"$f":"'Source Data'!F1644","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A vendor is onsite and updating an HMI for the precipitator and installs software using a USB drive that is infected with malware. The malware disables the HMI for the precipitator, consequently disabling the local control capabilities for the precipitator. The loss of control can result in an environmental violation and will require the system to be restored. Restoration of the system may require that the precipitator be taken off line.0"}]
[{"$f":"'Source Data'!A1645","v":"gen.6"},{"$f":"'Source Data'!B1645","v":"v"},{"$f":"'Source Data'!C1645","v":0.3914282},{"$f":"'Source Data'!D1645","v":"Workforce not trained in proper procedures through allowing a USB drive with malware to be connected to a network"},{"$f":"'Source Data'!E1645","v":" resource."},{"$f":"'Source Data'!F1645","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Workforce not trained in proper procedures through allowing a USB drive with malware to be connected to a network resource."}]
[{"$f":"'Source Data'!A1646","v":"gen.6"},{"$f":"'Source Data'!B1646","v":"v"},{"$f":"'Source Data'!C1646","v":0.39142830000000001},{"$f":"'Source Data'!D1646","v":"System permits installation of"},{"$f":"'Source Data'!E1646","v":" malware."},{"$f":"'Source Data'!F1646","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits installation of malware."}]
[{"$f":"'Source Data'!A1647","v":"gen.6"},{"$f":"'Source Data'!B1647","v":"i"},{"$f":"'Source Data'!C1647","v":0.39721129999999999},{"$f":"'Source Data'!D1647","v":"Cost in diagnosis and system reconfiguration and testing."},{"$f":"'Source Data'!E1647","v":0},{"$f":"'Source Data'!F1647","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Cost in diagnosis and system reconfiguration and testing.0"}]
[{"$f":"'Source Data'!A1648","v":"gen.6"},{"$f":"'Source Data'!B1648","v":"i"},{"$f":"'Source Data'!C1648","v":0.39721139999999999},{"$f":"'Source Data'!D1648","v":"Potential environmental violation."},{"$f":"'Source Data'!E1648","v":0},{"$f":"'Source Data'!F1648","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential environmental violation.0"}]
[{"$f":"'Source Data'!A1649","v":"gen.6"},{"$f":"'Source Data'!B1649","v":"i"},{"$f":"'Source Data'!C1649","v":0.3972115},{"$f":"'Source Data'!D1649","v":"Potential for propagation to other system."},{"$f":"'Source Data'!E1649","v":0},{"$f":"'Source Data'!F1649","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential for propagation to other system.0"}]
[{"$f":"'Source Data'!A1650","v":"gen.6"},{"$f":"'Source Data'!B1650","v":"m"},{"$f":"'Source Data'!C1650","v":0.3981634},{"$f":"'Source Data'!D1650","v":"Train personnel regarding use of USB drives and proper anti-malware techniques  (e.g., scanning drives, alternate installation protocols, etc."},{"$f":"'Source Data'!E1650","v":" )."},{"$f":"'Source Data'!F1650","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Train personnel regarding use of USB drives and proper anti-malware techniques  (e.g., scanning drives, alternate installation protocols, etc. )."}]
[{"$f":"'Source Data'!A1651","v":"gen.6"},{"$f":"'Source Data'!B1651","v":"m"},{"$f":"'Source Data'!C1651","v":0.39292369999999999},{"$f":"'Source Data'!D1651","v":"Require two-person rule for configuration"},{"$f":"'Source Data'!E1651","v":" changes."},{"$f":"'Source Data'!F1651","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require two-person rule for configuration changes."}]
[{"$f":"'Source Data'!A1652","v":"gen.6"},{"$f":"'Source Data'!B1652","v":"m"},{"$f":"'Source Data'!C1652","v":0.36797279999999999},{"$f":"'Source Data'!D1652","v":"Test for malware before updating the"},{"$f":"'Source Data'!E1652","v":" software."},{"$f":"'Source Data'!F1652","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Test for malware before updating the software."}]
[{"$f":"'Source Data'!A1653","v":"gen.6"},{"$f":"'Source Data'!B1653","v":"m"},{"$f":"'Source Data'!C1653","v":0.36816349999999998},{"$f":"'Source Data'!D1653","v":"Create audit logs of configuration"},{"$f":"'Source Data'!E1653","v":" changes."},{"$f":"'Source Data'!F1653","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Create audit logs of configuration changes."}]
[{"$f":"'Source Data'!A1654","v":"gen.7"},{"$f":"'Source Data'!B1654","v":"t"},{"$f":"'Source Data'!C1654","v":0.42828280000000002},{"$f":"'Source Data'!D1654","v":"Hijacked Selective Catalytic Reduction System (SCR) is disabled leading to shutdown of power plant"},{"$f":"'Source Data'!E1654","v":0},{"$f":"'Source Data'!F1654","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Hijacked Selective Catalytic Reduction System (SCR) is disabled leading to shutdown of power plant0"}]
[{"$f":"'Source Data'!A1655","v":"gen.7"},{"$f":"'Source Data'!B1655","v":"d"},{"$f":"'Source Data'!C1655","v":0.49915039999999999},{"$f":"'Source Data'!D1655","v":"A vendor technician performs maintenance on the Programmable Logic Controller that controls the Ammonia Distribution system for the Selective Catalytic Reduction System (SCR).áThe technician installs malware-corrupted firmware û either inadvertently or maliciously - into the programmable logic controller when making the repairs. The malware executes when the unit is at full power and shuts the ammonia injection down. This causes the NOx discharge to continue to trend up above the permitted limit.áOperations takes action to reduce power to limit the NOx discharge.áA forced derate is put in place, but NOx continues to rise.áFinally, the decision is made to remove the unit from service to troubleshoot the problem."},{"$f":"'Source Data'!E1655","v":0},{"$f":"'Source Data'!F1655","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A vendor technician performs maintenance on the Programmable Logic Controller that controls the Ammonia Distribution system for the Selective Catalytic Reduction System (SCR).áThe technician installs malware-corrupted firmware û either inadvertently or maliciously - into the programmable logic controller when making the repairs. The malware executes when the unit is at full power and shuts the ammonia injection down. This causes the NOx discharge to continue to trend up above the permitted limit.áOperations takes action to reduce power to limit the NOx discharge.áA forced derate is put in place, but NOx continues to rise.áFinally, the decision is made to remove the unit from service to troubleshoot the problem.0"}]
[{"$f":"'Source Data'!A1656","v":"gen.7"},{"$f":"'Source Data'!B1656","v":"v"},{"$f":"'Source Data'!C1656","v":0.49142819999999998},{"$f":"'Source Data'!D1656","v":"System permits installation of malware onto the firmware of the programmable logic"},{"$f":"'Source Data'!E1656","v":" controller."},{"$f":"'Source Data'!F1656","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits installation of malware onto the firmware of the programmable logic controller."}]
[{"$f":"'Source Data'!A1657","v":"gen.7"},{"$f":"'Source Data'!B1657","v":"i"},{"$f":"'Source Data'!C1657","v":0.49142829999999998},{"$f":"'Source Data'!D1657","v":"Fines from unexpected emission exceedance leading to violation of environmental"},{"$f":"'Source Data'!E1657","v":"  license."},{"$f":"'Source Data'!F1657","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Fines from unexpected emission exceedance leading to violation of environmental  license."}]
[{"$f":"'Source Data'!A1658","v":"gen.7"},{"$f":"'Source Data'!B1658","v":"i"},{"$f":"'Source Data'!C1658","v":0.49721130000000002},{"$f":"'Source Data'!D1658","v":"Stricter emissions parameters by environmental regulator"},{"$f":"'Source Data'!E1658","v":0},{"$f":"'Source Data'!F1658","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Stricter emissions parameters by environmental regulator0"}]
[{"$f":"'Source Data'!A1659","v":"gen.7"},{"$f":"'Source Data'!B1659","v":"i"},{"$f":"'Source Data'!C1659","v":0.49721140000000003},{"$f":"'Source Data'!D1659","v":"Unit derate resulting in loss of revenue until the utility can satisfy regulatory requirements related to incident"},{"$f":"'Source Data'!E1659","v":0},{"$f":"'Source Data'!F1659","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unit derate resulting in loss of revenue until the utility can satisfy regulatory requirements related to incident0"}]
[{"$f":"'Source Data'!A1660","v":"gen.7"},{"$f":"'Source Data'!B1660","v":"i"},{"$f":"'Source Data'!C1660","v":0.49721149999999997},{"$f":"'Source Data'!D1660","v":"The abrupt shutdown of the SCR system stresses the components of the system and increases the likelihood of equipment damage"},{"$f":"'Source Data'!E1660","v":0},{"$f":"'Source Data'!F1660","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The abrupt shutdown of the SCR system stresses the components of the system and increases the likelihood of equipment damage0"}]
[{"$f":"'Source Data'!A1661","v":"gen.7"},{"$f":"'Source Data'!B1661","v":"m"},{"$f":"'Source Data'!C1661","v":0.49816339999999998},{"$f":"'Source Data'!D1661","v":"Test for malware before maintenance by performing a check on the installation"},{"$f":"'Source Data'!E1661","v":" media."},{"$f":"'Source Data'!F1661","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Test for malware before maintenance by performing a check on the installation media."}]
[{"$f":"'Source Data'!A1662","v":"gen.7"},{"$f":"'Source Data'!B1662","v":"m"},{"$f":"'Source Data'!C1662","v":0.49292370000000002},{"$f":"'Source Data'!D1662","v":"Check software file integrity (using digital signature or keyed hash) to validate firmware updates before"},{"$f":"'Source Data'!E1662","v":" installation."},{"$f":"'Source Data'!F1662","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Check software file integrity (using digital signature or keyed hash) to validate firmware updates before installation."}]
[{"$f":"'Source Data'!A1663","v":"gen.7"},{"$f":"'Source Data'!B1663","v":"m"},{"$f":"'Source Data'!C1663","v":0.46816350000000001},{"$f":"'Source Data'!D1663","v":"Test for malware after maintenance by scanning any serviced components for"},{"$f":"'Source Data'!E1663","v":" malware."},{"$f":"'Source Data'!F1663","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Test for malware after maintenance by scanning any serviced components for malware."}]
[{"$f":"'Source Data'!A1664","v":"gen.8"},{"$f":"'Source Data'!B1664","v":"t"},{"$f":"'Source Data'!C1664","v":0.52828280000000005},{"$f":"'Source Data'!D1664","v":"Plant tripped off-line through access gained through improperly configured diagnostic device on vendor maintained equipment"},{"$f":"'Source Data'!E1664","v":0},{"$f":"'Source Data'!F1664","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Plant tripped off-line through access gained through improperly configured diagnostic device on vendor maintained equipment0"}]
[{"$f":"'Source Data'!A1665","v":"gen.8"},{"$f":"'Source Data'!B1665","v":"d"},{"$f":"'Source Data'!C1665","v":0.59915039999999997},{"$f":"'Source Data'!D1665","v":"A technician leaves their laptop û previously infected by a virus û connected to the DCS network to run a diagnostic on smart valves. The laptop is connected to both the centralized remote monitoring system and the plant controls system, because the laptop remains connected to the corporate wireless network. The virus propagates to other computers on the system and starts polling networked assets sending commands that cause a flood of traffic in the DCS network and the centralized remote monitoring system. The commands overwhelm the processing ability of the network causing a logical failure and triggering a shutdown of the plant."},{"$f":"'Source Data'!E1665","v":0},{"$f":"'Source Data'!F1665","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A technician leaves their laptop û previously infected by a virus û connected to the DCS network to run a diagnostic on smart valves. The laptop is connected to both the centralized remote monitoring system and the plant controls system, because the laptop remains connected to the corporate wireless network. The virus propagates to other computers on the system and starts polling networked assets sending commands that cause a flood of traffic in the DCS network and the centralized remote monitoring system. The commands overwhelm the processing ability of the network causing a logical failure and triggering a shutdown of the plant.0"}]
[{"$f":"'Source Data'!A1666","v":"gen.8"},{"$f":"'Source Data'!B1666","v":"v"},{"$f":"'Source Data'!C1666","v":0.59142819999999996},{"$f":"'Source Data'!D1666","v":"System may become overwhelmed by traffic flooding or malformed traffic through the DCS"},{"$f":"'Source Data'!E1666","v":" network."},{"$f":"'Source Data'!F1666","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System may become overwhelmed by traffic flooding or malformed traffic through the DCS network."}]
[{"$f":"'Source Data'!A1667","v":"gen.8"},{"$f":"'Source Data'!B1667","v":"v"},{"$f":"'Source Data'!C1667","v":0.59142819999999996},{"$f":"'Source Data'!D1667","v":"System permits wireless access by unauthorized parties to the DCS"},{"$f":"'Source Data'!E1667","v":" network."},{"$f":"'Source Data'!F1667","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits wireless access by unauthorized parties to the DCS network."}]
[{"$f":"'Source Data'!A1668","v":"gen.8"},{"$f":"'Source Data'!B1668","v":"v"},{"$f":"'Source Data'!C1668","v":0.59142819999999996},{"$f":"'Source Data'!D1668","v":"Unnecessary access is permitted to networking components by putting a diagnostic component on the DCS network with unnecessary visibility to other"},{"$f":"'Source Data'!E1668","v":" components."},{"$f":"'Source Data'!F1668","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unnecessary access is permitted to networking components by putting a diagnostic component on the DCS network with unnecessary visibility to other components."}]
[{"$f":"'Source Data'!A1669","v":"gen.8"},{"$f":"'Source Data'!B1669","v":"v"},{"$f":"'Source Data'!C1669","v":0.59142819999999996},{"$f":"'Source Data'!D1669","v":"Network interfaces permit unnecessary traffic flows through the ôdual-homedö"},{"$f":"'Source Data'!E1669","v":" laptop."},{"$f":"'Source Data'!F1669","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Network interfaces permit unnecessary traffic flows through the ôdual-homedö laptop."}]
[{"$f":"'Source Data'!A1670","v":"gen.8"},{"$f":"'Source Data'!B1670","v":"i"},{"$f":"'Source Data'!C1670","v":0.59142830000000002},{"$f":"'Source Data'!D1670","v":"Infected assets will have to be cleaned and verified to be virus-free and - in some cases - reconfigured and verified operational."},{"$f":"'Source Data'!E1670","v":"  license."},{"$f":"'Source Data'!F1670","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Infected assets will have to be cleaned and verified to be virus-free and - in some cases - reconfigured and verified operational.  license."}]
[{"$f":"'Source Data'!A1671","v":"gen.8"},{"$f":"'Source Data'!B1671","v":"i"},{"$f":"'Source Data'!C1671","v":0.5972113},{"$f":"'Source Data'!D1671","v":"Any unexpected plant trip stresses the major plant components (generator, turbine, and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts."},{"$f":"'Source Data'!E1671","v":0},{"$f":"'Source Data'!F1671","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Any unexpected plant trip stresses the major plant components (generator, turbine, and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts.0"}]
[{"$f":"'Source Data'!A1672","v":"gen.8"},{"$f":"'Source Data'!B1672","v":"m"},{"$f":"'Source Data'!C1672","v":0.59721139999999995},{"$f":"'Source Data'!D1672","v":"Require safe mode for the DCS in a transient network traffic"},{"$f":"'Source Data'!E1672","v":" situation."},{"$f":"'Source Data'!F1672","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require safe mode for the DCS in a transient network traffic situation."}]
[{"$f":"'Source Data'!A1673","v":"gen.8"},{"$f":"'Source Data'!B1673","v":"m"},{"$f":"'Source Data'!C1673","v":0.59721150000000001},{"$f":"'Source Data'!D1673","v":"Detect unusual patterns as the DCS traffic flows are routine: network components can be configured to not generate rapid and random"},{"$f":"'Source Data'!E1673","v":" communications."},{"$f":"'Source Data'!F1673","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Detect unusual patterns as the DCS traffic flows are routine: network components can be configured to not generate rapid and random communications."}]
[{"$f":"'Source Data'!A1674","v":"gen.8"},{"$f":"'Source Data'!B1674","v":"m"},{"$f":"'Source Data'!C1674","v":0.59816340000000001},{"$f":"'Source Data'!D1674","v":"Train personnel in proper configuration requirements for assets connected to the DCS"},{"$f":"'Source Data'!E1674","v":" system."},{"$f":"'Source Data'!F1674","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Train personnel in proper configuration requirements for assets connected to the DCS system."}]
[{"$f":"'Source Data'!A1675","v":"gen.8"},{"$f":"'Source Data'!B1675","v":"m"},{"$f":"'Source Data'!C1675","v":0.59292370000000005},{"$f":"'Source Data'!D1675","v":"Authenticate devices connecting to the DCS"},{"$f":"'Source Data'!E1675","v":" network."},{"$f":"'Source Data'!F1675","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authenticate devices connecting to the DCS network."}]
[{"$f":"'Source Data'!A1676","v":"gen.8"},{"$f":"'Source Data'!B1676","v":"m"},{"$f":"'Source Data'!C1676","v":0.56816350000000004},{"$f":"'Source Data'!D1676","v":"Enforce least privilege for access to the"},{"$f":"'Source Data'!E1676","v":" DCS."},{"$f":"'Source Data'!F1676","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Enforce least privilege for access to the DCS."}]
[{"$f":"'Source Data'!A1677","v":"gen.9"},{"$f":"'Source Data'!B1677","v":"t"},{"$f":"'Source Data'!C1677","v":0.62828280000000003},{"$f":"'Source Data'!D1677","v":"Failure of continuous emission monitoring systems (CEMS) leads to violation"},{"$f":"'Source Data'!E1677","v":0},{"$f":"'Source Data'!F1677","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Failure of continuous emission monitoring systems (CEMS) leads to violation0"}]
[{"$f":"'Source Data'!A1678","v":"gen.9"},{"$f":"'Source Data'!B1678","v":"d"},{"$f":"'Source Data'!C1678","v":0.69915039999999995},{"$f":"'Source Data'!D1678","v":"The Continuous Emissions Monitoring System (CEMS) is configured for a connection to the plant control system and a remote connection to allow remote monitoring by the vendor. A threat agent launches a spear-phishing attack that is successful with one connected user. The threat agent uses the acquired credentials to access the CEMS to modify the control signal to provide false information to both the remote monitoring center and the control room. The false control signal shows a lower emission point giving the plant indication to cut back on emissions control. The lower control increases the actual emissions above the allowable rates set in the air permit. The situation persists long enough to lead to a violation of the plant emissions permit."},{"$f":"'Source Data'!E1678","v":0},{"$f":"'Source Data'!F1678","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The Continuous Emissions Monitoring System (CEMS) is configured for a connection to the plant control system and a remote connection to allow remote monitoring by the vendor. A threat agent launches a spear-phishing attack that is successful with one connected user. The threat agent uses the acquired credentials to access the CEMS to modify the control signal to provide false information to both the remote monitoring center and the control room. The false control signal shows a lower emission point giving the plant indication to cut back on emissions control. The lower control increases the actual emissions above the allowable rates set in the air permit. The situation persists long enough to lead to a violation of the plant emissions permit.0"}]
[{"$f":"'Source Data'!A1679","v":"gen.9"},{"$f":"'Source Data'!B1679","v":"v"},{"$f":"'Source Data'!C1679","v":0.69142820000000005},{"$f":"'Source Data'!D1679","v":"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing"},{"$f":"'Source Data'!E1679","v":" techniques."},{"$f":"'Source Data'!F1679","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing techniques."}]
[{"$f":"'Source Data'!A1680","v":"gen.9"},{"$f":"'Source Data'!B1680","v":"v"},{"$f":"'Source Data'!C1680","v":0.69142820000000005},{"$f":"'Source Data'!D1680","v":"Workforce may be unaware of recommended precautions to block social engineering attacks, such as"},{"$f":"'Source Data'!E1680","v":"  spear-phishing."},{"$f":"'Source Data'!F1680","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Workforce may be unaware of recommended precautions to block social engineering attacks, such as  spear-phishing."}]
[{"$f":"'Source Data'!A1681","v":"gen.9"},{"$f":"'Source Data'!B1681","v":"v"},{"$f":"'Source Data'!C1681","v":0.69142820000000005},{"$f":"'Source Data'!D1681","v":"Remote access may be obtained by unauthorized"},{"$f":"'Source Data'!E1681","v":" individuals."},{"$f":"'Source Data'!F1681","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Remote access may be obtained by unauthorized individuals."}]
[{"$f":"'Source Data'!A1682","v":"gen.9"},{"$f":"'Source Data'!B1682","v":"v"},{"$f":"'Source Data'!C1682","v":0.69142820000000005},{"$f":"'Source Data'!D1682","v":"System permits unauthorized changes through remote configuration"},{"$f":"'Source Data'!E1682","v":" capabilities."},{"$f":"'Source Data'!F1682","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits unauthorized changes through remote configuration capabilities."}]
[{"$f":"'Source Data'!A1683","v":"gen.9"},{"$f":"'Source Data'!B1683","v":"i"},{"$f":"'Source Data'!C1683","v":0.6914283},{"$f":"'Source Data'!D1683","v":"Unexpected exceedance on the plants environmental emissions leads to violation of environmental license with the regulator and subsequent fines."},{"$f":"'Source Data'!E1683","v":"  license."},{"$f":"'Source Data'!F1683","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unexpected exceedance on the plants environmental emissions leads to violation of environmental license with the regulator and subsequent fines.  license."}]
[{"$f":"'Source Data'!A1684","v":"gen.9"},{"$f":"'Source Data'!B1684","v":"i"},{"$f":"'Source Data'!C1684","v":0.69721129999999998},{"$f":"'Source Data'!D1684","v":"Stricter emissions parameters are specified by the environmental department."},{"$f":"'Source Data'!E1684","v":0},{"$f":"'Source Data'!F1684","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Stricter emissions parameters are specified by the environmental department.0"}]
[{"$f":"'Source Data'!A1685","v":"gen.9"},{"$f":"'Source Data'!B1685","v":"i"},{"$f":"'Source Data'!C1685","v":0.69721140000000004},{"$f":"'Source Data'!D1685","v":"Bad press for the utility because environmental incidents are public record."},{"$f":"'Source Data'!E1685","v":0},{"$f":"'Source Data'!F1685","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Bad press for the utility because environmental incidents are public record.0"}]
[{"$f":"'Source Data'!A1686","v":"gen.9"},{"$f":"'Source Data'!B1686","v":"m"},{"$f":"'Source Data'!C1686","v":0.69721149999999998},{"$f":"'Source Data'!D1686","v":"Train personnel regarding social engineering"},{"$f":"'Source Data'!E1686","v":" techniques."},{"$f":"'Source Data'!F1686","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Train personnel regarding social engineering techniques."}]
[{"$f":"'Source Data'!A1687","v":"gen.9"},{"$f":"'Source Data'!B1687","v":"m"},{"$f":"'Source Data'!C1687","v":0.69816339999999999},{"$f":"'Source Data'!D1687","v":"Require read-only access for remote monitoring"},{"$f":"'Source Data'!E1687","v":" capabilities."},{"$f":"'Source Data'!F1687","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require read-only access for remote monitoring capabilities."}]
[{"$f":"'Source Data'!A1688","v":"gen.9"},{"$f":"'Source Data'!B1688","v":"m"},{"$f":"'Source Data'!C1688","v":0.69292370000000003},{"$f":"'Source Data'!D1688","v":"Require two-person rule for major"},{"$f":"'Source Data'!E1688","v":" changes."},{"$f":"'Source Data'!F1688","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require two-person rule for major changes."},"Largely Implemented"]
[{"$f":"'Source Data'!A1689","v":"gen.10"},{"$f":"'Source Data'!B1689","v":"t"},{"$f":"'Source Data'!C1689","v":0.72828280000000001},{"$f":"'Source Data'!D1689","v":"Threat agent causes grid instability through control of dedicated data and voice lines between system operating center and plant"},{"$f":"'Source Data'!E1689","v":0},{"$f":"'Source Data'!F1689","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Threat agent causes grid instability through control of dedicated data and voice lines between system operating center and plant0"}]
[{"$f":"'Source Data'!A1690","v":"gen.10"},{"$f":"'Source Data'!B1690","v":"d"},{"$f":"'Source Data'!C1690","v":0.79915040000000004},{"$f":"'Source Data'!D1690","v":"Combined voice and data communication lines between the system operating center (also known as ôdispatchö or generation controls center) that regulates the plant output are maintained by the phone company. The lines are clearly marked as being dedicated for this purpose to ensure that phone repair technicians take special care around these lines. The utility uses the existing system and does not encrypt the data. A threat agent gains physical access to these lines and connects them to their own networking components to allow for remote access û setting up a man-in-the-middle attack. The threat agent sends erroneous signals to the plant to rapidly cut back on power output during a period of high load on the grid. Insufficient power and high load leads to grid instability."},{"$f":"'Source Data'!E1690","v":0},{"$f":"'Source Data'!F1690","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Combined voice and data communication lines between the system operating center (also known as ôdispatchö or generation controls center) that regulates the plant output are maintained by the phone company. The lines are clearly marked as being dedicated for this purpose to ensure that phone repair technicians take special care around these lines. The utility uses the existing system and does not encrypt the data. A threat agent gains physical access to these lines and connects them to their own networking components to allow for remote access û setting up a man-in-the-middle attack. The threat agent sends erroneous signals to the plant to rapidly cut back on power output during a period of high load on the grid. Insufficient power and high load leads to grid instability.0"}]
[{"$f":"'Source Data'!A1691","v":"gen.10"},{"$f":"'Source Data'!B1691","v":"v"},{"$f":"'Source Data'!C1691","v":0.79142820000000003},{"$f":"'Source Data'!D1691","v":"Physical access may be obtained by unauthorized individuals to communications channel"},{"$f":"'Source Data'!E1691","v":" components."},{"$f":"'Source Data'!F1691","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Physical access may be obtained by unauthorized individuals to communications channel components."},"Moderate"]
[{"$f":"'Source Data'!A1692","v":"gen.10"},{"$f":"'Source Data'!B1692","v":"v"},{"$f":"'Source Data'!C1692","v":0.79142820000000003},{"$f":"'Source Data'!D1692","v":"Unnecessary access is permitted to the communications channel in that the lines are unnecessarily marked by the phone"},{"$f":"'Source Data'!E1692","v":" company."},{"$f":"'Source Data'!F1692","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unnecessary access is permitted to the communications channel in that the lines are unnecessarily marked by the phone company."}]
[{"$f":"'Source Data'!A1693","v":"gen.10"},{"$f":"'Source Data'!B1693","v":"v"},{"$f":"'Source Data'!C1693","v":0.79142820000000003},{"$f":"'Source Data'!D1693","v":"System permits unauthorized changes to"},{"$f":"'Source Data'!E1693","v":" commands."},{"$f":"'Source Data'!F1693","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits unauthorized changes to commands."}]
[{"$f":"'Source Data'!A1694","v":"gen.10"},{"$f":"'Source Data'!B1694","v":"v"},{"$f":"'Source Data'!C1694","v":0.79142820000000003},{"$f":"'Source Data'!D1694","v":"Publicly accessible and/or third party controlled links used in plant/system operating center communication"},{"$f":"'Source Data'!E1694","v":" channels."},{"$f":"'Source Data'!F1694","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Publicly accessible and/or third party controlled links used in plant/system operating center communication channels."}]
[{"$f":"'Source Data'!A1695","v":"gen.10"},{"$f":"'Source Data'!B1695","v":"i"},{"$f":"'Source Data'!C1695","v":0.79142829999999997},{"$f":"'Source Data'!D1695","v":"The magnitude depends on grid conditions at the time (e.g., brownout, rolling blackout, etc.)."},{"$f":"'Source Data'!E1695","v":0},{"$f":"'Source Data'!F1695","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The magnitude depends on grid conditions at the time (e.g., brownout, rolling blackout, etc.).0"}]
[{"$f":"'Source Data'!A1696","v":"gen.10"},{"$f":"'Source Data'!B1696","v":"m"},{"$f":"'Source Data'!C1696","v":0.79721129999999996},{"$f":"'Source Data'!D1696","v":"Restrict physical access to communications channel"},{"$f":"'Source Data'!E1696","v":" components."},{"$f":"'Source Data'!F1696","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict physical access to communications channel components."},"Largely Implemented"]
[{"$f":"'Source Data'!A1697","v":"gen.10"},{"$f":"'Source Data'!B1697","v":"m"},{"$f":"'Source Data'!C1697","v":0.79721140000000001},{"$f":"'Source Data'!D1697","v":"Restrict remote access to not allow direct file transfer as a default"},{"$f":"'Source Data'!E1697","v":" access."},{"$f":"'Source Data'!F1697","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict remote access to not allow direct file transfer as a default access."},"Not Implemented"]
[{"$f":"'Source Data'!A1698","v":"gen.10"},{"$f":"'Source Data'!B1698","v":"m"},{"$f":"'Source Data'!C1698","v":0.79721149999999996},{"$f":"'Source Data'!D1698","v":"Encrypt communication paths to prevent man-in-the-middle"},{"$f":"'Source Data'!E1698","v":" attacks."},{"$f":"'Source Data'!F1698","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Encrypt communication paths to prevent man-in-the-middle attacks."}]
[{"$f":"'Source Data'!A1699","v":"gen.10"},{"$f":"'Source Data'!B1699","v":"m"},{"$f":"'Source Data'!C1699","v":0.79816339999999997},{"$f":"'Source Data'!D1699","v":"Restrict network"},{"$f":"'Source Data'!E1699","v":" access."},{"$f":"'Source Data'!F1699","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict network access."}]
[{"$f":"'Source Data'!A1700","v":"gen.10"},{"$f":"'Source Data'!B1700","v":"m"},{"$f":"'Source Data'!C1700","v":0.79292370000000001},{"$f":"'Source Data'!D1700","v":"Require acknowledgment from devices indicating what commands they"},{"$f":"'Source Data'!E1700","v":" received."},{"$f":"'Source Data'!F1700","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require acknowledgment from devices indicating what commands they received."}]
[{"$f":"'Source Data'!A1701","v":"gen.10"},{"$f":"'Source Data'!B1701","v":"m"},{"$f":"'Source Data'!C1701","v":0.79292370000000001},{"$f":"'Source Data'!D1701","v":"Require redundancy in communications methods"},{"$f":"'Source Data'!E1701","v":"  (e.g., back-up phone lines or cellular for voice communications)."},{"$f":"'Source Data'!F1701","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require redundancy in communications methods  (e.g., back-up phone lines or cellular for voice communications)."}]
[{"$f":"'Source Data'!A1702","v":"gen.11"},{"$f":"'Source Data'!B1702","v":"t"},{"$f":"'Source Data'!C1702","v":0.82828279999999999},{"$f":"'Source Data'!D1702","v":"Outage extended due to DCS HMI being disabled from malware exploiting a known, unpatched vulnerability"},{"$f":"'Source Data'!E1702","v":0},{"$f":"'Source Data'!F1702","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Outage extended due to DCS HMI being disabled from malware exploiting a known, unpatched vulnerability0"}]
[{"$f":"'Source Data'!A1703","v":"gen.11"},{"$f":"'Source Data'!B1703","v":"d"},{"$f":"'Source Data'!C1703","v":0.89915040000000002},{"$f":"'Source Data'!D1703","v":"A stable build of the DCS software was released. Several months later, the Distributed Control System (DCS) software is upgraded during a planned outage as suggested by the vendor. The upgrade process is lengthy and a number of security-related patches for the operating system were available to be installed. The decision is made to install older patches but delay installing the most recent patches to get the DCS operational and get the plant on-line. During the update process for the older patches, a technician uses an infected USB/laptop device on a computer in the DCS network. The malware exploits a vulnerability that was addressed in a recent patch that was not installed. The malware then spreads to the HMI stations interrupting communications through excessive network traffic impacting the control system processors. This delays the startup until the malware can be removed, the system can be patched, and the DCS reconfigured."},{"$f":"'Source Data'!E1703","v":0},{"$f":"'Source Data'!F1703","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A stable build of the DCS software was released. Several months later, the Distributed Control System (DCS) software is upgraded during a planned outage as suggested by the vendor. The upgrade process is lengthy and a number of security-related patches for the operating system were available to be installed. The decision is made to install older patches but delay installing the most recent patches to get the DCS operational and get the plant on-line. During the update process for the older patches, a technician uses an infected USB/laptop device on a computer in the DCS network. The malware exploits a vulnerability that was addressed in a recent patch that was not installed. The malware then spreads to the HMI stations interrupting communications through excessive network traffic impacting the control system processors. This delays the startup until the malware can be removed, the system can be patched, and the DCS reconfigured.0"}]
[{"$f":"'Source Data'!A1704","v":"gen.11"},{"$f":"'Source Data'!B1704","v":"v"},{"$f":"'Source Data'!C1704","v":0.8914282},{"$f":"'Source Data'!D1704","v":"System permits installation of malware on the HMI"},{"$f":"'Source Data'!E1704","v":" machines."},{"$f":"'Source Data'!F1704","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits installation of malware on the HMI machines."}]
[{"$f":"'Source Data'!A1705","v":"gen.11"},{"$f":"'Source Data'!B1705","v":"v"},{"$f":"'Source Data'!C1705","v":0.8914282},{"$f":"'Source Data'!D1705","v":"Workforce may be unaware of recommended precautions regarding USB/laptop"},{"$f":"'Source Data'!E1705","v":" usage."},{"$f":"'Source Data'!F1705","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Workforce may be unaware of recommended precautions regarding USB/laptop usage."}]
[{"$f":"'Source Data'!A1706","v":"gen.11"},{"$f":"'Source Data'!B1706","v":"v"},{"$f":"'Source Data'!C1706","v":0.8914282},{"$f":"'Source Data'!D1706","v":"System may become overwhelmed by traffic flooding or malformed traffic because of an exploited"},{"$f":"'Source Data'!E1706","v":" vulnerability."},{"$f":"'Source Data'!F1706","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System may become overwhelmed by traffic flooding or malformed traffic because of an exploited vulnerability."}]
[{"$f":"'Source Data'!A1707","v":"gen.11"},{"$f":"'Source Data'!B1707","v":"v"},{"$f":"'Source Data'!C1707","v":0.89142829999999995},{"$f":"'Source Data'!D1707","v":"Software patches are not checked regularly to ensure that they are current on the DCS operating"},{"$f":"'Source Data'!E1707","v":" system."},{"$f":"'Source Data'!F1707","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Software patches are not checked regularly to ensure that they are current on the DCS operating system."}]
[{"$f":"'Source Data'!A1708","v":"gen.11"},{"$f":"'Source Data'!B1708","v":"i"},{"$f":"'Source Data'!C1708","v":0.89721130000000004},{"$f":"'Source Data'!D1708","v":"Outage extended past the original plan leading to lost generation revenue."},{"$f":"'Source Data'!E1708","v":0},{"$f":"'Source Data'!F1708","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Outage extended past the original plan leading to lost generation revenue.0"}]
[{"$f":"'Source Data'!A1709","v":"gen.11"},{"$f":"'Source Data'!B1709","v":"m"},{"$f":"'Source Data'!C1709","v":0.89721139999999999},{"$f":"'Source Data'!D1709","v":"Check software execution integrity, since software may be compromised when loaded for"},{"$f":"'Source Data'!E1709","v":" execution."},{"$f":"'Source Data'!F1709","v":"check integrity"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Check software execution integrity, since software may be compromised when loaded for execution."}]
[{"$f":"'Source Data'!A1710","v":"gen.11"},{"$f":"'Source Data'!B1710","v":"m"},{"$f":"'Source Data'!C1710","v":0.89721150000000005},{"$f":"'Source Data'!D1710","v":"Train personnel under a user awareness training program that includes portable media"},{"$f":"'Source Data'!E1710","v":" guidelines."},{"$f":"'Source Data'!F1710","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Train personnel under a user awareness training program that includes portable media guidelines."}]
[{"$f":"'Source Data'!A1711","v":"gen.11"},{"$f":"'Source Data'!B1711","v":"m"},{"$f":"'Source Data'!C1711","v":0.89816339999999995},{"$f":"'Source Data'!D1711","v":"Maintain patches and fully evaluate the risk of delaying patches against the potential impact of the"},{"$f":"'Source Data'!E1711","v":" patch."},{"$f":"'Source Data'!F1711","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Maintain patches and fully evaluate the risk of delaying patches against the potential impact of the patch."}]
[{"$f":"'Source Data'!A1712","v":"gen.11"},{"$f":"'Source Data'!B1712","v":"m"},{"$f":"'Source Data'!C1712","v":0.89292369999999999},{"$f":"'Source Data'!D1712","v":"Detect abnormal output"},{"$f":"'Source Data'!E1712","v":"  (unexpected communications)."},{"$f":"'Source Data'!F1712","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Detect abnormal output  (unexpected communications)."}]
[{"$f":"'Source Data'!A1713","v":"gen.12"},{"$f":"'Source Data'!B1713","v":"t"},{"$f":"'Source Data'!C1713","v":0.92828279999999996},{"$f":"'Source Data'!D1713","v":"Chemical inventory process control system not properly patched leading to compromised inventory controls of hazardous chemicals"},{"$f":"'Source Data'!E1713","v":0},{"$f":"'Source Data'!F1713","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Chemical inventory process control system not properly patched leading to compromised inventory controls of hazardous chemicals0"}]
[{"$f":"'Source Data'!A1714","v":"gen.12"},{"$f":"'Source Data'!B1714","v":"d"},{"$f":"'Source Data'!C1714","v":0.99915039999999999},{"$f":"'Source Data'!D1714","v":"A threat agent is able to gain access to the corporate chemical inventory process control system by exploiting a known vulnerability that has not yet been patched. Once the threat agent is able to access the chemical inventory process control system, the threat agent is able to adjust the inventory levels preventing needed chemicals from being ordered."},{"$f":"'Source Data'!E1714","v":0},{"$f":"'Source Data'!F1714","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent is able to gain access to the corporate chemical inventory process control system by exploiting a known vulnerability that has not yet been patched. Once the threat agent is able to access the chemical inventory process control system, the threat agent is able to adjust the inventory levels preventing needed chemicals from being ordered.0"}]
[{"$f":"'Source Data'!A1715","v":"gen.12"},{"$f":"'Source Data'!B1715","v":"v"},{"$f":"'Source Data'!C1715","v":0.99142819999999998},{"$f":"'Source Data'!D1715","v":"Software patches are not checked regularly to ensure that they are current in the corporate chemical inventory process control"},{"$f":"'Source Data'!E1715","v":" system."},{"$f":"'Source Data'!F1715","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Software patches are not checked regularly to ensure that they are current in the corporate chemical inventory process control system."}]
[{"$f":"'Source Data'!A1716","v":"gen.12"},{"$f":"'Source Data'!B1716","v":"v"},{"$f":"'Source Data'!C1716","v":0.99142830000000004},{"$f":"'Source Data'!D1716","v":"Unnecessary access is permitted to critical"},{"$f":"'Source Data'!E1716","v":" functions."},{"$f":"'Source Data'!F1716","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Unnecessary access is permitted to critical functions."}]
[{"$f":"'Source Data'!A1717","v":"gen.12"},{"$f":"'Source Data'!B1717","v":"i"},{"$f":"'Source Data'!C1717","v":0.99721130000000002},{"$f":"'Source Data'!D1717","v":"Potential impact on production depending on the chemicals that are missing when needed."},{"$f":"'Source Data'!E1717","v":0},{"$f":"'Source Data'!F1717","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Potential impact on production depending on the chemicals that are missing when needed.0"}]
[{"$f":"'Source Data'!A1718","v":"gen.12"},{"$f":"'Source Data'!B1718","v":"m"},{"$f":"'Source Data'!C1718","v":0.99721139999999997},{"$f":"'Source Data'!D1718","v":"Maintain patches on corporate chemical inventory process control"},{"$f":"'Source Data'!E1718","v":" system."},{"$f":"'Source Data'!F1718","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Maintain patches on corporate chemical inventory process control system."}]
[{"$f":"'Source Data'!A1719","v":"gen.12"},{"$f":"'Source Data'!B1719","v":"m"},{"$f":"'Source Data'!C1719","v":0.99721150000000003},{"$f":"'Source Data'!D1719","v":"Restrict access to the corporate chemical inventory process control"},{"$f":"'Source Data'!E1719","v":" system."},{"$f":"'Source Data'!F1719","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict access to the corporate chemical inventory process control system."}]
[{"$f":"'Source Data'!A1720","v":"gen.12"},{"$f":"'Source Data'!B1720","v":"m"},{"$f":"'Source Data'!C1720","v":0.99816340000000003},{"$f":"'Source Data'!D1720","v":"Require authentication to critical"},{"$f":"'Source Data'!E1720","v":" data."},{"$f":"'Source Data'!F1720","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require authentication to critical data."}]
[{"$f":"'Source Data'!A1721","v":"gen.13"},{"$f":"'Source Data'!B1721","v":"t"},{"$f":"'Source Data'!C1721","v":0.93828279999999997},{"$f":"'Source Data'!D1721","v":"Utility competitor gains advantage using Monitoring & Diagnostic (M&D) center to gain sensitive information on upcoming generation availability"},{"$f":"'Source Data'!E1721","v":0},{"$f":"'Source Data'!F1721","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility competitor gains advantage using Monitoring & Diagnostic (M&D) center to gain sensitive information on upcoming generation availability0"}]
[{"$f":"'Source Data'!A1722","v":"gen.13"},{"$f":"'Source Data'!B1722","v":"d"},{"$f":"'Source Data'!C1722","v":0.98915039999999999},{"$f":"'Source Data'!D1722","v":"A threat agent is able to gain access to the corporate An authorized user with the appropriate credentials is bribed or coerced by a threat agent to expose operational data on a dozen generation facilities through the M&D Center. The user collects information on the previous dayÆs operation, critical equipment status, and operational plans û including outage schedule - for the upcoming week. The authorized user sends the data to the threat agent via e-mail. The threat agent then uses the information to inform competitors bidding into the power market. inventory process control system by exploiting a known vulnerability that has not yet been patched. Once the threat agent is able to access the chemical inventory process control system, the threat agent is able to adjust the inventory levels preventing needed chemicals from being ordered."},{"$f":"'Source Data'!E1722","v":0},{"$f":"'Source Data'!F1722","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A threat agent is able to gain access to the corporate An authorized user with the appropriate credentials is bribed or coerced by a threat agent to expose operational data on a dozen generation facilities through the M&D Center. The user collects information on the previous dayÆs operation, critical equipment status, and operational plans û including outage schedule - for the upcoming week. The authorized user sends the data to the threat agent via e-mail. The threat agent then uses the information to inform competitors bidding into the power market. inventory process control system by exploiting a known vulnerability that has not yet been patched. Once the threat agent is able to access the chemical inventory process control system, the threat agent is able to adjust the inventory levels preventing needed chemicals from being ordered.0"}]
[{"$f":"'Source Data'!A1723","v":"gen.13"},{"$f":"'Source Data'!B1723","v":"v"},{"$f":"'Source Data'!C1723","v":0.98142819999999997},{"$f":"'Source Data'!D1723","v":"Users and hardware/software entities are given access unnecessary for their roles. The M&D center has access to both plant operational and information informing strategic power market decision which may not be necessary for the core function of the M&D"},{"$f":"'Source Data'!E1723","v":" center."},{"$f":"'Source Data'!F1723","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Users and hardware/software entities are given access unnecessary for their roles. The M&D center has access to both plant operational and information informing strategic power market decision which may not be necessary for the core function of the M&D center."}]
[{"$f":"'Source Data'!A1724","v":"gen.13"},{"$f":"'Source Data'!B1724","v":"v"},{"$f":"'Source Data'!C1724","v":0.98142830000000003},{"$f":"'Source Data'!D1724","v":"Network interfaces permit unnecessary traffic flows to the"},{"$f":"'Source Data'!E1724","v":" Internet."},{"$f":"'Source Data'!F1724","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Network interfaces permit unnecessary traffic flows to the Internet."}]
[{"$f":"'Source Data'!A1725","v":"gen.13"},{"$f":"'Source Data'!B1725","v":"i"},{"$f":"'Source Data'!C1725","v":0.98721130000000001},{"$f":"'Source Data'!D1725","v":"Utility loss of revenue due to disadvantage in bidding into power marketsmpact on production depending on the chemicals that are missing when needed."},{"$f":"'Source Data'!E1725","v":0},{"$f":"'Source Data'!F1725","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Utility loss of revenue due to disadvantage in bidding into power marketsmpact on production depending on the chemicals that are missing when needed.0"}]
[{"$f":"'Source Data'!A1726","v":"gen.13"},{"$f":"'Source Data'!B1726","v":"m"},{"$f":"'Source Data'!C1726","v":0.98721150000000002},{"$f":"'Source Data'!D1726","v":"Enforce least privilege for access to the various databases and"},{"$f":"'Source Data'!E1726","v":" plans."},{"$f":"'Source Data'!F1726","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Enforce least privilege for access to the various databases and plans."}]
[{"$f":"'Source Data'!A1727","v":"gen.13"},{"$f":"'Source Data'!B1727","v":"m"},{"$f":"'Source Data'!C1727","v":0.98816340000000003},{"$f":"'Source Data'!D1727","v":"Detect abnormal output (unexpected data or destinations) in operations network"},{"$f":"'Source Data'!E1727","v":" traffic."},{"$f":"'Source Data'!F1727","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Detect abnormal output (unexpected data or destinations) in operations network traffic."}]
[{"$f":"'Source Data'!A1728","v":"gen.14"},{"$f":"'Source Data'!B1728","v":"t"},{"$f":"'Source Data'!C1728","v":0.94828279999999998},{"$f":"'Source Data'!D1728","v":"Generation assets taken off line by disrupted microwave communications"},{"$f":"'Source Data'!E1728","v":0},{"$f":"'Source Data'!F1728","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Generation assets taken off line by disrupted microwave communications0"}]
[{"$f":"'Source Data'!A1729","v":"gen.14"},{"$f":"'Source Data'!B1729","v":"d"},{"$f":"'Source Data'!C1729","v":0.97915039999999998},{"$f":"'Source Data'!D1729","v":"A criminal threat agent is able to gain access to the Microwave Communication used for the long-distance communication among the plant switchyard assets, transformer telemetry, and the system operator constituting a Wide Area Network (WAN) of system interconnects. The threat agent has acquired the equipment needed to receive and transmit microwave communications. By establishing a line-of-sight position with the plant communication tower the agent is able to intercept information from over-the-air communications. These communications include substation telemetry and plant status information and can be used to control system response to interconnects. The threat agent determines the location needed to access the system to monitor critical communications of plant and switchyard status. Though a man-in-the-middle attack, the threat agent is able to send erroneous messages that generate a transformer fault. This, in turn, prompts automatic protective actions to open breakers isolating the main transformer. This disconnects the plant from the grid taking the unit offline and making the generation asset unavailable to the wider system."},{"$f":"'Source Data'!E1729","v":0},{"$f":"'Source Data'!F1729","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"A criminal threat agent is able to gain access to the Microwave Communication used for the long-distance communication among the plant switchyard assets, transformer telemetry, and the system operator constituting a Wide Area Network (WAN) of system interconnects. The threat agent has acquired the equipment needed to receive and transmit microwave communications. By establishing a line-of-sight position with the plant communication tower the agent is able to intercept information from over-the-air communications. These communications include substation telemetry and plant status information and can be used to control system response to interconnects. The threat agent determines the location needed to access the system to monitor critical communications of plant and switchyard status. Though a man-in-the-middle attack, the threat agent is able to send erroneous messages that generate a transformer fault. This, in turn, prompts automatic protective actions to open breakers isolating the main transformer. This disconnects the plant from the grid taking the unit offline and making the generation asset unavailable to the wider system.0"}]
[{"$f":"'Source Data'!A1730","v":"gen.14"},{"$f":"'Source Data'!B1730","v":"v"},{"$f":"'Source Data'!C1730","v":0.97142819999999996},{"$f":"'Source Data'!D1730","v":"System permits potentially harmful command sequences to be transmitted by a threat"},{"$f":"'Source Data'!E1730","v":" agent."},{"$f":"'Source Data'!F1730","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits potentially harmful command sequences to be transmitted by a threat agent."},"Moderate"]
[{"$f":"'Source Data'!A1731","v":"gen.14"},{"$f":"'Source Data'!B1731","v":"v"},{"$f":"'Source Data'!C1731","v":0.97142830000000002},{"$f":"'Source Data'!D1731","v":"Commands or other messages may be inserted on the network by unauthorized"},{"$f":"'Source Data'!E1731","v":" individuals."},{"$f":"'Source Data'!F1731","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Commands or other messages may be inserted on the network by unauthorized individuals."}]
[{"$f":"'Source Data'!A1732","v":"gen.14"},{"$f":"'Source Data'!B1732","v":"v"},{"$f":"'Source Data'!C1732","v":0.96142830000000001},{"$f":"'Source Data'!D1732","v":"Spoofed signal is either difficult or infeasible to distinguish from a legitimate"},{"$f":"'Source Data'!E1732","v":" signal."},{"$f":"'Source Data'!F1732","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Spoofed signal is either difficult or infeasible to distinguish from a legitimate signal."}]
[{"$f":"'Source Data'!A1733","v":"gen.14"},{"$f":"'Source Data'!B1733","v":"i"},{"$f":"'Source Data'!C1733","v":0.96722229999999998},{"$f":"'Source Data'!D1733","v":"Loss of Generation by separating the plant from system."},{"$f":"'Source Data'!E1733","v":0},{"$f":"'Source Data'!F1733","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Loss of Generation by separating the plant from system.0"}]
[{"$f":"'Source Data'!A1734","v":"gen.14"},{"$f":"'Source Data'!B1734","v":"i"},{"$f":"'Source Data'!C1734","v":0.9672113},{"$f":"'Source Data'!D1734","v":"System reliability is challenged by the unauthorized disconnection."},{"$f":"'Source Data'!E1734","v":0},{"$f":"'Source Data'!F1734","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System reliability is challenged by the unauthorized disconnection.0"}]
[{"$f":"'Source Data'!A1735","v":"gen.14"},{"$f":"'Source Data'!B1735","v":"m"},{"$f":"'Source Data'!C1735","v":0.9672115},{"$f":"'Source Data'!D1735","v":"Authenticate messages communicated among assets over the interconnect"},{"$f":"'Source Data'!E1735","v":" network."},{"$f":"'Source Data'!F1735","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Authenticate messages communicated among assets over the interconnect network."}]
[{"$f":"'Source Data'!A1736","v":"gen.14"},{"$f":"'Source Data'!B1736","v":"m"},{"$f":"'Source Data'!C1736","v":0.96816349999999995},{"$f":"'Source Data'!D1736","v":"Validate signal by verifying certain commands (e.g., disconnect) among"},{"$f":"'Source Data'!E1736","v":" assets."},{"$f":"'Source Data'!F1736","v":"verify"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Validate signal by verifying certain commands (e.g., disconnect) among assets."},"Partially Implemented"]
[{"$f":"'Source Data'!A1737","v":"gen.14"},{"$f":"'Source Data'!B1737","v":"m"},{"$f":"'Source Data'!C1737","v":0.97721150000000001},{"$f":"'Source Data'!D1737","v":"Define contingency plan for handling interconnects if the microwave WAN is in"},{"$f":"'Source Data'!E1737","v":" operable."},{"$f":"'Source Data'!F1737","v":"plan"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Define contingency plan for handling interconnects if the microwave WAN is in operable."}]
[{"$f":"'Source Data'!A1738","v":"gen.14"},{"$f":"'Source Data'!B1738","v":"m"},{"$f":"'Source Data'!C1738","v":0.97816340000000002},{"$f":"'Source Data'!D1738","v":"Require safe mode by having standard operating procedures that allow the interconnect protocols to operate in a default"},{"$f":"'Source Data'!E1738","v":" state."},{"$f":"'Source Data'!F1738","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require safe mode by having standard operating procedures that allow the interconnect protocols to operate in a default state."}]
[{"$f":"'Source Data'!A1739","v":"gen.14"},{"$f":"'Source Data'!B1739","v":"m"},{"$f":"'Source Data'!C1739","v":0.90721149999999995},{"$f":"'Source Data'!D1739","v":"Encrypt communication paths to prevent man-in-the-middle"},{"$f":"'Source Data'!E1739","v":" attacks."},{"$f":"'Source Data'!F1739","v":"encrypt"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Encrypt communication paths to prevent man-in-the-middle attacks."}]
[{"$f":"'Source Data'!A1740","v":"gen.14"},{"$f":"'Source Data'!B1740","v":"m"},{"$f":"'Source Data'!C1740","v":0.9581634},{"$f":"'Source Data'!D1740","v":"Require redundancy of communications of interconnect states for assets on the microwave WAN"},{"$f":"'Source Data'!E1740","v":" (e.g., rolling over to a system on the companies intranet temporarily, etc.)."},{"$f":"'Source Data'!F1740","v":"ensure availability"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require redundancy of communications of interconnect states for assets on the microwave WAN (e.g., rolling over to a system on the companies intranet temporarily, etc.)."}]
[{"$f":"'Source Data'!A1741","v":"gen.15"},{"$f":"'Source Data'!B1741","v":"t"},{"$f":"'Source Data'!C1741","v":0.94838279999999997},{"$f":"'Source Data'!D1741","v":"Plant tripped off-line through access gained through a compromised vendor remote connection"},{"$f":"'Source Data'!E1741","v":0},{"$f":"'Source Data'!F1741","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Plant tripped off-line through access gained through a compromised vendor remote connection0"}]
[{"$f":"'Source Data'!A1742","v":"gen.15"},{"$f":"'Source Data'!B1742","v":"d"},{"$f":"'Source Data'!C1742","v":0.97945040000000005},{"$f":"'Source Data'!D1742","v":"The threat agent, a disgruntled vendor employee, uses the authorization credentials and verification procedure to a secure remote maintenance solution. The remote access solution involves a vendor-maintained asset on the DCS network that prompts the utility to grant the asset access to the DCS network. In addition to the prompt, the procedure requires a separate call from the vendor to the utility describing the need to remotely connect before the utility will complete the connection. The threat agent claims the need to collect routine system performance information. The utility connects the vendor maintained computer to the DCS network, giving the threat agent access. The payload delivered by the threat agent is a modified system file that starts polling networked assets sending commands that cause a flood of traffic in the DCS network. The commands overwhelm the processing ability of the network causing loss of DCS control of the plant.  On loss of plant control the assigned operator initiates an immediate unit trip."},{"$f":"'Source Data'!E1742","v":0},{"$f":"'Source Data'!F1742","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The threat agent, a disgruntled vendor employee, uses the authorization credentials and verification procedure to a secure remote maintenance solution. The remote access solution involves a vendor-maintained asset on the DCS network that prompts the utility to grant the asset access to the DCS network. In addition to the prompt, the procedure requires a separate call from the vendor to the utility describing the need to remotely connect before the utility will complete the connection. The threat agent claims the need to collect routine system performance information. The utility connects the vendor maintained computer to the DCS network, giving the threat agent access. The payload delivered by the threat agent is a modified system file that starts polling networked assets sending commands that cause a flood of traffic in the DCS network. The commands overwhelm the processing ability of the network causing loss of DCS control of the plant.  On loss of plant control the assigned operator initiates an immediate unit trip.0"}]
[{"$f":"'Source Data'!A1743","v":"gen.15"},{"$f":"'Source Data'!B1743","v":"v"},{"$f":"'Source Data'!C1743","v":0.97152819999999995},{"$f":"'Source Data'!D1743","v":"System may become overwhelmed by traffic flooding or malformed traffic through the DCS"},{"$f":"'Source Data'!E1743","v":" network."},{"$f":"'Source Data'!F1743","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System may become overwhelmed by traffic flooding or malformed traffic through the DCS network."}]
[{"$f":"'Source Data'!A1744","v":"gen.15"},{"$f":"'Source Data'!B1744","v":"v"},{"$f":"'Source Data'!C1744","v":0.97178830000000005},{"$f":"'Source Data'!D1744","v":"Insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive"},{"$f":"'Source Data'!E1744","v":" data."},{"$f":"'Source Data'!F1744","v":"Insufficient Identity Validation or Background Checks (6.2.2.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data."}]
[{"$f":"'Source Data'!A1745","v":"gen.15"},{"$f":"'Source Data'!B1745","v":"v"},{"$f":"'Source Data'!C1745","v":0.96179829999999999},{"$f":"'Source Data'!D1745","v":"Publicly accessible and/or third-party control links"},{"$f":"'Source Data'!E1745","v":" used."},{"$f":"'Source Data'!F1745","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Publicly accessible and/or third-party control links used."}]
[{"$f":"'Source Data'!A1746","v":"gen.15"},{"$f":"'Source Data'!B1746","v":"v"},{"$f":"'Source Data'!C1746","v":0.97180820000000001},{"$f":"'Source Data'!D1746","v":"Design permits unnecessary"},{"$f":"'Source Data'!E1746","v":" privileges."},{"$f":"'Source Data'!F1746","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Design permits unnecessary privileges."}]
[{"$f":"'Source Data'!A1747","v":"gen.15"},{"$f":"'Source Data'!B1747","v":"v"},{"$f":"'Source Data'!C1747","v":0.97181830000000002},{"$f":"'Source Data'!D1747","v":"Presence of features or functions that may be misused by"},{"$f":"'Source Data'!E1747","v":" users."},{"$f":"'Source Data'!F1747","v":"API Abuse (6.3.2.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Presence of features or functions that may be misused by users."}]
[{"$f":"'Source Data'!A1748","v":"gen.15"},{"$f":"'Source Data'!B1748","v":"v"},{"$f":"'Source Data'!C1748","v":0.96182829999999997},{"$f":"'Source Data'!D1748","v":"System permits installation of"},{"$f":"'Source Data'!E1748","v":" malware."},{"$f":"'Source Data'!F1748","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits installation of malware."}]
[{"$f":"'Source Data'!A1749","v":"gen.15"},{"$f":"'Source Data'!B1749","v":"v"},{"$f":"'Source Data'!C1749","v":0.96192829999999996},{"$f":"'Source Data'!D1749","v":"Users lack visibility of threat activity, specifically unexpected access to network components or unusual traffic on the"},{"$f":"'Source Data'!E1749","v":" network."},{"$f":"'Source Data'!F1749","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Users lack visibility of threat activity, specifically unexpected access to network components or unusual traffic on the network."}]
[{"$f":"'Source Data'!A1750","v":"gen.15"},{"$f":"'Source Data'!B1750","v":"v"},{"$f":"'Source Data'!C1750","v":0.97562819999999995},{"$f":"'Source Data'!D1750","v":"Users and hardware/software entities are given access unnecessary for their roles to perform duties that should be"},{"$f":"'Source Data'!E1750","v":" separated."},{"$f":"'Source Data'!F1750","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Users and hardware/software entities are given access unnecessary for their roles to perform duties that should be separated."}]
[{"$f":"'Source Data'!A1751","v":"gen.15"},{"$f":"'Source Data'!B1751","v":"v"},{"$f":"'Source Data'!C1751","v":0.97572829999999999},{"$f":"'Source Data'!D1751","v":"Users lack visibility that unauthorized changes were made to the"},{"$f":"'Source Data'!E1751","v":" DCS."},{"$f":"'Source Data'!F1751","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Users lack visibility that unauthorized changes were made to the DCS."}]
[{"$f":"'Source Data'!A1752","v":"gen.15"},{"$f":"'Source Data'!B1752","v":"v"},{"$f":"'Source Data'!C1752","v":0.96582829999999997},{"$f":"'Source Data'!D1752","v":"System permits unauthorized changes by allowing remote access for vendors to do monitoring and"},{"$f":"'Source Data'!E1752","v":" maintenance."},{"$f":"'Source Data'!F1752","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits unauthorized changes by allowing remote access for vendors to do monitoring and maintenance."}]
[{"$f":"'Source Data'!A1753","v":"gen.15"},{"$f":"'Source Data'!B1753","v":"i"},{"$f":"'Source Data'!C1753","v":0.96592230000000001},{"$f":"'Source Data'!D1753","v":"Affected assets will have to be restored and verified operational."},{"$f":"'Source Data'!E1753","v":0},{"$f":"'Source Data'!F1753","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Affected assets will have to be restored and verified operational.0"}]
[{"$f":"'Source Data'!A1754","v":"gen.15"},{"$f":"'Source Data'!B1754","v":"i"},{"$f":"'Source Data'!C1754","v":0.96601130000000002},{"$f":"'Source Data'!D1754","v":"Trips result in costs to restart the unit and to purchase replacement power. An unexpected and sudden trips challenge grid stability at the moment that the plant is taken offline."},{"$f":"'Source Data'!E1754","v":0},{"$f":"'Source Data'!F1754","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Trips result in costs to restart the unit and to purchase replacement power. An unexpected and sudden trips challenge grid stability at the moment that the plant is taken offline.0"}]
[{"$f":"'Source Data'!A1755","v":"gen.15"},{"$f":"'Source Data'!B1755","v":"i"},{"$f":"'Source Data'!C1755","v":0.96611130000000001},{"$f":"'Source Data'!D1755","v":"Any unexpected plant trip stresses the major plant components (generator, turbine, and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts."},{"$f":"'Source Data'!E1755","v":0},{"$f":"'Source Data'!F1755","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Any unexpected plant trip stresses the major plant components (generator, turbine, and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts.0"}]
[{"$f":"'Source Data'!A1756","v":"gen.15"},{"$f":"'Source Data'!B1756","v":"m"},{"$f":"'Source Data'!C1756","v":0.96762150000000002},{"$f":"'Source Data'!D1756","v":"Train personnel in proper configuration requirements for assets connected to the DCS"},{"$f":"'Source Data'!E1756","v":" system."},{"$f":"'Source Data'!F1756","v":"train"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Train personnel in proper configuration requirements for assets connected to the DCS system."}]
[{"$f":"'Source Data'!A1757","v":"gen.15"},{"$f":"'Source Data'!B1757","v":"m"},{"$f":"'Source Data'!C1757","v":0.96636350000000004},{"$f":"'Source Data'!D1757","v":"Enforce least privilege for access to the DCS by limiting remote administrative access through vendor monitoring employee sessions for cases of configuration and file system"},{"$f":"'Source Data'!E1757","v":" changes."},{"$f":"'Source Data'!F1757","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Enforce least privilege for access to the DCS by limiting remote administrative access through vendor monitoring employee sessions for cases of configuration and file system changes."}]
[{"$f":"'Source Data'!A1758","v":"gen.15"},{"$f":"'Source Data'!B1758","v":"m"},{"$f":"'Source Data'!C1758","v":0.97764150000000005},{"$f":"'Source Data'!D1758","v":"Restrict remote access to not allow direct file transfer as a default"},{"$f":"'Source Data'!E1758","v":" privilege."},{"$f":"'Source Data'!F1758","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict remote access to not allow direct file transfer as a default privilege."}]
[{"$f":"'Source Data'!A1759","v":"gen.15"},{"$f":"'Source Data'!B1759","v":"m"},{"$f":"'Source Data'!C1759","v":0.97656339999999997},{"$f":"'Source Data'!D1759","v":"Require second-level authentication requiring management authorization for configuration changes and file transfers and ôescorted remote accessö requiring live monitoring of vendor access for potentially damaging"},{"$f":"'Source Data'!E1759","v":" actions."},{"$f":"'Source Data'!F1759","v":"authenticate"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require second-level authentication requiring management authorization for configuration changes and file transfers and ôescorted remote accessö requiring live monitoring of vendor access for potentially damaging actions."}]
[{"$f":"'Source Data'!A1760","v":"gen.15"},{"$f":"'Source Data'!B1760","v":"m"},{"$f":"'Source Data'!C1760","v":0.90661150000000001},{"$f":"'Source Data'!D1760","v":"Restrict configuration access to limit who has access and can make configuration"},{"$f":"'Source Data'!E1760","v":" changes."},{"$f":"'Source Data'!F1760","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict configuration access to limit who has access and can make configuration changes."}]
[{"$f":"'Source Data'!A1761","v":"gen.15"},{"$f":"'Source Data'!B1761","v":"m"},{"$f":"'Source Data'!C1761","v":0.95676340000000004},{"$f":"'Source Data'!D1761","v":"Create audit logs through the ability to record the remote access"},{"$f":"'Source Data'!E1761","v":" session."},{"$f":"'Source Data'!F1761","v":"audit"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Create audit logs through the ability to record the remote access session."}]
[{"$f":"'Source Data'!A1762","v":"gen.15"},{"$f":"'Source Data'!B1762","v":"m"},{"$f":"'Source Data'!C1762","v":0.96681150000000005},{"$f":"'Source Data'!D1762","v":"Detect unauthorized configuration changes to the"},{"$f":"'Source Data'!E1762","v":" asset."},{"$f":"'Source Data'!F1762","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Detect unauthorized configuration changes to the asset."}]
[{"$f":"'Source Data'!A1763","v":"gen.15"},{"$f":"'Source Data'!B1763","v":"m"},{"$f":"'Source Data'!C1763","v":0.96916349999999996},{"$f":"'Source Data'!D1763","v":"Automated configuration change"},{"$f":"'Source Data'!E1763","v":" detection."},{"$f":"'Source Data'!F1763","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Automated configuration change detection."}]
[{"$f":"'Source Data'!A1764","v":"gen.15"},{"$f":"'Source Data'!B1764","v":"m"},{"$f":"'Source Data'!C1764","v":0.9777015},{"$f":"'Source Data'!D1764","v":"Detect unauthorized access in network traffic between the vendor and the DCS"},{"$f":"'Source Data'!E1764","v":" device."},{"$f":"'Source Data'!F1764","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Detect unauthorized access in network traffic between the vendor and the DCS device."}]
[{"$f":"'Source Data'!A1765","v":"gen.15"},{"$f":"'Source Data'!B1765","v":"m"},{"$f":"'Source Data'!C1765","v":0.97871339999999996},{"$f":"'Source Data'!D1765","v":"Require intrusion detection and prevention"},{"$f":"'Source Data'!E1765","v":" detection."},{"$f":"'Source Data'!F1765","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require intrusion detection and prevention detection."}]
[{"$f":"'Source Data'!A1766","v":"gen.15"},{"$f":"'Source Data'!B1766","v":"m"},{"$f":"'Source Data'!C1766","v":0.94321149999999998},{"$f":"'Source Data'!D1766","v":"Detect abnormal behavior in machines and flag this"},{"$f":"'Source Data'!E1766","v":" behavior."},{"$f":"'Source Data'!F1766","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Detect abnormal behavior in machines and flag this behavior."}]
[{"$f":"'Source Data'!A1767","v":"gen.15"},{"$f":"'Source Data'!B1767","v":"m"},{"$f":"'Source Data'!C1767","v":0.95446339999999996},{"$f":"'Source Data'!D1767","v":"Require application whitelisting on the DCS"},{"$f":"'Source Data'!E1767","v":" network."},{"$f":"'Source Data'!F1767","v":"secure operations"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Require application whitelisting on the DCS network."}]
[{"$f":"'Source Data'!A1768","v":"gen.16"},{"$f":"'Source Data'!B1768","v":"t"},{"$f":"'Source Data'!C1768","v":0.94828279999999998},{"$f":"'Source Data'!D1768","v":"Black-Start Disruption"},{"$f":"'Source Data'!E1768","v":0},{"$f":"'Source Data'!F1768","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Black-Start Disruption0"}]
[{"$f":"'Source Data'!A1769","v":"gen.16"},{"$f":"'Source Data'!B1769","v":"d"},{"$f":"'Source Data'!C1769","v":0.97915039999999998},{"$f":"'Source Data'!D1769","v":"The physical attack is preceded by a cyber attack using malware to indicate false current/voltage transformer (CT/VT) readings. The malwareÆs intent in generating these readings is to falsely indicate the existence of 3 phase shorts  on one or more transmission facilities. The goal of the cyber attack is to create conditions that lead to unnecessary automated responses by select transmission protection equipment. The desired effect of these responses is to cause protection relays to open and close breakers in a manner that results in grid instability leading to the shutdown of electricity generation serving the grid segment under attack. The physical portion of the attack consists of destroying navigation locks or water level control gates on one or more hydroelectric units designated as ôblack-startö facilities. Destruction of the locks or gates results in the loss of water containment. While water volumes behind the generating units remain sufficient for black-start power generation, the force of water movement past the damaged locks or gates will hinder repairs. By the time the water levels have receded to a point which allows repair, the levels will likely be too low to support the level of power generation needed to conduct normal black-start operations. The results of the attack may be extended depending upon the time needed to raise the water to a level sufficient for power generation."},{"$f":"'Source Data'!E1769","v":0},{"$f":"'Source Data'!F1769","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The physical attack is preceded by a cyber attack using malware to indicate false current/voltage transformer (CT/VT) readings. The malwareÆs intent in generating these readings is to falsely indicate the existence of 3 phase shorts  on one or more transmission facilities. The goal of the cyber attack is to create conditions that lead to unnecessary automated responses by select transmission protection equipment. The desired effect of these responses is to cause protection relays to open and close breakers in a manner that results in grid instability leading to the shutdown of electricity generation serving the grid segment under attack. The physical portion of the attack consists of destroying navigation locks or water level control gates on one or more hydroelectric units designated as ôblack-startö facilities. Destruction of the locks or gates results in the loss of water containment. While water volumes behind the generating units remain sufficient for black-start power generation, the force of water movement past the damaged locks or gates will hinder repairs. By the time the water levels have receded to a point which allows repair, the levels will likely be too low to support the level of power generation needed to conduct normal black-start operations. The results of the attack may be extended depending upon the time needed to raise the water to a level sufficient for power generation.0"}]
[{"$f":"'Source Data'!A1770","v":"gen.16"},{"$f":"'Source Data'!B1770","v":"v"},{"$f":"'Source Data'!C1770","v":0.97142819999999996},{"$f":"'Source Data'!D1770","v":"System permits installation of"},{"$f":"'Source Data'!E1770","v":" malware."},{"$f":"'Source Data'!F1770","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits installation of malware."}]
[{"$f":"'Source Data'!A1771","v":"gen.16"},{"$f":"'Source Data'!B1771","v":"v"},{"$f":"'Source Data'!C1771","v":0.97142830000000002},{"$f":"'Source Data'!D1771","v":"Physical access may be obtained by unauthorized individuals to control system"},{"$f":"'Source Data'!E1771","v":" devices."},{"$f":"'Source Data'!F1771","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Physical access may be obtained by unauthorized individuals to control system devices."}]
[{"$f":"'Source Data'!A1772","v":"gen.16"},{"$f":"'Source Data'!B1772","v":"v"},{"$f":"'Source Data'!C1772","v":0.96142830000000001},{"$f":"'Source Data'!D1772","v":"System permits unauthorized changes to the"},{"$f":"'Source Data'!E1772","v":" configuration."},{"$f":"'Source Data'!F1772","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"System permits unauthorized changes to the configuration."}]
[{"$f":"'Source Data'!A1773","v":"gen.16"},{"$f":"'Source Data'!B1773","v":"i"},{"$f":"'Source Data'!C1773","v":0.96722229999999998},{"$f":"'Source Data'!D1773","v":"Affected assets will have to be restored and verified operational."},{"$f":"'Source Data'!E1773","v":0},{"$f":"'Source Data'!F1773","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Affected assets will have to be restored and verified operational.0"}]
[{"$f":"'Source Data'!A1774","v":"gen.16"},{"$f":"'Source Data'!B1774","v":"i"},{"$f":"'Source Data'!C1774","v":0.9672113},{"$f":"'Source Data'!D1774","v":"Time and expense to diagnose the problem."},{"$f":"'Source Data'!E1774","v":0},{"$f":"'Source Data'!F1774","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Time and expense to diagnose the problem.0"}]
[{"$f":"'Source Data'!A1775","v":"gen.16"},{"$f":"'Source Data'!B1775","v":"i"},{"$f":"'Source Data'!C1775","v":0.9672115},{"$f":"'Source Data'!D1775","v":"The magnitude depends on grid conditions at the time (e.g., brownout, rolling blackout, etc.)."},{"$f":"'Source Data'!E1775","v":0},{"$f":"'Source Data'!F1775","v":0},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"The magnitude depends on grid conditions at the time (e.g., brownout, rolling blackout, etc.).0"}]
[{"$f":"'Source Data'!A1776","v":"gen.16"},{"$f":"'Source Data'!B1776","v":"m"},{"$f":"'Source Data'!C1776","v":0.96816349999999995},{"$f":"'Source Data'!D1776","v":"Test for malware before updating the"},{"$f":"'Source Data'!E1776","v":" software."},{"$f":"'Source Data'!F1776","v":"test"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Test for malware before updating the software."}]
[{"$f":"'Source Data'!A1777","v":"gen.16"},{"$f":"'Source Data'!B1777","v":"m"},{"$f":"'Source Data'!C1777","v":0.97721150000000001},{"$f":"'Source Data'!D1777","v":"Restrict physical"},{"$f":"'Source Data'!E1777","v":" access."},{"$f":"'Source Data'!F1777","v":"control access"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Restrict physical access."}]
[{"$f":"'Source Data'!A1778","v":"gen.16"},{"$f":"'Source Data'!B1778","v":"m"},{"$f":"'Source Data'!C1778","v":0.97816340000000002},{"$f":"'Source Data'!D1778","v":"Detect unauthorized configuration"},{"$f":"'Source Data'!E1778","v":" changes."},{"$f":"'Source Data'!F1778","v":"detect"},{"$f":"Saves[[#This Row],[Value]]&Saves[[#This Row],[Specific]]","v":"Detect unauthorized configuration changes."}]

{"sheet":"Sheet1","index":5,"n_rows":1780,"n_cols":9,"rows_kept":1780,"cut":false,"hidden":true,"merged":[]}
["Category","Unique List",null,null,null,"Implementation","HML","X,space","0,1,3,9"]
[{"$f":"'Source Data'!A1","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B1,$A$2:$A$1905),,),)),\"\")","v":"ami.1"},{"$f":"LEFT(B2,FIND(TEXT(D2,\"#\"),B2)-2)","v":"ami"},{"$f":"1*MID(B2,MATCH(TRUE,ISNUMBER(1*MID(B2,ROW($1:$9),1)),0),COUNT(1*MID(B2,ROW($1:$9),1)))","v":1},null,"Fully Implemented","High","X",0]
[{"$f":"'Source Data'!A2","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B2,$A$2:$A$1905),,),)),\"\")","v":"ami.2"},{"$f":"LEFT(B3,FIND(TEXT(D3,\"#\"),B3)-2)","v":"ami"},{"$f":"1*MID(B3,MATCH(TRUE,ISNUMBER(1*MID(B3,ROW($1:$9),1)),0),COUNT(1*MID(B3,ROW($1:$9),1)))","v":2},null,"Largely Implemented","Moderate",null,1]
[{"$f":"'Source Data'!A3","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B3,$A$2:$A$1905),,),)),\"\")","v":"ami.3"},{"$f":"LEFT(B4,FIND(TEXT(D4,\"#\"),B4)-2)","v":"ami"},{"$f":"1*MID(B4,MATCH(TRUE,ISNUMBER(1*MID(B4,ROW($1:$9),1)),0),COUNT(1*MID(B4,ROW($1:$9),1)))","v":3},null,"Partially Implemented","Low",null,3]
[{"$f":"'Source Data'!A4","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B4,$A$2:$A$1905),,),)),\"\")","v":"ami.4"},{"$f":"LEFT(B5,FIND(TEXT(D5,\"#\"),B5)-2)","v":"ami"},{"$f":"1*MID(B5,MATCH(TRUE,ISNUMBER(1*MID(B5,ROW($1:$9),1)),0),COUNT(1*MID(B5,ROW($1:$9),1)))","v":4},null,"Not Implemented",null,null,9]
[{"$f":"'Source Data'!A5","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B5,$A$2:$A$1905),,),)),\"\")","v":"ami.5"},{"$f":"LEFT(B6,FIND(TEXT(D6,\"#\"),B6)-2)","v":"ami"},{"$f":"1*MID(B6,MATCH(TRUE,ISNUMBER(1*MID(B6,ROW($1:$9),1)),0),COUNT(1*MID(B6,ROW($1:$9),1)))","v":5}]
[{"$f":"'Source Data'!A6","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B6,$A$2:$A$1905),,),)),\"\")","v":"ami.6"},{"$f":"LEFT(B7,FIND(TEXT(D7,\"#\"),B7)-2)","v":"ami"},{"$f":"1*MID(B7,MATCH(TRUE,ISNUMBER(1*MID(B7,ROW($1:$9),1)),0),COUNT(1*MID(B7,ROW($1:$9),1)))","v":6}]
[{"$f":"'Source Data'!A7","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B7,$A$2:$A$1905),,),)),\"\")","v":"ami.7"},{"$f":"LEFT(B8,FIND(TEXT(D8,\"#\"),B8)-2)","v":"ami"},{"$f":"1*MID(B8,MATCH(TRUE,ISNUMBER(1*MID(B8,ROW($1:$9),1)),0),COUNT(1*MID(B8,ROW($1:$9),1)))","v":7}]
[{"$f":"'Source Data'!A8","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B8,$A$2:$A$1905),,),)),\"\")","v":"ami.8"},{"$f":"LEFT(B9,FIND(TEXT(D9,\"#\"),B9)-2)","v":"ami"},{"$f":"1*MID(B9,MATCH(TRUE,ISNUMBER(1*MID(B9,ROW($1:$9),1)),0),COUNT(1*MID(B9,ROW($1:$9),1)))","v":8}]
[{"$f":"'Source Data'!A9","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B9,$A$2:$A$1905),,),)),\"\")","v":"ami.9"},{"$f":"LEFT(B10,FIND(TEXT(D10,\"#\"),B10)-2)","v":"ami"},{"$f":"1*MID(B10,MATCH(TRUE,ISNUMBER(1*MID(B10,ROW($1:$9),1)),0),COUNT(1*MID(B10,ROW($1:$9),1)))","v":9}]
[{"$f":"'Source Data'!A10","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B10,$A$2:$A$1905),,),)),\"\")","v":"ami.10"},{"$f":"LEFT(B11,FIND(TEXT(D11,\"#\"),B11)-2)","v":"ami"},{"$f":"1*MID(B11,MATCH(TRUE,ISNUMBER(1*MID(B11,ROW($1:$9),1)),0),COUNT(1*MID(B11,ROW($1:$9),1)))","v":10}]
[{"$f":"'Source Data'!A11","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B11,$A$2:$A$1905),,),)),\"\")","v":"ami.11"},{"$f":"LEFT(B12,FIND(TEXT(D12,\"#\"),B12)-2)","v":"ami"},{"$f":"1*MID(B12,MATCH(TRUE,ISNUMBER(1*MID(B12,ROW($1:$9),1)),0),COUNT(1*MID(B12,ROW($1:$9),1)))","v":11}]
[{"$f":"'Source Data'!A12","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B12,$A$2:$A$1905),,),)),\"\")","v":"ami.12"},{"$f":"LEFT(B13,FIND(TEXT(D13,\"#\"),B13)-2)","v":"ami"},{"$f":"1*MID(B13,MATCH(TRUE,ISNUMBER(1*MID(B13,ROW($1:$9),1)),0),COUNT(1*MID(B13,ROW($1:$9),1)))","v":12}]
[{"$f":"'Source Data'!A13","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B13,$A$2:$A$1905),,),)),\"\")","v":"ami.13"},{"$f":"LEFT(B14,FIND(TEXT(D14,\"#\"),B14)-2)","v":"ami"},{"$f":"1*MID(B14,MATCH(TRUE,ISNUMBER(1*MID(B14,ROW($1:$9),1)),0),COUNT(1*MID(B14,ROW($1:$9),1)))","v":13}]
[{"$f":"'Source Data'!A14","v":"ami.1"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B14,$A$2:$A$1905),,),)),\"\")","v":"ami.14"},{"$f":"LEFT(B15,FIND(TEXT(D15,\"#\"),B15)-2)","v":"ami"},{"$f":"1*MID(B15,MATCH(TRUE,ISNUMBER(1*MID(B15,ROW($1:$9),1)),0),COUNT(1*MID(B15,ROW($1:$9),1)))","v":14}]
[{"$f":"'Source Data'!A15","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B15,$A$2:$A$1905),,),)),\"\")","v":"ami.15"},{"$f":"LEFT(B16,FIND(TEXT(D16,\"#\"),B16)-2)","v":"ami"},{"$f":"1*MID(B16,MATCH(TRUE,ISNUMBER(1*MID(B16,ROW($1:$9),1)),0),COUNT(1*MID(B16,ROW($1:$9),1)))","v":15}]
[{"$f":"'Source Data'!A16","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B16,$A$2:$A$1905),,),)),\"\")","v":"ami.16"},{"$f":"LEFT(B17,FIND(TEXT(D17,\"#\"),B17)-2)","v":"ami"},{"$f":"1*MID(B17,MATCH(TRUE,ISNUMBER(1*MID(B17,ROW($1:$9),1)),0),COUNT(1*MID(B17,ROW($1:$9),1)))","v":16}]
[{"$f":"'Source Data'!A17","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B17,$A$2:$A$1905),,),)),\"\")","v":"ami.17"},{"$f":"LEFT(B18,FIND(TEXT(D18,\"#\"),B18)-2)","v":"ami"},{"$f":"1*MID(B18,MATCH(TRUE,ISNUMBER(1*MID(B18,ROW($1:$9),1)),0),COUNT(1*MID(B18,ROW($1:$9),1)))","v":17}]
[{"$f":"'Source Data'!A18","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B18,$A$2:$A$1905),,),)),\"\")","v":"ami.18"},{"$f":"LEFT(B19,FIND(TEXT(D19,\"#\"),B19)-2)","v":"ami"},{"$f":"1*MID(B19,MATCH(TRUE,ISNUMBER(1*MID(B19,ROW($1:$9),1)),0),COUNT(1*MID(B19,ROW($1:$9),1)))","v":18}]
[{"$f":"'Source Data'!A19","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B19,$A$2:$A$1905),,),)),\"\")","v":"ami.19"},{"$f":"LEFT(B20,FIND(TEXT(D20,\"#\"),B20)-2)","v":"ami"},{"$f":"1*MID(B20,MATCH(TRUE,ISNUMBER(1*MID(B20,ROW($1:$9),1)),0),COUNT(1*MID(B20,ROW($1:$9),1)))","v":19}]
[{"$f":"'Source Data'!A20","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B20,$A$2:$A$1905),,),)),\"\")","v":"ami.20"},{"$f":"LEFT(B21,FIND(TEXT(D21,\"#\"),B21)-2)","v":"ami"},{"$f":"1*MID(B21,MATCH(TRUE,ISNUMBER(1*MID(B21,ROW($1:$9),1)),0),COUNT(1*MID(B21,ROW($1:$9),1)))","v":20}]
[{"$f":"'Source Data'!A21","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B21,$A$2:$A$1905),,),)),\"\")","v":"ami.21"},{"$f":"LEFT(B22,FIND(TEXT(D22,\"#\"),B22)-2)","v":"ami"},{"$f":"1*MID(B22,MATCH(TRUE,ISNUMBER(1*MID(B22,ROW($1:$9),1)),0),COUNT(1*MID(B22,ROW($1:$9),1)))","v":21}]
[{"$f":"'Source Data'!A22","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B22,$A$2:$A$1905),,),)),\"\")","v":"ami.22"},{"$f":"LEFT(B23,FIND(TEXT(D23,\"#\"),B23)-2)","v":"ami"},{"$f":"1*MID(B23,MATCH(TRUE,ISNUMBER(1*MID(B23,ROW($1:$9),1)),0),COUNT(1*MID(B23,ROW($1:$9),1)))","v":22}]
[{"$f":"'Source Data'!A23","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B23,$A$2:$A$1905),,),)),\"\")","v":"ami.23"},{"$f":"LEFT(B24,FIND(TEXT(D24,\"#\"),B24)-2)","v":"ami"},{"$f":"1*MID(B24,MATCH(TRUE,ISNUMBER(1*MID(B24,ROW($1:$9),1)),0),COUNT(1*MID(B24,ROW($1:$9),1)))","v":23}]
[{"$f":"'Source Data'!A24","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B24,$A$2:$A$1905),,),)),\"\")","v":"ami.24"},{"$f":"LEFT(B25,FIND(TEXT(D25,\"#\"),B25)-2)","v":"ami"},{"$f":"1*MID(B25,MATCH(TRUE,ISNUMBER(1*MID(B25,ROW($1:$9),1)),0),COUNT(1*MID(B25,ROW($1:$9),1)))","v":24}]
[{"$f":"'Source Data'!A25","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B25,$A$2:$A$1905),,),)),\"\")","v":"ami.25"},{"$f":"LEFT(B26,FIND(TEXT(D26,\"#\"),B26)-2)","v":"ami"},{"$f":"1*MID(B26,MATCH(TRUE,ISNUMBER(1*MID(B26,ROW($1:$9),1)),0),COUNT(1*MID(B26,ROW($1:$9),1)))","v":25}]
[{"$f":"'Source Data'!A26","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B26,$A$2:$A$1905),,),)),\"\")","v":"ami.26"},{"$f":"LEFT(B27,FIND(TEXT(D27,\"#\"),B27)-2)","v":"ami"},{"$f":"1*MID(B27,MATCH(TRUE,ISNUMBER(1*MID(B27,ROW($1:$9),1)),0),COUNT(1*MID(B27,ROW($1:$9),1)))","v":26}]
[{"$f":"'Source Data'!A27","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B27,$A$2:$A$1905),,),)),\"\")","v":"ami.27"},{"$f":"LEFT(B28,FIND(TEXT(D28,\"#\"),B28)-2)","v":"ami"},{"$f":"1*MID(B28,MATCH(TRUE,ISNUMBER(1*MID(B28,ROW($1:$9),1)),0),COUNT(1*MID(B28,ROW($1:$9),1)))","v":27}]
[{"$f":"'Source Data'!A28","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B28,$A$2:$A$1905),,),)),\"\")","v":"ami.28"},{"$f":"LEFT(B29,FIND(TEXT(D29,\"#\"),B29)-2)","v":"ami"},{"$f":"1*MID(B29,MATCH(TRUE,ISNUMBER(1*MID(B29,ROW($1:$9),1)),0),COUNT(1*MID(B29,ROW($1:$9),1)))","v":28}]
[{"$f":"'Source Data'!A29","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B29,$A$2:$A$1905),,),)),\"\")","v":"ami.29"},{"$f":"LEFT(B30,FIND(TEXT(D30,\"#\"),B30)-2)","v":"ami"},{"$f":"1*MID(B30,MATCH(TRUE,ISNUMBER(1*MID(B30,ROW($1:$9),1)),0),COUNT(1*MID(B30,ROW($1:$9),1)))","v":29}]
[{"$f":"'Source Data'!A30","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B30,$A$2:$A$1905),,),)),\"\")","v":"ami.30"},{"$f":"LEFT(B31,FIND(TEXT(D31,\"#\"),B31)-2)","v":"ami"},{"$f":"1*MID(B31,MATCH(TRUE,ISNUMBER(1*MID(B31,ROW($1:$9),1)),0),COUNT(1*MID(B31,ROW($1:$9),1)))","v":30}]
[{"$f":"'Source Data'!A31","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B31,$A$2:$A$1905),,),)),\"\")","v":"ami.31"},{"$f":"LEFT(B32,FIND(TEXT(D32,\"#\"),B32)-2)","v":"ami"},{"$f":"1*MID(B32,MATCH(TRUE,ISNUMBER(1*MID(B32,ROW($1:$9),1)),0),COUNT(1*MID(B32,ROW($1:$9),1)))","v":31}]
[{"$f":"'Source Data'!A32","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B32,$A$2:$A$1905),,),)),\"\")","v":"ami.32"},{"$f":"LEFT(B33,FIND(TEXT(D33,\"#\"),B33)-2)","v":"ami"},{"$f":"1*MID(B33,MATCH(TRUE,ISNUMBER(1*MID(B33,ROW($1:$9),1)),0),COUNT(1*MID(B33,ROW($1:$9),1)))","v":32}]
[{"$f":"'Source Data'!A33","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B33,$A$2:$A$1905),,),)),\"\")","v":"der.1"},{"$f":"LEFT(B34,FIND(TEXT(D34,\"#\"),B34)-2)","v":"der"},{"$f":"1*MID(B34,MATCH(TRUE,ISNUMBER(1*MID(B34,ROW($1:$9),1)),0),COUNT(1*MID(B34,ROW($1:$9),1)))","v":1}]
[{"$f":"'Source Data'!A34","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B34,$A$2:$A$1905),,),)),\"\")","v":"der.2"},{"$f":"LEFT(B35,FIND(TEXT(D35,\"#\"),B35)-2)","v":"der"},{"$f":"1*MID(B35,MATCH(TRUE,ISNUMBER(1*MID(B35,ROW($1:$9),1)),0),COUNT(1*MID(B35,ROW($1:$9),1)))","v":2}]
[{"$f":"'Source Data'!A35","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B35,$A$2:$A$1905),,),)),\"\")","v":"der.3"},{"$f":"LEFT(B36,FIND(TEXT(D36,\"#\"),B36)-2)","v":"der"},{"$f":"1*MID(B36,MATCH(TRUE,ISNUMBER(1*MID(B36,ROW($1:$9),1)),0),COUNT(1*MID(B36,ROW($1:$9),1)))","v":3}]
[{"$f":"'Source Data'!A36","v":"ami.2"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B36,$A$2:$A$1905),,),)),\"\")","v":"der.4"},{"$f":"LEFT(B37,FIND(TEXT(D37,\"#\"),B37)-2)","v":"der"},{"$f":"1*MID(B37,MATCH(TRUE,ISNUMBER(1*MID(B37,ROW($1:$9),1)),0),COUNT(1*MID(B37,ROW($1:$9),1)))","v":4}]
[{"$f":"'Source Data'!A37","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B37,$A$2:$A$1905),,),)),\"\")","v":"der.5"},{"$f":"LEFT(B38,FIND(TEXT(D38,\"#\"),B38)-2)","v":"der"},{"$f":"1*MID(B38,MATCH(TRUE,ISNUMBER(1*MID(B38,ROW($1:$9),1)),0),COUNT(1*MID(B38,ROW($1:$9),1)))","v":5}]
[{"$f":"'Source Data'!A38","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B38,$A$2:$A$1905),,),)),\"\")","v":"der.6"},{"$f":"LEFT(B39,FIND(TEXT(D39,\"#\"),B39)-2)","v":"der"},{"$f":"1*MID(B39,MATCH(TRUE,ISNUMBER(1*MID(B39,ROW($1:$9),1)),0),COUNT(1*MID(B39,ROW($1:$9),1)))","v":6}]
[{"$f":"'Source Data'!A39","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B39,$A$2:$A$1905),,),)),\"\")","v":"der.7"},{"$f":"LEFT(B40,FIND(TEXT(D40,\"#\"),B40)-2)","v":"der"},{"$f":"1*MID(B40,MATCH(TRUE,ISNUMBER(1*MID(B40,ROW($1:$9),1)),0),COUNT(1*MID(B40,ROW($1:$9),1)))","v":7}]
[{"$f":"'Source Data'!A40","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B40,$A$2:$A$1905),,),)),\"\")","v":"der.8"},{"$f":"LEFT(B41,FIND(TEXT(D41,\"#\"),B41)-2)","v":"der"},{"$f":"1*MID(B41,MATCH(TRUE,ISNUMBER(1*MID(B41,ROW($1:$9),1)),0),COUNT(1*MID(B41,ROW($1:$9),1)))","v":8}]
[{"$f":"'Source Data'!A41","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B41,$A$2:$A$1905),,),)),\"\")","v":"der.9"},{"$f":"LEFT(B42,FIND(TEXT(D42,\"#\"),B42)-2)","v":"der"},{"$f":"1*MID(B42,MATCH(TRUE,ISNUMBER(1*MID(B42,ROW($1:$9),1)),0),COUNT(1*MID(B42,ROW($1:$9),1)))","v":9}]
[{"$f":"'Source Data'!A42","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B42,$A$2:$A$1905),,),)),\"\")","v":"der.10"},{"$f":"LEFT(B43,FIND(TEXT(D43,\"#\"),B43)-2)","v":"der"},{"$f":"1*MID(B43,MATCH(TRUE,ISNUMBER(1*MID(B43,ROW($1:$9),1)),0),COUNT(1*MID(B43,ROW($1:$9),1)))","v":10}]
[{"$f":"'Source Data'!A43","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B43,$A$2:$A$1905),,),)),\"\")","v":"der.11"},{"$f":"LEFT(B44,FIND(TEXT(D44,\"#\"),B44)-2)","v":"der"},{"$f":"1*MID(B44,MATCH(TRUE,ISNUMBER(1*MID(B44,ROW($1:$9),1)),0),COUNT(1*MID(B44,ROW($1:$9),1)))","v":11}]
[{"$f":"'Source Data'!A44","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B44,$A$2:$A$1905),,),)),\"\")","v":"der.12"},{"$f":"LEFT(B45,FIND(TEXT(D45,\"#\"),B45)-2)","v":"der"},{"$f":"1*MID(B45,MATCH(TRUE,ISNUMBER(1*MID(B45,ROW($1:$9),1)),0),COUNT(1*MID(B45,ROW($1:$9),1)))","v":12}]
[{"$f":"'Source Data'!A45","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B45,$A$2:$A$1905),,),)),\"\")","v":"der.13"},{"$f":"LEFT(B46,FIND(TEXT(D46,\"#\"),B46)-2)","v":"der"},{"$f":"1*MID(B46,MATCH(TRUE,ISNUMBER(1*MID(B46,ROW($1:$9),1)),0),COUNT(1*MID(B46,ROW($1:$9),1)))","v":13}]
[{"$f":"'Source Data'!A46","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B46,$A$2:$A$1905),,),)),\"\")","v":"der.14"},{"$f":"LEFT(B47,FIND(TEXT(D47,\"#\"),B47)-2)","v":"der"},{"$f":"1*MID(B47,MATCH(TRUE,ISNUMBER(1*MID(B47,ROW($1:$9),1)),0),COUNT(1*MID(B47,ROW($1:$9),1)))","v":14}]
[{"$f":"'Source Data'!A47","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B47,$A$2:$A$1905),,),)),\"\")","v":"der.15"},{"$f":"LEFT(B48,FIND(TEXT(D48,\"#\"),B48)-2)","v":"der"},{"$f":"1*MID(B48,MATCH(TRUE,ISNUMBER(1*MID(B48,ROW($1:$9),1)),0),COUNT(1*MID(B48,ROW($1:$9),1)))","v":15}]
[{"$f":"'Source Data'!A48","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B48,$A$2:$A$1905),,),)),\"\")","v":"der.16"},{"$f":"LEFT(B49,FIND(TEXT(D49,\"#\"),B49)-2)","v":"der"},{"$f":"1*MID(B49,MATCH(TRUE,ISNUMBER(1*MID(B49,ROW($1:$9),1)),0),COUNT(1*MID(B49,ROW($1:$9),1)))","v":16}]
[{"$f":"'Source Data'!A49","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B49,$A$2:$A$1905),,),)),\"\")","v":"der.17"},{"$f":"LEFT(B50,FIND(TEXT(D50,\"#\"),B50)-2)","v":"der"},{"$f":"1*MID(B50,MATCH(TRUE,ISNUMBER(1*MID(B50,ROW($1:$9),1)),0),COUNT(1*MID(B50,ROW($1:$9),1)))","v":17}]
[{"$f":"'Source Data'!A50","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B50,$A$2:$A$1905),,),)),\"\")","v":"der.18"},{"$f":"LEFT(B51,FIND(TEXT(D51,\"#\"),B51)-2)","v":"der"},{"$f":"1*MID(B51,MATCH(TRUE,ISNUMBER(1*MID(B51,ROW($1:$9),1)),0),COUNT(1*MID(B51,ROW($1:$9),1)))","v":18}]
[{"$f":"'Source Data'!A51","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B51,$A$2:$A$1905),,),)),\"\")","v":"der.19"},{"$f":"LEFT(B52,FIND(TEXT(D52,\"#\"),B52)-2)","v":"der"},{"$f":"1*MID(B52,MATCH(TRUE,ISNUMBER(1*MID(B52,ROW($1:$9),1)),0),COUNT(1*MID(B52,ROW($1:$9),1)))","v":19}]
[{"$f":"'Source Data'!A52","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B52,$A$2:$A$1905),,),)),\"\")","v":"der.20"},{"$f":"LEFT(B53,FIND(TEXT(D53,\"#\"),B53)-2)","v":"der"},{"$f":"1*MID(B53,MATCH(TRUE,ISNUMBER(1*MID(B53,ROW($1:$9),1)),0),COUNT(1*MID(B53,ROW($1:$9),1)))","v":20}]
[{"$f":"'Source Data'!A53","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B53,$A$2:$A$1905),,),)),\"\")","v":"der.21"},{"$f":"LEFT(B54,FIND(TEXT(D54,\"#\"),B54)-2)","v":"der"},{"$f":"1*MID(B54,MATCH(TRUE,ISNUMBER(1*MID(B54,ROW($1:$9),1)),0),COUNT(1*MID(B54,ROW($1:$9),1)))","v":21}]
[{"$f":"'Source Data'!A54","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B54,$A$2:$A$1905),,),)),\"\")","v":"der.22"},{"$f":"LEFT(B55,FIND(TEXT(D55,\"#\"),B55)-2)","v":"der"},{"$f":"1*MID(B55,MATCH(TRUE,ISNUMBER(1*MID(B55,ROW($1:$9),1)),0),COUNT(1*MID(B55,ROW($1:$9),1)))","v":22}]
[{"$f":"'Source Data'!A55","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B55,$A$2:$A$1905),,),)),\"\")","v":"der.23"},{"$f":"LEFT(B56,FIND(TEXT(D56,\"#\"),B56)-2)","v":"der"},{"$f":"1*MID(B56,MATCH(TRUE,ISNUMBER(1*MID(B56,ROW($1:$9),1)),0),COUNT(1*MID(B56,ROW($1:$9),1)))","v":23}]
[{"$f":"'Source Data'!A56","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B56,$A$2:$A$1905),,),)),\"\")","v":"der.24"},{"$f":"LEFT(B57,FIND(TEXT(D57,\"#\"),B57)-2)","v":"der"},{"$f":"1*MID(B57,MATCH(TRUE,ISNUMBER(1*MID(B57,ROW($1:$9),1)),0),COUNT(1*MID(B57,ROW($1:$9),1)))","v":24}]
[{"$f":"'Source Data'!A57","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B57,$A$2:$A$1905),,),)),\"\")","v":"der.25"},{"$f":"LEFT(B58,FIND(TEXT(D58,\"#\"),B58)-2)","v":"der"},{"$f":"1*MID(B58,MATCH(TRUE,ISNUMBER(1*MID(B58,ROW($1:$9),1)),0),COUNT(1*MID(B58,ROW($1:$9),1)))","v":25}]
[{"$f":"'Source Data'!A58","v":"ami.3"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B58,$A$2:$A$1905),,),)),\"\")","v":"der.26"},{"$f":"LEFT(B59,FIND(TEXT(D59,\"#\"),B59)-2)","v":"der"},{"$f":"1*MID(B59,MATCH(TRUE,ISNUMBER(1*MID(B59,ROW($1:$9),1)),0),COUNT(1*MID(B59,ROW($1:$9),1)))","v":26}]
[{"$f":"'Source Data'!A59","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B59,$A$2:$A$1905),,),)),\"\")","v":"wampac.1"},{"$f":"LEFT(B60,FIND(TEXT(D60,\"#\"),B60)-2)","v":"wampac"},{"$f":"1*MID(B60,MATCH(TRUE,ISNUMBER(1*MID(B60,ROW($1:$9),1)),0),COUNT(1*MID(B60,ROW($1:$9),1)))","v":1}]
[{"$f":"'Source Data'!A60","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B60,$A$2:$A$1905),,),)),\"\")","v":"wampac.2"},{"$f":"LEFT(B61,FIND(TEXT(D61,\"#\"),B61)-2)","v":"wampac"},{"$f":"1*MID(B61,MATCH(TRUE,ISNUMBER(1*MID(B61,ROW($1:$9),1)),0),COUNT(1*MID(B61,ROW($1:$9),1)))","v":2}]
[{"$f":"'Source Data'!A61","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B61,$A$2:$A$1905),,),)),\"\")","v":"wampac.3"},{"$f":"LEFT(B62,FIND(TEXT(D62,\"#\"),B62)-2)","v":"wampac"},{"$f":"1*MID(B62,MATCH(TRUE,ISNUMBER(1*MID(B62,ROW($1:$9),1)),0),COUNT(1*MID(B62,ROW($1:$9),1)))","v":3}]
[{"$f":"'Source Data'!A62","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B62,$A$2:$A$1905),,),)),\"\")","v":"wampac.4"},{"$f":"LEFT(B63,FIND(TEXT(D63,\"#\"),B63)-2)","v":"wampac"},{"$f":"1*MID(B63,MATCH(TRUE,ISNUMBER(1*MID(B63,ROW($1:$9),1)),0),COUNT(1*MID(B63,ROW($1:$9),1)))","v":4}]
[{"$f":"'Source Data'!A63","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B63,$A$2:$A$1905),,),)),\"\")","v":"wampac.5"},{"$f":"LEFT(B64,FIND(TEXT(D64,\"#\"),B64)-2)","v":"wampac"},{"$f":"1*MID(B64,MATCH(TRUE,ISNUMBER(1*MID(B64,ROW($1:$9),1)),0),COUNT(1*MID(B64,ROW($1:$9),1)))","v":5}]
[{"$f":"'Source Data'!A64","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B64,$A$2:$A$1905),,),)),\"\")","v":"wampac.6"},{"$f":"LEFT(B65,FIND(TEXT(D65,\"#\"),B65)-2)","v":"wampac"},{"$f":"1*MID(B65,MATCH(TRUE,ISNUMBER(1*MID(B65,ROW($1:$9),1)),0),COUNT(1*MID(B65,ROW($1:$9),1)))","v":6}]
[{"$f":"'Source Data'!A65","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B65,$A$2:$A$1905),,),)),\"\")","v":"wampac.7"},{"$f":"LEFT(B66,FIND(TEXT(D66,\"#\"),B66)-2)","v":"wampac"},{"$f":"1*MID(B66,MATCH(TRUE,ISNUMBER(1*MID(B66,ROW($1:$9),1)),0),COUNT(1*MID(B66,ROW($1:$9),1)))","v":7}]
[{"$f":"'Source Data'!A66","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B66,$A$2:$A$1905),,),)),\"\")","v":"wampac.8"},{"$f":"LEFT(B67,FIND(TEXT(D67,\"#\"),B67)-2)","v":"wampac"},{"$f":"1*MID(B67,MATCH(TRUE,ISNUMBER(1*MID(B67,ROW($1:$9),1)),0),COUNT(1*MID(B67,ROW($1:$9),1)))","v":8}]
[{"$f":"'Source Data'!A67","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B67,$A$2:$A$1905),,),)),\"\")","v":"wampac.9"},{"$f":"LEFT(B68,FIND(TEXT(D68,\"#\"),B68)-2)","v":"wampac"},{"$f":"1*MID(B68,MATCH(TRUE,ISNUMBER(1*MID(B68,ROW($1:$9),1)),0),COUNT(1*MID(B68,ROW($1:$9),1)))","v":9}]
[{"$f":"'Source Data'!A68","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B68,$A$2:$A$1905),,),)),\"\")","v":"wampac.10"},{"$f":"LEFT(B69,FIND(TEXT(D69,\"#\"),B69)-2)","v":"wampac"},{"$f":"1*MID(B69,MATCH(TRUE,ISNUMBER(1*MID(B69,ROW($1:$9),1)),0),COUNT(1*MID(B69,ROW($1:$9),1)))","v":10}]
[{"$f":"'Source Data'!A69","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B69,$A$2:$A$1905),,),)),\"\")","v":"wampac.11"},{"$f":"LEFT(B70,FIND(TEXT(D70,\"#\"),B70)-2)","v":"wampac"},{"$f":"1*MID(B70,MATCH(TRUE,ISNUMBER(1*MID(B70,ROW($1:$9),1)),0),COUNT(1*MID(B70,ROW($1:$9),1)))","v":11}]
[{"$f":"'Source Data'!A70","v":"ami.4"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B70,$A$2:$A$1905),,),)),\"\")","v":"wampac.12"},{"$f":"LEFT(B71,FIND(TEXT(D71,\"#\"),B71)-2)","v":"wampac"},{"$f":"1*MID(B71,MATCH(TRUE,ISNUMBER(1*MID(B71,ROW($1:$9),1)),0),COUNT(1*MID(B71,ROW($1:$9),1)))","v":12}]
[{"$f":"'Source Data'!A71","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B71,$A$2:$A$1905),,),)),\"\")","v":"et.1"},{"$f":"LEFT(B72,FIND(TEXT(D72,\"#\"),B72)-2)","v":"et"},{"$f":"1*MID(B72,MATCH(TRUE,ISNUMBER(1*MID(B72,ROW($1:$9),1)),0),COUNT(1*MID(B72,ROW($1:$9),1)))","v":1}]
[{"$f":"'Source Data'!A72","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B72,$A$2:$A$1905),,),)),\"\")","v":"et.2"},{"$f":"LEFT(B73,FIND(TEXT(D73,\"#\"),B73)-2)","v":"et"},{"$f":"1*MID(B73,MATCH(TRUE,ISNUMBER(1*MID(B73,ROW($1:$9),1)),0),COUNT(1*MID(B73,ROW($1:$9),1)))","v":2}]
[{"$f":"'Source Data'!A73","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B73,$A$2:$A$1905),,),)),\"\")","v":"et.3"},{"$f":"LEFT(B74,FIND(TEXT(D74,\"#\"),B74)-2)","v":"et"},{"$f":"1*MID(B74,MATCH(TRUE,ISNUMBER(1*MID(B74,ROW($1:$9),1)),0),COUNT(1*MID(B74,ROW($1:$9),1)))","v":3}]
[{"$f":"'Source Data'!A74","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B74,$A$2:$A$1905),,),)),\"\")","v":"et.4"},{"$f":"LEFT(B75,FIND(TEXT(D75,\"#\"),B75)-2)","v":"et"},{"$f":"1*MID(B75,MATCH(TRUE,ISNUMBER(1*MID(B75,ROW($1:$9),1)),0),COUNT(1*MID(B75,ROW($1:$9),1)))","v":4}]
[{"$f":"'Source Data'!A75","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B75,$A$2:$A$1905),,),)),\"\")","v":"et.5"},{"$f":"LEFT(B76,FIND(TEXT(D76,\"#\"),B76)-2)","v":"et"},{"$f":"1*MID(B76,MATCH(TRUE,ISNUMBER(1*MID(B76,ROW($1:$9),1)),0),COUNT(1*MID(B76,ROW($1:$9),1)))","v":5}]
[{"$f":"'Source Data'!A76","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B76,$A$2:$A$1905),,),)),\"\")","v":"et.6"},{"$f":"LEFT(B77,FIND(TEXT(D77,\"#\"),B77)-2)","v":"et"},{"$f":"1*MID(B77,MATCH(TRUE,ISNUMBER(1*MID(B77,ROW($1:$9),1)),0),COUNT(1*MID(B77,ROW($1:$9),1)))","v":6}]
[{"$f":"'Source Data'!A77","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B77,$A$2:$A$1905),,),)),\"\")","v":"et.7"},{"$f":"LEFT(B78,FIND(TEXT(D78,\"#\"),B78)-2)","v":"et"},{"$f":"1*MID(B78,MATCH(TRUE,ISNUMBER(1*MID(B78,ROW($1:$9),1)),0),COUNT(1*MID(B78,ROW($1:$9),1)))","v":7}]
[{"$f":"'Source Data'!A78","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B78,$A$2:$A$1905),,),)),\"\")","v":"et.8"},{"$f":"LEFT(B79,FIND(TEXT(D79,\"#\"),B79)-2)","v":"et"},{"$f":"1*MID(B79,MATCH(TRUE,ISNUMBER(1*MID(B79,ROW($1:$9),1)),0),COUNT(1*MID(B79,ROW($1:$9),1)))","v":8}]
[{"$f":"'Source Data'!A79","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B79,$A$2:$A$1905),,),)),\"\")","v":"et.9"},{"$f":"LEFT(B80,FIND(TEXT(D80,\"#\"),B80)-2)","v":"et"},{"$f":"1*MID(B80,MATCH(TRUE,ISNUMBER(1*MID(B80,ROW($1:$9),1)),0),COUNT(1*MID(B80,ROW($1:$9),1)))","v":9}]
[{"$f":"'Source Data'!A80","v":"ami.5"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B80,$A$2:$A$1905),,),)),\"\")","v":"et.10"},{"$f":"LEFT(B81,FIND(TEXT(D81,\"#\"),B81)-2)","v":"et"},{"$f":"1*MID(B81,MATCH(TRUE,ISNUMBER(1*MID(B81,ROW($1:$9),1)),0),COUNT(1*MID(B81,ROW($1:$9),1)))","v":10}]
[{"$f":"'Source Data'!A81","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B81,$A$2:$A$1905),,),)),\"\")","v":"et.11"},{"$f":"LEFT(B82,FIND(TEXT(D82,\"#\"),B82)-2)","v":"et"},{"$f":"1*MID(B82,MATCH(TRUE,ISNUMBER(1*MID(B82,ROW($1:$9),1)),0),COUNT(1*MID(B82,ROW($1:$9),1)))","v":11}]
[{"$f":"'Source Data'!A82","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B82,$A$2:$A$1905),,),)),\"\")","v":"et.12"},{"$f":"LEFT(B83,FIND(TEXT(D83,\"#\"),B83)-2)","v":"et"},{"$f":"1*MID(B83,MATCH(TRUE,ISNUMBER(1*MID(B83,ROW($1:$9),1)),0),COUNT(1*MID(B83,ROW($1:$9),1)))","v":12}]
[{"$f":"'Source Data'!A83","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B83,$A$2:$A$1905),,),)),\"\")","v":"et.13"},{"$f":"LEFT(B84,FIND(TEXT(D84,\"#\"),B84)-2)","v":"et"},{"$f":"1*MID(B84,MATCH(TRUE,ISNUMBER(1*MID(B84,ROW($1:$9),1)),0),COUNT(1*MID(B84,ROW($1:$9),1)))","v":13}]
[{"$f":"'Source Data'!A84","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B84,$A$2:$A$1905),,),)),\"\")","v":"et.14"},{"$f":"LEFT(B85,FIND(TEXT(D85,\"#\"),B85)-2)","v":"et"},{"$f":"1*MID(B85,MATCH(TRUE,ISNUMBER(1*MID(B85,ROW($1:$9),1)),0),COUNT(1*MID(B85,ROW($1:$9),1)))","v":14}]
[{"$f":"'Source Data'!A85","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B85,$A$2:$A$1905),,),)),\"\")","v":"et.15"},{"$f":"LEFT(B86,FIND(TEXT(D86,\"#\"),B86)-2)","v":"et"},{"$f":"1*MID(B86,MATCH(TRUE,ISNUMBER(1*MID(B86,ROW($1:$9),1)),0),COUNT(1*MID(B86,ROW($1:$9),1)))","v":15}]
[{"$f":"'Source Data'!A86","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B86,$A$2:$A$1905),,),)),\"\")","v":"et.16"},{"$f":"LEFT(B87,FIND(TEXT(D87,\"#\"),B87)-2)","v":"et"},{"$f":"1*MID(B87,MATCH(TRUE,ISNUMBER(1*MID(B87,ROW($1:$9),1)),0),COUNT(1*MID(B87,ROW($1:$9),1)))","v":16}]
[{"$f":"'Source Data'!A87","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B87,$A$2:$A$1905),,),)),\"\")","v":"dr.1"},{"$f":"LEFT(B88,FIND(TEXT(D88,\"#\"),B88)-2)","v":"dr"},{"$f":"1*MID(B88,MATCH(TRUE,ISNUMBER(1*MID(B88,ROW($1:$9),1)),0),COUNT(1*MID(B88,ROW($1:$9),1)))","v":1}]
[{"$f":"'Source Data'!A88","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B88,$A$2:$A$1905),,),)),\"\")","v":"dr.2"},{"$f":"LEFT(B89,FIND(TEXT(D89,\"#\"),B89)-2)","v":"dr"},{"$f":"1*MID(B89,MATCH(TRUE,ISNUMBER(1*MID(B89,ROW($1:$9),1)),0),COUNT(1*MID(B89,ROW($1:$9),1)))","v":2}]
[{"$f":"'Source Data'!A89","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B89,$A$2:$A$1905),,),)),\"\")","v":"dr.3"},{"$f":"LEFT(B90,FIND(TEXT(D90,\"#\"),B90)-2)","v":"dr"},{"$f":"1*MID(B90,MATCH(TRUE,ISNUMBER(1*MID(B90,ROW($1:$9),1)),0),COUNT(1*MID(B90,ROW($1:$9),1)))","v":3}]
[{"$f":"'Source Data'!A90","v":"ami.6"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B90,$A$2:$A$1905),,),)),\"\")","v":"dr.4"},{"$f":"LEFT(B91,FIND(TEXT(D91,\"#\"),B91)-2)","v":"dr"},{"$f":"1*MID(B91,MATCH(TRUE,ISNUMBER(1*MID(B91,ROW($1:$9),1)),0),COUNT(1*MID(B91,ROW($1:$9),1)))","v":4}]
[{"$f":"'Source Data'!A91","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B91,$A$2:$A$1905),,),)),\"\")","v":"dr.5"},{"$f":"LEFT(B92,FIND(TEXT(D92,\"#\"),B92)-2)","v":"dr"},{"$f":"1*MID(B92,MATCH(TRUE,ISNUMBER(1*MID(B92,ROW($1:$9),1)),0),COUNT(1*MID(B92,ROW($1:$9),1)))","v":5}]
[{"$f":"'Source Data'!A92","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B92,$A$2:$A$1905),,),)),\"\")","v":"dr.6"},{"$f":"LEFT(B93,FIND(TEXT(D93,\"#\"),B93)-2)","v":"dr"},{"$f":"1*MID(B93,MATCH(TRUE,ISNUMBER(1*MID(B93,ROW($1:$9),1)),0),COUNT(1*MID(B93,ROW($1:$9),1)))","v":6}]
[{"$f":"'Source Data'!A93","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B93,$A$2:$A$1905),,),)),\"\")","v":"dr.7"},{"$f":"LEFT(B94,FIND(TEXT(D94,\"#\"),B94)-2)","v":"dr"},{"$f":"1*MID(B94,MATCH(TRUE,ISNUMBER(1*MID(B94,ROW($1:$9),1)),0),COUNT(1*MID(B94,ROW($1:$9),1)))","v":7}]
[{"$f":"'Source Data'!A94","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B94,$A$2:$A$1905),,),)),\"\")","v":"dgm.1"},{"$f":"LEFT(B95,FIND(TEXT(D95,\"#\"),B95)-2)","v":"dgm"},{"$f":"1*MID(B95,MATCH(TRUE,ISNUMBER(1*MID(B95,ROW($1:$9),1)),0),COUNT(1*MID(B95,ROW($1:$9),1)))","v":1}]
[{"$f":"'Source Data'!A95","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B95,$A$2:$A$1905),,),)),\"\")","v":"dgm.2"},{"$f":"LEFT(B96,FIND(TEXT(D96,\"#\"),B96)-2)","v":"dgm"},{"$f":"1*MID(B96,MATCH(TRUE,ISNUMBER(1*MID(B96,ROW($1:$9),1)),0),COUNT(1*MID(B96,ROW($1:$9),1)))","v":2}]
[{"$f":"'Source Data'!A96","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B96,$A$2:$A$1905),,),)),\"\")","v":"dgm.3"},{"$f":"LEFT(B97,FIND(TEXT(D97,\"#\"),B97)-2)","v":"dgm"},{"$f":"1*MID(B97,MATCH(TRUE,ISNUMBER(1*MID(B97,ROW($1:$9),1)),0),COUNT(1*MID(B97,ROW($1:$9),1)))","v":3}]
[{"$f":"'Source Data'!A97","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B97,$A$2:$A$1905),,),)),\"\")","v":"dgm.4"},{"$f":"LEFT(B98,FIND(TEXT(D98,\"#\"),B98)-2)","v":"dgm"},{"$f":"1*MID(B98,MATCH(TRUE,ISNUMBER(1*MID(B98,ROW($1:$9),1)),0),COUNT(1*MID(B98,ROW($1:$9),1)))","v":4}]
[{"$f":"'Source Data'!A98","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B98,$A$2:$A$1905),,),)),\"\")","v":"dgm.5"},{"$f":"LEFT(B99,FIND(TEXT(D99,\"#\"),B99)-2)","v":"dgm"},{"$f":"1*MID(B99,MATCH(TRUE,ISNUMBER(1*MID(B99,ROW($1:$9),1)),0),COUNT(1*MID(B99,ROW($1:$9),1)))","v":5}]
[{"$f":"'Source Data'!A99","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B99,$A$2:$A$1905),,),)),\"\")","v":"dgm.6"},{"$f":"LEFT(B100,FIND(TEXT(D100,\"#\"),B100)-2)","v":"dgm"},{"$f":"1*MID(B100,MATCH(TRUE,ISNUMBER(1*MID(B100,ROW($1:$9),1)),0),COUNT(1*MID(B100,ROW($1:$9),1)))","v":6}]
[{"$f":"'Source Data'!A100","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B100,$A$2:$A$1905),,),)),\"\")","v":"dgm.7"},{"$f":"LEFT(B101,FIND(TEXT(D101,\"#\"),B101)-2)","v":"dgm"},{"$f":"1*MID(B101,MATCH(TRUE,ISNUMBER(1*MID(B101,ROW($1:$9),1)),0),COUNT(1*MID(B101,ROW($1:$9),1)))","v":7}]
[{"$f":"'Source Data'!A101","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B101,$A$2:$A$1905),,),)),\"\")","v":"dgm.8"},{"$f":"LEFT(B102,FIND(TEXT(D102,\"#\"),B102)-2)","v":"dgm"},{"$f":"1*MID(B102,MATCH(TRUE,ISNUMBER(1*MID(B102,ROW($1:$9),1)),0),COUNT(1*MID(B102,ROW($1:$9),1)))","v":8}]
[{"$f":"'Source Data'!A102","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B102,$A$2:$A$1905),,),)),\"\")","v":"dgm.9"},{"$f":"LEFT(B103,FIND(TEXT(D103,\"#\"),B103)-2)","v":"dgm"},{"$f":"1*MID(B103,MATCH(TRUE,ISNUMBER(1*MID(B103,ROW($1:$9),1)),0),COUNT(1*MID(B103,ROW($1:$9),1)))","v":9}]
[{"$f":"'Source Data'!A103","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B103,$A$2:$A$1905),,),)),\"\")","v":"dgm.10"},{"$f":"LEFT(B104,FIND(TEXT(D104,\"#\"),B104)-2)","v":"dgm"},{"$f":"1*MID(B104,MATCH(TRUE,ISNUMBER(1*MID(B104,ROW($1:$9),1)),0),COUNT(1*MID(B104,ROW($1:$9),1)))","v":10}]
[{"$f":"'Source Data'!A104","v":"ami.7"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B104,$A$2:$A$1905),,),)),\"\")","v":"dgm.11"},{"$f":"LEFT(B105,FIND(TEXT(D105,\"#\"),B105)-2)","v":"dgm"},{"$f":"1*MID(B105,MATCH(TRUE,ISNUMBER(1*MID(B105,ROW($1:$9),1)),0),COUNT(1*MID(B105,ROW($1:$9),1)))","v":11}]
[{"$f":"'Source Data'!A105","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B105,$A$2:$A$1905),,),)),\"\")","v":"dgm.12"},{"$f":"LEFT(B106,FIND(TEXT(D106,\"#\"),B106)-2)","v":"dgm"},{"$f":"1*MID(B106,MATCH(TRUE,ISNUMBER(1*MID(B106,ROW($1:$9),1)),0),COUNT(1*MID(B106,ROW($1:$9),1)))","v":12}]
[{"$f":"'Source Data'!A106","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B106,$A$2:$A$1905),,),)),\"\")","v":"dgm.13"},{"$f":"LEFT(B107,FIND(TEXT(D107,\"#\"),B107)-2)","v":"dgm"},{"$f":"1*MID(B107,MATCH(TRUE,ISNUMBER(1*MID(B107,ROW($1:$9),1)),0),COUNT(1*MID(B107,ROW($1:$9),1)))","v":13}]
[{"$f":"'Source Data'!A107","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B107,$A$2:$A$1905),,),)),\"\")","v":"dgm.14"},{"$f":"LEFT(B108,FIND(TEXT(D108,\"#\"),B108)-2)","v":"dgm"},{"$f":"1*MID(B108,MATCH(TRUE,ISNUMBER(1*MID(B108,ROW($1:$9),1)),0),COUNT(1*MID(B108,ROW($1:$9),1)))","v":14}]
[{"$f":"'Source Data'!A108","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B108,$A$2:$A$1905),,),)),\"\")","v":"dgm.15"},{"$f":"LEFT(B109,FIND(TEXT(D109,\"#\"),B109)-2)","v":"dgm"},{"$f":"1*MID(B109,MATCH(TRUE,ISNUMBER(1*MID(B109,ROW($1:$9),1)),0),COUNT(1*MID(B109,ROW($1:$9),1)))","v":15}]
[{"$f":"'Source Data'!A109","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B109,$A$2:$A$1905),,),)),\"\")","v":"dgm.16"},{"$f":"LEFT(B110,FIND(TEXT(D110,\"#\"),B110)-2)","v":"dgm"},{"$f":"1*MID(B110,MATCH(TRUE,ISNUMBER(1*MID(B110,ROW($1:$9),1)),0),COUNT(1*MID(B110,ROW($1:$9),1)))","v":16}]
[{"$f":"'Source Data'!A110","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B110,$A$2:$A$1905),,),)),\"\")","v":"generic.1"},{"$f":"LEFT(B111,FIND(TEXT(D111,\"#\"),B111)-2)","v":"generic"},{"$f":"1*MID(B111,MATCH(TRUE,ISNUMBER(1*MID(B111,ROW($1:$9),1)),0),COUNT(1*MID(B111,ROW($1:$9),1)))","v":1}]
[{"$f":"'Source Data'!A111","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B111,$A$2:$A$1905),,),)),\"\")","v":"generic.2"},{"$f":"LEFT(B112,FIND(TEXT(D112,\"#\"),B112)-2)","v":"generic"},{"$f":"1*MID(B112,MATCH(TRUE,ISNUMBER(1*MID(B112,ROW($1:$9),1)),0),COUNT(1*MID(B112,ROW($1:$9),1)))","v":2}]
[{"$f":"'Source Data'!A112","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B112,$A$2:$A$1905),,),)),\"\")","v":"generic.3"},{"$f":"LEFT(B113,FIND(TEXT(D113,\"#\"),B113)-2)","v":"generic"},{"$f":"1*MID(B113,MATCH(TRUE,ISNUMBER(1*MID(B113,ROW($1:$9),1)),0),COUNT(1*MID(B113,ROW($1:$9),1)))","v":3}]
[{"$f":"'Source Data'!A113","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B113,$A$2:$A$1905),,),)),\"\")","v":"generic.4"},{"$f":"LEFT(B114,FIND(TEXT(D114,\"#\"),B114)-2)","v":"generic"},{"$f":"1*MID(B114,MATCH(TRUE,ISNUMBER(1*MID(B114,ROW($1:$9),1)),0),COUNT(1*MID(B114,ROW($1:$9),1)))","v":4}]
[{"$f":"'Source Data'!A114","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B114,$A$2:$A$1905),,),)),\"\")","v":"gen.1"},{"$f":"LEFT(B115,FIND(TEXT(D115,\"#\"),B115)-2)","v":"gen"},{"$f":"1*MID(B115,MATCH(TRUE,ISNUMBER(1*MID(B115,ROW($1:$9),1)),0),COUNT(1*MID(B115,ROW($1:$9),1)))","v":1}]
[{"$f":"'Source Data'!A115","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B115,$A$2:$A$1905),,),)),\"\")","v":"gen.2"},{"$f":"LEFT(B116,FIND(TEXT(D116,\"#\"),B116)-2)","v":"gen"},{"$f":"1*MID(B116,MATCH(TRUE,ISNUMBER(1*MID(B116,ROW($1:$9),1)),0),COUNT(1*MID(B116,ROW($1:$9),1)))","v":2}]
[{"$f":"'Source Data'!A116","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B116,$A$2:$A$1905),,),)),\"\")","v":"gen.3"},{"$f":"LEFT(B117,FIND(TEXT(D117,\"#\"),B117)-2)","v":"gen"},{"$f":"1*MID(B117,MATCH(TRUE,ISNUMBER(1*MID(B117,ROW($1:$9),1)),0),COUNT(1*MID(B117,ROW($1:$9),1)))","v":3}]
[{"$f":"'Source Data'!A117","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B117,$A$2:$A$1905),,),)),\"\")","v":"gen.4"},{"$f":"LEFT(B118,FIND(TEXT(D118,\"#\"),B118)-2)","v":"gen"},{"$f":"1*MID(B118,MATCH(TRUE,ISNUMBER(1*MID(B118,ROW($1:$9),1)),0),COUNT(1*MID(B118,ROW($1:$9),1)))","v":4}]
[{"$f":"'Source Data'!A118","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B118,$A$2:$A$1905),,),)),\"\")","v":"gen.5"},{"$f":"LEFT(B119,FIND(TEXT(D119,\"#\"),B119)-2)","v":"gen"},{"$f":"1*MID(B119,MATCH(TRUE,ISNUMBER(1*MID(B119,ROW($1:$9),1)),0),COUNT(1*MID(B119,ROW($1:$9),1)))","v":5}]
[{"$f":"'Source Data'!A119","v":"ami.8"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B119,$A$2:$A$1905),,),)),\"\")","v":"gen.6"},{"$f":"LEFT(B120,FIND(TEXT(D120,\"#\"),B120)-2)","v":"gen"},{"$f":"1*MID(B120,MATCH(TRUE,ISNUMBER(1*MID(B120,ROW($1:$9),1)),0),COUNT(1*MID(B120,ROW($1:$9),1)))","v":6}]
[{"$f":"'Source Data'!A120","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B120,$A$2:$A$1905),,),)),\"\")","v":"gen.7"},{"$f":"LEFT(B121,FIND(TEXT(D121,\"#\"),B121)-2)","v":"gen"},{"$f":"1*MID(B121,MATCH(TRUE,ISNUMBER(1*MID(B121,ROW($1:$9),1)),0),COUNT(1*MID(B121,ROW($1:$9),1)))","v":7}]
[{"$f":"'Source Data'!A121","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B121,$A$2:$A$1905),,),)),\"\")","v":"gen.8"},{"$f":"LEFT(B122,FIND(TEXT(D122,\"#\"),B122)-2)","v":"gen"},{"$f":"1*MID(B122,MATCH(TRUE,ISNUMBER(1*MID(B122,ROW($1:$9),1)),0),COUNT(1*MID(B122,ROW($1:$9),1)))","v":8}]
[{"$f":"'Source Data'!A122","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B122,$A$2:$A$1905),,),)),\"\")","v":"gen.9"},{"$f":"LEFT(B123,FIND(TEXT(D123,\"#\"),B123)-2)","v":"gen"},{"$f":"1*MID(B123,MATCH(TRUE,ISNUMBER(1*MID(B123,ROW($1:$9),1)),0),COUNT(1*MID(B123,ROW($1:$9),1)))","v":9}]
[{"$f":"'Source Data'!A123","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B123,$A$2:$A$1905),,),)),\"\")","v":"gen.10"},{"$f":"LEFT(B124,FIND(TEXT(D124,\"#\"),B124)-2)","v":"gen"},{"$f":"1*MID(B124,MATCH(TRUE,ISNUMBER(1*MID(B124,ROW($1:$9),1)),0),COUNT(1*MID(B124,ROW($1:$9),1)))","v":10}]
[{"$f":"'Source Data'!A124","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B124,$A$2:$A$1905),,),)),\"\")","v":"gen.11"},{"$f":"LEFT(B125,FIND(TEXT(D125,\"#\"),B125)-2)","v":"gen"},{"$f":"1*MID(B125,MATCH(TRUE,ISNUMBER(1*MID(B125,ROW($1:$9),1)),0),COUNT(1*MID(B125,ROW($1:$9),1)))","v":11}]
[{"$f":"'Source Data'!A125","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B125,$A$2:$A$1905),,),)),\"\")","v":"gen.12"},{"$f":"LEFT(B126,FIND(TEXT(D126,\"#\"),B126)-2)","v":"gen"},{"$f":"1*MID(B126,MATCH(TRUE,ISNUMBER(1*MID(B126,ROW($1:$9),1)),0),COUNT(1*MID(B126,ROW($1:$9),1)))","v":12}]
[{"$f":"'Source Data'!A126","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B126,$A$2:$A$1905),,),)),\"\")","v":"gen.13"},{"$f":"LEFT(B127,FIND(TEXT(D127,\"#\"),B127)-2)","v":"gen"},{"$f":"1*MID(B127,MATCH(TRUE,ISNUMBER(1*MID(B127,ROW($1:$9),1)),0),COUNT(1*MID(B127,ROW($1:$9),1)))","v":13}]
[{"$f":"'Source Data'!A127","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B127,$A$2:$A$1905),,),)),\"\")","v":"gen.14"},{"$f":"LEFT(B128,FIND(TEXT(D128,\"#\"),B128)-2)","v":"gen"},{"$f":"1*MID(B128,MATCH(TRUE,ISNUMBER(1*MID(B128,ROW($1:$9),1)),0),COUNT(1*MID(B128,ROW($1:$9),1)))","v":14}]
[{"$f":"'Source Data'!A128","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B128,$A$2:$A$1905),,),)),\"\")","v":"gen.15"},{"$f":"LEFT(B129,FIND(TEXT(D129,\"#\"),B129)-2)","v":"gen"},{"$f":"1*MID(B129,MATCH(TRUE,ISNUMBER(1*MID(B129,ROW($1:$9),1)),0),COUNT(1*MID(B129,ROW($1:$9),1)))","v":15}]
[{"$f":"'Source Data'!A129","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1905,MATCH(0,INDEX(COUNTIF($B$1:B129,$A$2:$A$1905),,),)),\"\")","v":"gen.16"},{"$f":"LEFT(B130,FIND(TEXT(D130,\"#\"),B130)-2)","v":"gen"},{"$f":"1*MID(B130,MATCH(TRUE,ISNUMBER(1*MID(B130,ROW($1:$9),1)),0),COUNT(1*MID(B130,ROW($1:$9),1)))","v":16}]
[{"$f":"'Source Data'!A130","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B130,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A131","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B131,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A132","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B132,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A133","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B133,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A134","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B134,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A135","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B135,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A136","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B136,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A137","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B137,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A138","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B138,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A139","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B139,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A140","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B140,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A141","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B141,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A142","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B142,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A143","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B143,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A144","v":"ami.9"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B144,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A145","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B145,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A146","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B146,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A147","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B147,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A148","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B148,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A149","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B149,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A150","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B150,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A151","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B151,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A152","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B152,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A153","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B153,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A154","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B154,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A155","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B155,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A156","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B156,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A157","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B157,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A158","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B158,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A159","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B159,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A160","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B160,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A161","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B161,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A162","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B162,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A163","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B163,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A164","v":"ami.10"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B164,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A165","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B165,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A166","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B166,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A167","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B167,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A168","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B168,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A169","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B169,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A170","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B170,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A171","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B171,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A172","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B172,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A173","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B173,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A174","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B174,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A175","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B175,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A176","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B176,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A177","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B177,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A178","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B178,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A179","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B179,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A180","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B180,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A181","v":"ami.11"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B181,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A182","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B182,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A183","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B183,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A184","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B184,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A185","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B185,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A186","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B186,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A187","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B187,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A188","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B188,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A189","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B189,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A190","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B190,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A191","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B191,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A192","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B192,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A193","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B193,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A194","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B194,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A195","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B195,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A196","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B196,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A197","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B197,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A198","v":"ami.12"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B198,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A199","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B199,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A200","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B200,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A201","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B201,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A202","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B202,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A203","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B203,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A204","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B204,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A205","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B205,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A206","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B206,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A207","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B207,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A208","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B208,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A209","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B209,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A210","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B210,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A211","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B211,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A212","v":"ami.13"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B212,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A213","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B213,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A214","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B214,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A215","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B215,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A216","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B216,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A217","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B217,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A218","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B218,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A219","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B219,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A220","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B220,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A221","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B221,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A222","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B222,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A223","v":"ami.14"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B223,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A224","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B224,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A225","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B225,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A226","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B226,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A227","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B227,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A228","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B228,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A229","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B229,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A230","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B230,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A231","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B231,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A232","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B232,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A233","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B233,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A234","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B234,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A235","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B235,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A236","v":"ami.15"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B236,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A237","v":"ami.16"},{"$f":"IFERROR(INDEX($A$2:$A$1447,MATCH(0,INDEX(COUNTIF($B$1:B237,$A$2:$A$1447),,),)),\"\")","v":""}]
[{"$f":"'Source Data'!A238","v":"ami.16"}]
[{"$f":"'Source Data'!A239","v":"ami.16"}]
[{"$f":"'Source Data'!A240","v":"ami.16"}]
[{"$f":"'Source Data'!A241","v":"ami.16"}]
[{"$f":"'Source Data'!A242","v":"ami.16"}]
[{"$f":"'Source Data'!A243","v":"ami.16"}]
[{"$f":"'Source Data'!A244","v":"ami.16"}]
[{"$f":"'Source Data'!A245","v":"ami.17"}]
[{"$f":"'Source Data'!A246","v":"ami.17"}]
[{"$f":"'Source Data'!A247","v":"ami.17"}]
[{"$f":"'Source Data'!A248","v":"ami.17"}]
[{"$f":"'Source Data'!A249","v":"ami.17"}]
[{"$f":"'Source Data'!A250","v":"ami.17"}]
[{"$f":"'Source Data'!A251","v":"ami.17"}]
[{"$f":"'Source Data'!A252","v":"ami.17"}]
[{"$f":"'Source Data'!A253","v":"ami.17"}]
[{"$f":"'Source Data'!A254","v":"ami.17"}]
[{"$f":"'Source Data'!A255","v":"ami.17"}]
[{"$f":"'Source Data'!A256","v":"ami.17"}]
[{"$f":"'Source Data'!A257","v":"ami.17"}]
[{"$f":"'Source Data'!A258","v":"ami.17"}]
[{"$f":"'Source Data'!A259","v":"ami.18"}]
[{"$f":"'Source Data'!A260","v":"ami.18"}]
[{"$f":"'Source Data'!A261","v":"ami.18"}]
[{"$f":"'Source Data'!A262","v":"ami.18"}]
[{"$f":"'Source Data'!A263","v":"ami.18"}]
[{"$f":"'Source Data'!A264","v":"ami.18"}]
[{"$f":"'Source Data'!A265","v":"ami.18"}]
[{"$f":"'Source Data'!A266","v":"ami.18"}]
[{"$f":"'Source Data'!A267","v":"ami.18"}]
[{"$f":"'Source Data'!A268","v":"ami.19"}]
[{"$f":"'Source Data'!A269","v":"ami.19"}]
[{"$f":"'Source Data'!A270","v":"ami.19"}]
[{"$f":"'Source Data'!A271","v":"ami.19"}]
[{"$f":"'Source Data'!A272","v":"ami.19"}]
[{"$f":"'Source Data'!A273","v":"ami.19"}]
[{"$f":"'Source Data'!A274","v":"ami.19"}]
[{"$f":"'Source Data'!A275","v":"ami.19"}]
[{"$f":"'Source Data'!A276","v":"ami.19"}]
[{"$f":"'Source Data'!A277","v":"ami.19"}]
[{"$f":"'Source Data'!A278","v":"ami.19"}]
[{"$f":"'Source Data'!A279","v":"ami.19"}]
[{"$f":"'Source Data'!A280","v":"ami.19"}]
[{"$f":"'Source Data'!A281","v":"ami.20"}]
[{"$f":"'Source Data'!A282","v":"ami.20"}]
[{"$f":"'Source Data'!A283","v":"ami.20"}]
[{"$f":"'Source Data'!A284","v":"ami.20"}]
[{"$f":"'Source Data'!A285","v":"ami.20"}]
[{"$f":"'Source Data'!A286","v":"ami.20"}]
[{"$f":"'Source Data'!A287","v":"ami.20"}]
[{"$f":"'Source Data'!A288","v":"ami.21"}]
[{"$f":"'Source Data'!A289","v":"ami.21"}]
[{"$f":"'Source Data'!A290","v":"ami.21"}]
[{"$f":"'Source Data'!A291","v":"ami.21"}]
[{"$f":"'Source Data'!A292","v":"ami.21"}]
[{"$f":"'Source Data'!A293","v":"ami.21"}]
[{"$f":"'Source Data'!A294","v":"ami.21"}]
[{"$f":"'Source Data'!A295","v":"ami.21"}]
[{"$f":"'Source Data'!A296","v":"ami.21"}]
[{"$f":"'Source Data'!A297","v":"ami.21"}]
[{"$f":"'Source Data'!A298","v":"ami.22"}]
[{"$f":"'Source Data'!A299","v":"ami.22"}]
[{"$f":"'Source Data'!A300","v":"ami.22"}]
[{"$f":"'Source Data'!A301","v":"ami.22"}]
[{"$f":"'Source Data'!A302","v":"ami.22"}]
[{"$f":"'Source Data'!A303","v":"ami.22"}]
[{"$f":"'Source Data'!A304","v":"ami.22"}]
[{"$f":"'Source Data'!A305","v":"ami.22"}]
[{"$f":"'Source Data'!A306","v":"ami.23"}]
[{"$f":"'Source Data'!A307","v":"ami.23"}]
[{"$f":"'Source Data'!A308","v":"ami.23"}]
[{"$f":"'Source Data'!A309","v":"ami.23"}]
[{"$f":"'Source Data'!A310","v":"ami.23"}]
[{"$f":"'Source Data'!A311","v":"ami.23"}]
[{"$f":"'Source Data'!A312","v":"ami.23"}]
[{"$f":"'Source Data'!A313","v":"ami.23"}]
[{"$f":"'Source Data'!A314","v":"ami.24"}]
[{"$f":"'Source Data'!A315","v":"ami.24"}]
[{"$f":"'Source Data'!A316","v":"ami.24"}]
[{"$f":"'Source Data'!A317","v":"ami.24"}]
[{"$f":"'Source Data'!A318","v":"ami.24"}]
[{"$f":"'Source Data'!A319","v":"ami.24"}]
[{"$f":"'Source Data'!A320","v":"ami.24"}]
[{"$f":"'Source Data'!A321","v":"ami.24"}]
[{"$f":"'Source Data'!A322","v":"ami.24"}]
[{"$f":"'Source Data'!A323","v":"ami.24"}]
[{"$f":"'Source Data'!A324","v":"ami.25"}]
[{"$f":"'Source Data'!A325","v":"ami.25"}]
[{"$f":"'Source Data'!A326","v":"ami.25"}]
[{"$f":"'Source Data'!A327","v":"ami.25"}]
[{"$f":"'Source Data'!A328","v":"ami.25"}]
[{"$f":"'Source Data'!A329","v":"ami.25"}]
[{"$f":"'Source Data'!A330","v":"ami.25"}]
[{"$f":"'Source Data'!A331","v":"ami.25"}]
[{"$f":"'Source Data'!A332","v":"ami.25"}]
[{"$f":"'Source Data'!A333","v":"ami.25"}]
[{"$f":"'Source Data'!A334","v":"ami.25"}]
[{"$f":"'Source Data'!A335","v":"ami.25"}]
[{"$f":"'Source Data'!A336","v":"ami.26"}]
[{"$f":"'Source Data'!A337","v":"ami.26"}]
[{"$f":"'Source Data'!A338","v":"ami.26"}]
[{"$f":"'Source Data'!A339","v":"ami.26"}]
[{"$f":"'Source Data'!A340","v":"ami.26"}]
[{"$f":"'Source Data'!A341","v":"ami.26"}]
[{"$f":"'Source Data'!A342","v":"ami.26"}]
[{"$f":"'Source Data'!A343","v":"ami.26"}]
[{"$f":"'Source Data'!A344","v":"ami.26"}]
[{"$f":"'Source Data'!A345","v":"ami.27"}]
[{"$f":"'Source Data'!A346","v":"ami.27"}]
[{"$f":"'Source Data'!A347","v":"ami.27"}]
[{"$f":"'Source Data'!A348","v":"ami.27"}]
[{"$f":"'Source Data'!A349","v":"ami.27"}]
[{"$f":"'Source Data'!A350","v":"ami.27"}]
[{"$f":"'Source Data'!A351","v":"ami.27"}]
[{"$f":"'Source Data'!A352","v":"ami.27"}]
[{"$f":"'Source Data'!A353","v":"ami.27"}]
[{"$f":"'Source Data'!A354","v":"ami.28"}]
[{"$f":"'Source Data'!A355","v":"ami.28"}]
[{"$f":"'Source Data'!A356","v":"ami.28"}]
[{"$f":"'Source Data'!A357","v":"ami.28"}]
[{"$f":"'Source Data'!A358","v":"ami.28"}]
[{"$f":"'Source Data'!A359","v":"ami.28"}]
[{"$f":"'Source Data'!A360","v":"ami.28"}]
[{"$f":"'Source Data'!A361","v":"ami.28"}]
[{"$f":"'Source Data'!A362","v":"ami.28"}]
[{"$f":"'Source Data'!A363","v":"ami.29"}]
[{"$f":"'Source Data'!A364","v":"ami.29"}]
[{"$f":"'Source Data'!A365","v":"ami.29"}]
[{"$f":"'Source Data'!A366","v":"ami.29"}]
[{"$f":"'Source Data'!A367","v":"ami.29"}]
[{"$f":"'Source Data'!A368","v":"ami.29"}]
[{"$f":"'Source Data'!A369","v":"ami.29"}]
[{"$f":"'Source Data'!A370","v":"ami.29"}]
[{"$f":"'Source Data'!A371","v":"ami.29"}]
[{"$f":"'Source Data'!A372","v":"ami.30"}]
[{"$f":"'Source Data'!A373","v":"ami.30"}]
[{"$f":"'Source Data'!A374","v":"ami.30"}]
[{"$f":"'Source Data'!A375","v":"ami.30"}]
[{"$f":"'Source Data'!A376","v":"ami.30"}]
[{"$f":"'Source Data'!A377","v":"ami.30"}]
[{"$f":"'Source Data'!A378","v":"ami.30"}]
[{"$f":"'Source Data'!A379","v":"ami.30"}]
[{"$f":"'Source Data'!A380","v":"ami.30"}]
[{"$f":"'Source Data'!A381","v":"ami.30"}]
[{"$f":"'Source Data'!A382","v":"ami.31"}]
[{"$f":"'Source Data'!A383","v":"ami.31"}]
[{"$f":"'Source Data'!A384","v":"ami.31"}]
[{"$f":"'Source Data'!A385","v":"ami.31"}]
[{"$f":"'Source Data'!A386","v":"ami.31"}]
[{"$f":"'Source Data'!A387","v":"ami.31"}]
[{"$f":"'Source Data'!A388","v":"ami.31"}]
[{"$f":"'Source Data'!A389","v":"ami.31"}]
[{"$f":"'Source Data'!A390","v":"ami.32"}]
[{"$f":"'Source Data'!A391","v":"ami.32"}]
[{"$f":"'Source Data'!A392","v":"ami.32"}]
[{"$f":"'Source Data'!A393","v":"ami.32"}]
[{"$f":"'Source Data'!A394","v":"ami.32"}]
[{"$f":"'Source Data'!A395","v":"ami.32"}]
[{"$f":"'Source Data'!A396","v":"ami.32"}]
[{"$f":"'Source Data'!A397","v":"ami.32"}]
[{"$f":"'Source Data'!A398","v":"ami.32"}]
[{"$f":"'Source Data'!A399","v":"ami.32"}]
[{"$f":"'Source Data'!A400","v":"ami.32"}]
[{"$f":"'Source Data'!A401","v":"ami.32"}]
[{"$f":"'Source Data'!A402","v":"ami.32"}]
[{"$f":"'Source Data'!A403","v":"der.1"}]
[{"$f":"'Source Data'!A404","v":"der.1"}]
[{"$f":"'Source Data'!A405","v":"der.1"}]
[{"$f":"'Source Data'!A406","v":"der.1"}]
[{"$f":"'Source Data'!A407","v":"der.1"}]
[{"$f":"'Source Data'!A408","v":"der.1"}]
[{"$f":"'Source Data'!A409","v":"der.1"}]
[{"$f":"'Source Data'!A410","v":"der.1"}]
[{"$f":"'Source Data'!A411","v":"der.1"}]
[{"$f":"'Source Data'!A412","v":"der.1"}]
[{"$f":"'Source Data'!A413","v":"der.1"}]
[{"$f":"'Source Data'!A414","v":"der.1"}]
[{"$f":"'Source Data'!A415","v":"der.1"}]
[{"$f":"'Source Data'!A416","v":"der.1"}]
[{"$f":"'Source Data'!A417","v":"der.2"}]
[{"$f":"'Source Data'!A418","v":"der.2"}]
[{"$f":"'Source Data'!A419","v":"der.2"}]
[{"$f":"'Source Data'!A420","v":"der.2"}]
[{"$f":"'Source Data'!A421","v":"der.2"}]
[{"$f":"'Source Data'!A422","v":"der.2"}]
[{"$f":"'Source Data'!A423","v":"der.2"}]
[{"$f":"'Source Data'!A424","v":"der.2"}]
[{"$f":"'Source Data'!A425","v":"der.2"}]
[{"$f":"'Source Data'!A426","v":"der.2"}]
[{"$f":"'Source Data'!A427","v":"der.2"}]
[{"$f":"'Source Data'!A428","v":"der.2"}]
[{"$f":"'Source Data'!A429","v":"der.2"}]
[{"$f":"'Source Data'!A430","v":"der.2"}]
[{"$f":"'Source Data'!A431","v":"der.2"}]
[{"$f":"'Source Data'!A432","v":"der.2"}]
[{"$f":"'Source Data'!A433","v":"der.2"}]
[{"$f":"'Source Data'!A434","v":"der.2"}]
[{"$f":"'Source Data'!A435","v":"der.2"}]
[{"$f":"'Source Data'!A436","v":"der.2"}]
[{"$f":"'Source Data'!A437","v":"der.2"}]
[{"$f":"'Source Data'!A438","v":"der.2"}]
[{"$f":"'Source Data'!A439","v":"der.2"}]
[{"$f":"'Source Data'!A440","v":"der.3"}]
[{"$f":"'Source Data'!A441","v":"der.3"}]
[{"$f":"'Source Data'!A442","v":"der.3"}]
[{"$f":"'Source Data'!A443","v":"der.3"}]
[{"$f":"'Source Data'!A444","v":"der.3"}]
[{"$f":"'Source Data'!A445","v":"der.3"}]
[{"$f":"'Source Data'!A446","v":"der.3"}]
[{"$f":"'Source Data'!A447","v":"der.3"}]
[{"$f":"'Source Data'!A448","v":"der.3"}]
[{"$f":"'Source Data'!A449","v":"der.3"}]
[{"$f":"'Source Data'!A450","v":"der.3"}]
[{"$f":"'Source Data'!A451","v":"der.3"}]
[{"$f":"'Source Data'!A452","v":"der.3"}]
[{"$f":"'Source Data'!A453","v":"der.3"}]
[{"$f":"'Source Data'!A454","v":"der.3"}]
[{"$f":"'Source Data'!A455","v":"der.3"}]
[{"$f":"'Source Data'!A456","v":"der.4"}]
[{"$f":"'Source Data'!A457","v":"der.4"}]
[{"$f":"'Source Data'!A458","v":"der.4"}]
[{"$f":"'Source Data'!A459","v":"der.4"}]
[{"$f":"'Source Data'!A460","v":"der.4"}]
[{"$f":"'Source Data'!A461","v":"der.4"}]
[{"$f":"'Source Data'!A462","v":"der.4"}]
[{"$f":"'Source Data'!A463","v":"der.5"}]
[{"$f":"'Source Data'!A464","v":"der.5"}]
[{"$f":"'Source Data'!A465","v":"der.5"}]
[{"$f":"'Source Data'!A466","v":"der.5"}]
[{"$f":"'Source Data'!A467","v":"der.5"}]
[{"$f":"'Source Data'!A468","v":"der.5"}]
[{"$f":"'Source Data'!A469","v":"der.5"}]
[{"$f":"'Source Data'!A470","v":"der.5"}]
[{"$f":"'Source Data'!A471","v":"der.5"}]
[{"$f":"'Source Data'!A472","v":"der.5"}]
[{"$f":"'Source Data'!A473","v":"der.5"}]
[{"$f":"'Source Data'!A474","v":"der.5"}]
[{"$f":"'Source Data'!A475","v":"der.5"}]
[{"$f":"'Source Data'!A476","v":"der.5"}]
[{"$f":"'Source Data'!A477","v":"der.5"}]
[{"$f":"'Source Data'!A478","v":"der.5"}]
[{"$f":"'Source Data'!A479","v":"der.5"}]
[{"$f":"'Source Data'!A480","v":"der.6"}]
[{"$f":"'Source Data'!A481","v":"der.6"}]
[{"$f":"'Source Data'!A482","v":"der.6"}]
[{"$f":"'Source Data'!A483","v":"der.6"}]
[{"$f":"'Source Data'!A484","v":"der.6"}]
[{"$f":"'Source Data'!A485","v":"der.6"}]
[{"$f":"'Source Data'!A486","v":"der.6"}]
[{"$f":"'Source Data'!A487","v":"der.6"}]
[{"$f":"'Source Data'!A488","v":"der.6"}]
[{"$f":"'Source Data'!A489","v":"der.6"}]
[{"$f":"'Source Data'!A490","v":"der.6"}]
[{"$f":"'Source Data'!A491","v":"der.7"}]
[{"$f":"'Source Data'!A492","v":"der.7"}]
[{"$f":"'Source Data'!A493","v":"der.7"}]
[{"$f":"'Source Data'!A494","v":"der.7"}]
[{"$f":"'Source Data'!A495","v":"der.7"}]
[{"$f":"'Source Data'!A496","v":"der.7"}]
[{"$f":"'Source Data'!A497","v":"der.7"}]
[{"$f":"'Source Data'!A498","v":"der.7"}]
[{"$f":"'Source Data'!A499","v":"der.7"}]
[{"$f":"'Source Data'!A500","v":"der.7"}]
[{"$f":"'Source Data'!A501","v":"der.7"}]
[{"$f":"'Source Data'!A502","v":"der.8"}]
[{"$f":"'Source Data'!A503","v":"der.8"}]
[{"$f":"'Source Data'!A504","v":"der.8"}]
[{"$f":"'Source Data'!A505","v":"der.8"}]
[{"$f":"'Source Data'!A506","v":"der.8"}]
[{"$f":"'Source Data'!A507","v":"der.8"}]
[{"$f":"'Source Data'!A508","v":"der.8"}]
[{"$f":"'Source Data'!A509","v":"der.9"}]
[{"$f":"'Source Data'!A510","v":"der.9"}]
[{"$f":"'Source Data'!A511","v":"der.9"}]
[{"$f":"'Source Data'!A512","v":"der.9"}]
[{"$f":"'Source Data'!A513","v":"der.9"}]
[{"$f":"'Source Data'!A514","v":"der.9"}]
[{"$f":"'Source Data'!A515","v":"der.9"}]
[{"$f":"'Source Data'!A516","v":"der.9"}]
[{"$f":"'Source Data'!A517","v":"der.9"}]
[{"$f":"'Source Data'!A518","v":"der.9"}]
[{"$f":"'Source Data'!A519","v":"der.9"}]
[{"$f":"'Source Data'!A520","v":"der.9"}]
[{"$f":"'Source Data'!A521","v":"der.10"}]
[{"$f":"'Source Data'!A522","v":"der.10"}]
[{"$f":"'Source Data'!A523","v":"der.10"}]
[{"$f":"'Source Data'!A524","v":"der.10"}]
[{"$f":"'Source Data'!A525","v":"der.10"}]
[{"$f":"'Source Data'!A526","v":"der.10"}]
[{"$f":"'Source Data'!A527","v":"der.10"}]
[{"$f":"'Source Data'!A528","v":"der.10"}]
[{"$f":"'Source Data'!A529","v":"der.10"}]
[{"$f":"'Source Data'!A530","v":"der.10"}]
[{"$f":"'Source Data'!A531","v":"der.10"}]
[{"$f":"'Source Data'!A532","v":"der.10"}]
[{"$f":"'Source Data'!A533","v":"der.10"}]
[{"$f":"'Source Data'!A534","v":"der.10"}]
[{"$f":"'Source Data'!A535","v":"der.10"}]
[{"$f":"'Source Data'!A536","v":"der.10"}]
[{"$f":"'Source Data'!A537","v":"der.10"}]
[{"$f":"'Source Data'!A538","v":"der.10"}]
[{"$f":"'Source Data'!A539","v":"der.10"}]
[{"$f":"'Source Data'!A540","v":"der.10"}]
[{"$f":"'Source Data'!A541","v":"der.11"}]
[{"$f":"'Source Data'!A542","v":"der.11"}]
[{"$f":"'Source Data'!A543","v":"der.11"}]
[{"$f":"'Source Data'!A544","v":"der.11"}]
[{"$f":"'Source Data'!A545","v":"der.11"}]
[{"$f":"'Source Data'!A546","v":"der.11"}]
[{"$f":"'Source Data'!A547","v":"der.11"}]
[{"$f":"'Source Data'!A548","v":"der.11"}]
[{"$f":"'Source Data'!A549","v":"der.11"}]
[{"$f":"'Source Data'!A550","v":"der.11"}]
[{"$f":"'Source Data'!A551","v":"der.11"}]
[{"$f":"'Source Data'!A552","v":"der.11"}]
[{"$f":"'Source Data'!A553","v":"der.11"}]
[{"$f":"'Source Data'!A554","v":"der.11"}]
[{"$f":"'Source Data'!A555","v":"der.11"}]
[{"$f":"'Source Data'!A556","v":"der.11"}]
[{"$f":"'Source Data'!A557","v":"der.11"}]
[{"$f":"'Source Data'!A558","v":"der.11"}]
[{"$f":"'Source Data'!A559","v":"der.11"}]
[{"$f":"'Source Data'!A560","v":"der.11"}]
[{"$f":"'Source Data'!A561","v":"der.11"}]
[{"$f":"'Source Data'!A562","v":"der.12"}]
[{"$f":"'Source Data'!A563","v":"der.12"}]
[{"$f":"'Source Data'!A564","v":"der.12"}]
[{"$f":"'Source Data'!A565","v":"der.12"}]
[{"$f":"'Source Data'!A566","v":"der.12"}]
[{"$f":"'Source Data'!A567","v":"der.12"}]
[{"$f":"'Source Data'!A568","v":"der.12"}]
[{"$f":"'Source Data'!A569","v":"der.12"}]
[{"$f":"'Source Data'!A570","v":"der.12"}]
[{"$f":"'Source Data'!A571","v":"der.12"}]
[{"$f":"'Source Data'!A572","v":"der.12"}]
[{"$f":"'Source Data'!A573","v":"der.12"}]
[{"$f":"'Source Data'!A574","v":"der.12"}]
[{"$f":"'Source Data'!A575","v":"der.12"}]
[{"$f":"'Source Data'!A576","v":"der.12"}]
[{"$f":"'Source Data'!A577","v":"der.12"}]
[{"$f":"'Source Data'!A578","v":"der.12"}]
[{"$f":"'Source Data'!A579","v":"der.12"}]
[{"$f":"'Source Data'!A580","v":"der.12"}]
[{"$f":"'Source Data'!A581","v":"der.13"}]
[{"$f":"'Source Data'!A582","v":"der.13"}]
[{"$f":"'Source Data'!A583","v":"der.13"}]
[{"$f":"'Source Data'!A584","v":"der.13"}]
[{"$f":"'Source Data'!A585","v":"der.13"}]
[{"$f":"'Source Data'!A586","v":"der.13"}]
[{"$f":"'Source Data'!A587","v":"der.13"}]
[{"$f":"'Source Data'!A588","v":"der.13"}]
[{"$f":"'Source Data'!A589","v":"der.13"}]
[{"$f":"'Source Data'!A590","v":"der.13"}]
[{"$f":"'Source Data'!A591","v":"der.13"}]
[{"$f":"'Source Data'!A592","v":"der.13"}]
[{"$f":"'Source Data'!A593","v":"der.13"}]
[{"$f":"'Source Data'!A594","v":"der.13"}]
[{"$f":"'Source Data'!A595","v":"der.13"}]
[{"$f":"'Source Data'!A596","v":"der.13"}]
[{"$f":"'Source Data'!A597","v":"der.14"}]
[{"$f":"'Source Data'!A598","v":"der.14"}]
[{"$f":"'Source Data'!A599","v":"der.14"}]
[{"$f":"'Source Data'!A600","v":"der.14"}]
[{"$f":"'Source Data'!A601","v":"der.14"}]
[{"$f":"'Source Data'!A602","v":"der.14"}]
[{"$f":"'Source Data'!A603","v":"der.14"}]
[{"$f":"'Source Data'!A604","v":"der.14"}]
[{"$f":"'Source Data'!A605","v":"der.14"}]
[{"$f":"'Source Data'!A606","v":"der.14"}]
[{"$f":"'Source Data'!A607","v":"der.14"}]
[{"$f":"'Source Data'!A608","v":"der.14"}]
[{"$f":"'Source Data'!A609","v":"der.14"}]
[{"$f":"'Source Data'!A610","v":"der.14"}]
[{"$f":"'Source Data'!A611","v":"der.15"}]
[{"$f":"'Source Data'!A612","v":"der.15"}]
[{"$f":"'Source Data'!A613","v":"der.15"}]
[{"$f":"'Source Data'!A614","v":"der.15"}]
[{"$f":"'Source Data'!A615","v":"der.15"}]
[{"$f":"'Source Data'!A616","v":"der.15"}]
[{"$f":"'Source Data'!A617","v":"der.15"}]
[{"$f":"'Source Data'!A618","v":"der.15"}]
[{"$f":"'Source Data'!A619","v":"der.15"}]
[{"$f":"'Source Data'!A620","v":"der.15"}]
[{"$f":"'Source Data'!A621","v":"der.15"}]
[{"$f":"'Source Data'!A622","v":"der.15"}]
[{"$f":"'Source Data'!A623","v":"der.16"}]
[{"$f":"'Source Data'!A624","v":"der.16"}]
[{"$f":"'Source Data'!A625","v":"der.16"}]
[{"$f":"'Source Data'!A626","v":"der.16"}]
[{"$f":"'Source Data'!A627","v":"der.16"}]
[{"$f":"'Source Data'!A628","v":"der.16"}]
[{"$f":"'Source Data'!A629","v":"der.16"}]
[{"$f":"'Source Data'!A630","v":"der.16"}]
[{"$f":"'Source Data'!A631","v":"der.16"}]
[{"$f":"'Source Data'!A632","v":"der.16"}]
[{"$f":"'Source Data'!A633","v":"der.16"}]
[{"$f":"'Source Data'!A634","v":"der.16"}]
[{"$f":"'Source Data'!A635","v":"der.16"}]
[{"$f":"'Source Data'!A636","v":"der.16"}]
[{"$f":"'Source Data'!A637","v":"der.17"}]
[{"$f":"'Source Data'!A638","v":"der.17"}]
[{"$f":"'Source Data'!A639","v":"der.17"}]
[{"$f":"'Source Data'!A640","v":"der.17"}]
[{"$f":"'Source Data'!A641","v":"der.17"}]
[{"$f":"'Source Data'!A642","v":"der.17"}]
[{"$f":"'Source Data'!A643","v":"der.17"}]
[{"$f":"'Source Data'!A644","v":"der.17"}]
[{"$f":"'Source Data'!A645","v":"der.17"}]
[{"$f":"'Source Data'!A646","v":"der.17"}]
[{"$f":"'Source Data'!A647","v":"der.17"}]
[{"$f":"'Source Data'!A648","v":"der.17"}]
[{"$f":"'Source Data'!A649","v":"der.18"}]
[{"$f":"'Source Data'!A650","v":"der.18"}]
[{"$f":"'Source Data'!A651","v":"der.18"}]
[{"$f":"'Source Data'!A652","v":"der.18"}]
[{"$f":"'Source Data'!A653","v":"der.18"}]
[{"$f":"'Source Data'!A654","v":"der.18"}]
[{"$f":"'Source Data'!A655","v":"der.18"}]
[{"$f":"'Source Data'!A656","v":"der.18"}]
[{"$f":"'Source Data'!A657","v":"der.18"}]
[{"$f":"'Source Data'!A658","v":"der.18"}]
[{"$f":"'Source Data'!A659","v":"der.18"}]
[{"$f":"'Source Data'!A660","v":"der.18"}]
[{"$f":"'Source Data'!A661","v":"der.18"}]
[{"$f":"'Source Data'!A662","v":"der.19"}]
[{"$f":"'Source Data'!A663","v":"der.19"}]
[{"$f":"'Source Data'!A664","v":"der.19"}]
[{"$f":"'Source Data'!A665","v":"der.19"}]
[{"$f":"'Source Data'!A666","v":"der.19"}]
[{"$f":"'Source Data'!A667","v":"der.19"}]
[{"$f":"'Source Data'!A668","v":"der.19"}]
[{"$f":"'Source Data'!A669","v":"der.19"}]
[{"$f":"'Source Data'!A670","v":"der.19"}]
[{"$f":"'Source Data'!A671","v":"der.19"}]
[{"$f":"'Source Data'!A672","v":"der.19"}]
[{"$f":"'Source Data'!A673","v":"der.19"}]
[{"$f":"'Source Data'!A674","v":"der.19"}]
[{"$f":"'Source Data'!A675","v":"der.20"}]
[{"$f":"'Source Data'!A676","v":"der.20"}]
[{"$f":"'Source Data'!A677","v":"der.20"}]
[{"$f":"'Source Data'!A678","v":"der.20"}]
[{"$f":"'Source Data'!A679","v":"der.20"}]
[{"$f":"'Source Data'!A680","v":"der.20"}]
[{"$f":"'Source Data'!A681","v":"der.20"}]
[{"$f":"'Source Data'!A682","v":"der.20"}]
[{"$f":"'Source Data'!A683","v":"der.20"}]
[{"$f":"'Source Data'!A684","v":"der.20"}]
[{"$f":"'Source Data'!A685","v":"der.20"}]
[{"$f":"'Source Data'!A686","v":"der.20"}]
[{"$f":"'Source Data'!A687","v":"der.20"}]
[{"$f":"'Source Data'!A688","v":"der.21"}]
[{"$f":"'Source Data'!A689","v":"der.21"}]
[{"$f":"'Source Data'!A690","v":"der.21"}]
[{"$f":"'Source Data'!A691","v":"der.21"}]
[{"$f":"'Source Data'!A692","v":"der.21"}]
[{"$f":"'Source Data'!A693","v":"der.21"}]
[{"$f":"'Source Data'!A694","v":"der.21"}]
[{"$f":"'Source Data'!A695","v":"der.21"}]
[{"$f":"'Source Data'!A696","v":"der.21"}]
[{"$f":"'Source Data'!A697","v":"der.21"}]
[{"$f":"'Source Data'!A698","v":"der.21"}]
[{"$f":"'Source Data'!A699","v":"der.21"}]
[{"$f":"'Source Data'!A700","v":"der.21"}]
[{"$f":"'Source Data'!A701","v":"der.22"}]
[{"$f":"'Source Data'!A702","v":"der.23"}]
[{"$f":"'Source Data'!A703","v":"der.23"}]
[{"$f":"'Source Data'!A704","v":"der.23"}]
[{"$f":"'Source Data'!A705","v":"der.23"}]
[{"$f":"'Source Data'!A706","v":"der.23"}]
[{"$f":"'Source Data'!A707","v":"der.23"}]
[{"$f":"'Source Data'!A708","v":"der.23"}]
[{"$f":"'Source Data'!A709","v":"der.23"}]
[{"$f":"'Source Data'!A710","v":"der.23"}]
[{"$f":"'Source Data'!A711","v":"der.23"}]
[{"$f":"'Source Data'!A712","v":"der.23"}]
[{"$f":"'Source Data'!A713","v":"der.24"}]
[{"$f":"'Source Data'!A714","v":"der.24"}]
[{"$f":"'Source Data'!A715","v":"der.24"}]
[{"$f":"'Source Data'!A716","v":"der.24"}]
[{"$f":"'Source Data'!A717","v":"der.24"}]
[{"$f":"'Source Data'!A718","v":"der.24"}]
[{"$f":"'Source Data'!A719","v":"der.24"}]
[{"$f":"'Source Data'!A720","v":"der.24"}]
[{"$f":"'Source Data'!A721","v":"der.24"}]
[{"$f":"'Source Data'!A722","v":"der.24"}]
[{"$f":"'Source Data'!A723","v":"der.24"}]
[{"$f":"'Source Data'!A724","v":"der.24"}]
[{"$f":"'Source Data'!A725","v":"der.25"}]
[{"$f":"'Source Data'!A726","v":"der.25"}]
[{"$f":"'Source Data'!A727","v":"der.25"}]
[{"$f":"'Source Data'!A728","v":"der.25"}]
[{"$f":"'Source Data'!A729","v":"der.25"}]
[{"$f":"'Source Data'!A730","v":"der.25"}]
[{"$f":"'Source Data'!A731","v":"der.25"}]
[{"$f":"'Source Data'!A732","v":"der.25"}]
[{"$f":"'Source Data'!A733","v":"der.25"}]
[{"$f":"'Source Data'!A734","v":"der.25"}]
[{"$f":"'Source Data'!A735","v":"der.25"}]
[{"$f":"'Source Data'!A736","v":"der.25"}]
[{"$f":"'Source Data'!A737","v":"der.26"}]
[{"$f":"'Source Data'!A738","v":"der.26"}]
[{"$f":"'Source Data'!A739","v":"der.26"}]
[{"$f":"'Source Data'!A740","v":"der.26"}]
[{"$f":"'Source Data'!A741","v":"der.26"}]
[{"$f":"'Source Data'!A742","v":"der.26"}]
[{"$f":"'Source Data'!A743","v":"der.26"}]
[{"$f":"'Source Data'!A744","v":"der.26"}]
[{"$f":"'Source Data'!A745","v":"wampac.1"}]
[{"$f":"'Source Data'!A746","v":"wampac.1"}]
[{"$f":"'Source Data'!A747","v":"wampac.1"}]
[{"$f":"'Source Data'!A748","v":"wampac.1"}]
[{"$f":"'Source Data'!A749","v":"wampac.1"}]
[{"$f":"'Source Data'!A750","v":"wampac.1"}]
[{"$f":"'Source Data'!A751","v":"wampac.1"}]
[{"$f":"'Source Data'!A752","v":"wampac.1"}]
[{"$f":"'Source Data'!A753","v":"wampac.1"}]
[{"$f":"'Source Data'!A754","v":"wampac.1"}]
[{"$f":"'Source Data'!A755","v":"wampac.1"}]
[{"$f":"'Source Data'!A756","v":"wampac.1"}]
[{"$f":"'Source Data'!A757","v":"wampac.1"}]
[{"$f":"'Source Data'!A758","v":"wampac.1"}]
[{"$f":"'Source Data'!A759","v":"wampac.1"}]
[{"$f":"'Source Data'!A760","v":"wampac.2"}]
[{"$f":"'Source Data'!A761","v":"wampac.2"}]
[{"$f":"'Source Data'!A762","v":"wampac.2"}]
[{"$f":"'Source Data'!A763","v":"wampac.2"}]
[{"$f":"'Source Data'!A764","v":"wampac.2"}]
[{"$f":"'Source Data'!A765","v":"wampac.2"}]
[{"$f":"'Source Data'!A766","v":"wampac.2"}]
[{"$f":"'Source Data'!A767","v":"wampac.2"}]
[{"$f":"'Source Data'!A768","v":"wampac.2"}]
[{"$f":"'Source Data'!A769","v":"wampac.2"}]
[{"$f":"'Source Data'!A770","v":"wampac.2"}]
[{"$f":"'Source Data'!A771","v":"wampac.2"}]
[{"$f":"'Source Data'!A772","v":"wampac.2"}]
[{"$f":"'Source Data'!A773","v":"wampac.2"}]
[{"$f":"'Source Data'!A774","v":"wampac.2"}]
[{"$f":"'Source Data'!A775","v":"wampac.2"}]
[{"$f":"'Source Data'!A776","v":"wampac.2"}]
[{"$f":"'Source Data'!A777","v":"wampac.2"}]
[{"$f":"'Source Data'!A778","v":"wampac.3"}]
[{"$f":"'Source Data'!A779","v":"wampac.3"}]
[{"$f":"'Source Data'!A780","v":"wampac.3"}]
[{"$f":"'Source Data'!A781","v":"wampac.3"}]
[{"$f":"'Source Data'!A782","v":"wampac.3"}]
[{"$f":"'Source Data'!A783","v":"wampac.3"}]
[{"$f":"'Source Data'!A784","v":"wampac.3"}]
[{"$f":"'Source Data'!A785","v":"wampac.3"}]
[{"$f":"'Source Data'!A786","v":"wampac.3"}]
[{"$f":"'Source Data'!A787","v":"wampac.3"}]
[{"$f":"'Source Data'!A788","v":"wampac.3"}]
[{"$f":"'Source Data'!A789","v":"wampac.3"}]
[{"$f":"'Source Data'!A790","v":"wampac.3"}]
[{"$f":"'Source Data'!A791","v":"wampac.3"}]
[{"$f":"'Source Data'!A792","v":"wampac.3"}]
[{"$f":"'Source Data'!A793","v":"wampac.3"}]
[{"$f":"'Source Data'!A794","v":"wampac.4"}]
[{"$f":"'Source Data'!A795","v":"wampac.4"}]
[{"$f":"'Source Data'!A796","v":"wampac.4"}]
[{"$f":"'Source Data'!A797","v":"wampac.4"}]
[{"$f":"'Source Data'!A798","v":"wampac.4"}]
[{"$f":"'Source Data'!A799","v":"wampac.4"}]
[{"$f":"'Source Data'!A800","v":"wampac.4"}]
[{"$f":"'Source Data'!A801","v":"wampac.4"}]
[{"$f":"'Source Data'!A802","v":"wampac.4"}]
[{"$f":"'Source Data'!A803","v":"wampac.4"}]
[{"$f":"'Source Data'!A804","v":"wampac.4"}]
[{"$f":"'Source Data'!A805","v":"wampac.4"}]
[{"$f":"'Source Data'!A806","v":"wampac.4"}]
[{"$f":"'Source Data'!A807","v":"wampac.4"}]
[{"$f":"'Source Data'!A808","v":"wampac.4"}]
[{"$f":"'Source Data'!A809","v":"wampac.4"}]
[{"$f":"'Source Data'!A810","v":"wampac.4"}]
[{"$f":"'Source Data'!A811","v":"wampac.4"}]
[{"$f":"'Source Data'!A812","v":"wampac.4"}]
[{"$f":"'Source Data'!A813","v":"wampac.5"}]
[{"$f":"'Source Data'!A814","v":"wampac.5"}]
[{"$f":"'Source Data'!A815","v":"wampac.5"}]
[{"$f":"'Source Data'!A816","v":"wampac.5"}]
[{"$f":"'Source Data'!A817","v":"wampac.5"}]
[{"$f":"'Source Data'!A818","v":"wampac.5"}]
[{"$f":"'Source Data'!A819","v":"wampac.5"}]
[{"$f":"'Source Data'!A820","v":"wampac.5"}]
[{"$f":"'Source Data'!A821","v":"wampac.5"}]
[{"$f":"'Source Data'!A822","v":"wampac.5"}]
[{"$f":"'Source Data'!A823","v":"wampac.5"}]
[{"$f":"'Source Data'!A824","v":"wampac.5"}]
[{"$f":"'Source Data'!A825","v":"wampac.5"}]
[{"$f":"'Source Data'!A826","v":"wampac.6"}]
[{"$f":"'Source Data'!A827","v":"wampac.6"}]
[{"$f":"'Source Data'!A828","v":"wampac.6"}]
[{"$f":"'Source Data'!A829","v":"wampac.6"}]
[{"$f":"'Source Data'!A830","v":"wampac.6"}]
[{"$f":"'Source Data'!A831","v":"wampac.6"}]
[{"$f":"'Source Data'!A832","v":"wampac.6"}]
[{"$f":"'Source Data'!A833","v":"wampac.6"}]
[{"$f":"'Source Data'!A834","v":"wampac.6"}]
[{"$f":"'Source Data'!A835","v":"wampac.6"}]
[{"$f":"'Source Data'!A836","v":"wampac.6"}]
[{"$f":"'Source Data'!A837","v":"wampac.6"}]
[{"$f":"'Source Data'!A838","v":"wampac.7"}]
[{"$f":"'Source Data'!A839","v":"wampac.7"}]
[{"$f":"'Source Data'!A840","v":"wampac.7"}]
[{"$f":"'Source Data'!A841","v":"wampac.7"}]
[{"$f":"'Source Data'!A842","v":"wampac.7"}]
[{"$f":"'Source Data'!A843","v":"wampac.7"}]
[{"$f":"'Source Data'!A844","v":"wampac.7"}]
[{"$f":"'Source Data'!A845","v":"wampac.7"}]
[{"$f":"'Source Data'!A846","v":"wampac.7"}]
[{"$f":"'Source Data'!A847","v":"wampac.7"}]
[{"$f":"'Source Data'!A848","v":"wampac.7"}]
[{"$f":"'Source Data'!A849","v":"wampac.7"}]
[{"$f":"'Source Data'!A850","v":"wampac.7"}]
[{"$f":"'Source Data'!A851","v":"wampac.7"}]
[{"$f":"'Source Data'!A852","v":"wampac.7"}]
[{"$f":"'Source Data'!A853","v":"wampac.7"}]
[{"$f":"'Source Data'!A854","v":"wampac.7"}]
[{"$f":"'Source Data'!A855","v":"wampac.7"}]
[{"$f":"'Source Data'!A856","v":"wampac.7"}]
[{"$f":"'Source Data'!A857","v":"wampac.8"}]
[{"$f":"'Source Data'!A858","v":"wampac.8"}]
[{"$f":"'Source Data'!A859","v":"wampac.8"}]
[{"$f":"'Source Data'!A860","v":"wampac.8"}]
[{"$f":"'Source Data'!A861","v":"wampac.8"}]
[{"$f":"'Source Data'!A862","v":"wampac.8"}]
[{"$f":"'Source Data'!A863","v":"wampac.8"}]
[{"$f":"'Source Data'!A864","v":"wampac.8"}]
[{"$f":"'Source Data'!A865","v":"wampac.8"}]
[{"$f":"'Source Data'!A866","v":"wampac.8"}]
[{"$f":"'Source Data'!A867","v":"wampac.8"}]
[{"$f":"'Source Data'!A868","v":"wampac.9"}]
[{"$f":"'Source Data'!A869","v":"wampac.10"}]
[{"$f":"'Source Data'!A870","v":"wampac.10"}]
[{"$f":"'Source Data'!A871","v":"wampac.10"}]
[{"$f":"'Source Data'!A872","v":"wampac.10"}]
[{"$f":"'Source Data'!A873","v":"wampac.10"}]
[{"$f":"'Source Data'!A874","v":"wampac.10"}]
[{"$f":"'Source Data'!A875","v":"wampac.10"}]
[{"$f":"'Source Data'!A876","v":"wampac.10"}]
[{"$f":"'Source Data'!A877","v":"wampac.10"}]
[{"$f":"'Source Data'!A878","v":"wampac.10"}]
[{"$f":"'Source Data'!A879","v":"wampac.10"}]
[{"$f":"'Source Data'!A880","v":"wampac.10"}]
[{"$f":"'Source Data'!A881","v":"wampac.11"}]
[{"$f":"'Source Data'!A882","v":"wampac.11"}]
[{"$f":"'Source Data'!A883","v":"wampac.11"}]
[{"$f":"'Source Data'!A884","v":"wampac.11"}]
[{"$f":"'Source Data'!A885","v":"wampac.11"}]
[{"$f":"'Source Data'!A886","v":"wampac.11"}]
[{"$f":"'Source Data'!A887","v":"wampac.11"}]
[{"$f":"'Source Data'!A888","v":"wampac.11"}]
[{"$f":"'Source Data'!A889","v":"wampac.11"}]
[{"$f":"'Source Data'!A890","v":"wampac.11"}]
[{"$f":"'Source Data'!A891","v":"wampac.11"}]
[{"$f":"'Source Data'!A892","v":"wampac.11"}]
[{"$f":"'Source Data'!A893","v":"wampac.11"}]
[{"$f":"'Source Data'!A894","v":"wampac.11"}]
[{"$f":"'Source Data'!A895","v":"wampac.11"}]
[{"$f":"'Source Data'!A896","v":"wampac.11"}]
[{"$f":"'Source Data'!A897","v":"wampac.12"}]
[{"$f":"'Source Data'!A898","v":"wampac.12"}]
[{"$f":"'Source Data'!A899","v":"wampac.12"}]
[{"$f":"'Source Data'!A900","v":"wampac.12"}]
[{"$f":"'Source Data'!A901","v":"wampac.12"}]
[{"$f":"'Source Data'!A902","v":"wampac.12"}]
[{"$f":"'Source Data'!A903","v":"wampac.12"}]
[{"$f":"'Source Data'!A904","v":"wampac.12"}]
[{"$f":"'Source Data'!A905","v":"et.1"}]
[{"$f":"'Source Data'!A906","v":"et.1"}]
[{"$f":"'Source Data'!A907","v":"et.1"}]
[{"$f":"'Source Data'!A908","v":"et.1"}]
[{"$f":"'Source Data'!A909","v":"et.1"}]
[{"$f":"'Source Data'!A910","v":"et.1"}]
[{"$f":"'Source Data'!A911","v":"et.1"}]
[{"$f":"'Source Data'!A912","v":"et.1"}]
[{"$f":"'Source Data'!A913","v":"et.1"}]
[{"$f":"'Source Data'!A914","v":"et.1"}]
[{"$f":"'Source Data'!A915","v":"et.2"}]
[{"$f":"'Source Data'!A916","v":"et.2"}]
[{"$f":"'Source Data'!A917","v":"et.2"}]
[{"$f":"'Source Data'!A918","v":"et.2"}]
[{"$f":"'Source Data'!A919","v":"et.2"}]
[{"$f":"'Source Data'!A920","v":"et.2"}]
[{"$f":"'Source Data'!A921","v":"et.2"}]
[{"$f":"'Source Data'!A922","v":"et.2"}]
[{"$f":"'Source Data'!A923","v":"et.2"}]
[{"$f":"'Source Data'!A924","v":"et.2"}]
[{"$f":"'Source Data'!A925","v":"et.3"}]
[{"$f":"'Source Data'!A926","v":"et.3"}]
[{"$f":"'Source Data'!A927","v":"et.3"}]
[{"$f":"'Source Data'!A928","v":"et.3"}]
[{"$f":"'Source Data'!A929","v":"et.3"}]
[{"$f":"'Source Data'!A930","v":"et.3"}]
[{"$f":"'Source Data'!A931","v":"et.3"}]
[{"$f":"'Source Data'!A932","v":"et.3"}]
[{"$f":"'Source Data'!A933","v":"et.3"}]
[{"$f":"'Source Data'!A934","v":"et.3"}]
[{"$f":"'Source Data'!A935","v":"et.3"}]
[{"$f":"'Source Data'!A936","v":"et.3"}]
[{"$f":"'Source Data'!A937","v":"et.3"}]
[{"$f":"'Source Data'!A938","v":"et.3"}]
[{"$f":"'Source Data'!A939","v":"et.3"}]
[{"$f":"'Source Data'!A940","v":"et.3"}]
[{"$f":"'Source Data'!A941","v":"et.3"}]
[{"$f":"'Source Data'!A942","v":"et.3"}]
[{"$f":"'Source Data'!A943","v":"et.3"}]
[{"$f":"'Source Data'!A944","v":"et.3"}]
[{"$f":"'Source Data'!A945","v":"et.3"}]
[{"$f":"'Source Data'!A946","v":"et.3"}]
[{"$f":"'Source Data'!A947","v":"et.3"}]
[{"$f":"'Source Data'!A948","v":"et.4"}]
[{"$f":"'Source Data'!A949","v":"et.4"}]
[{"$f":"'Source Data'!A950","v":"et.4"}]
[{"$f":"'Source Data'!A951","v":"et.4"}]
[{"$f":"'Source Data'!A952","v":"et.4"}]
[{"$f":"'Source Data'!A953","v":"et.4"}]
[{"$f":"'Source Data'!A954","v":"et.4"}]
[{"$f":"'Source Data'!A955","v":"et.4"}]
[{"$f":"'Source Data'!A956","v":"et.4"}]
[{"$f":"'Source Data'!A957","v":"et.4"}]
[{"$f":"'Source Data'!A958","v":"et.4"}]
[{"$f":"'Source Data'!A959","v":"et.4"}]
[{"$f":"'Source Data'!A960","v":"et.4"}]
[{"$f":"'Source Data'!A961","v":"et.4"}]
[{"$f":"'Source Data'!A962","v":"et.5"}]
[{"$f":"'Source Data'!A963","v":"et.5"}]
[{"$f":"'Source Data'!A964","v":"et.5"}]
[{"$f":"'Source Data'!A965","v":"et.5"}]
[{"$f":"'Source Data'!A966","v":"et.5"}]
[{"$f":"'Source Data'!A967","v":"et.5"}]
[{"$f":"'Source Data'!A968","v":"et.5"}]
[{"$f":"'Source Data'!A969","v":"et.5"}]
[{"$f":"'Source Data'!A970","v":"et.5"}]
[{"$f":"'Source Data'!A971","v":"et.6"}]
[{"$f":"'Source Data'!A972","v":"et.6"}]
[{"$f":"'Source Data'!A973","v":"et.6"}]
[{"$f":"'Source Data'!A974","v":"et.6"}]
[{"$f":"'Source Data'!A975","v":"et.6"}]
[{"$f":"'Source Data'!A976","v":"et.6"}]
[{"$f":"'Source Data'!A977","v":"et.6"}]
[{"$f":"'Source Data'!A978","v":"et.6"}]
[{"$f":"'Source Data'!A979","v":"et.6"}]
[{"$f":"'Source Data'!A980","v":"et.6"}]
[{"$f":"'Source Data'!A981","v":"et.7"}]
[{"$f":"'Source Data'!A982","v":"et.7"}]
[{"$f":"'Source Data'!A983","v":"et.7"}]
[{"$f":"'Source Data'!A984","v":"et.7"}]
[{"$f":"'Source Data'!A985","v":"et.7"}]
[{"$f":"'Source Data'!A986","v":"et.7"}]
[{"$f":"'Source Data'!A987","v":"et.8"}]
[{"$f":"'Source Data'!A988","v":"et.8"}]
[{"$f":"'Source Data'!A989","v":"et.8"}]
[{"$f":"'Source Data'!A990","v":"et.8"}]
[{"$f":"'Source Data'!A991","v":"et.8"}]
[{"$f":"'Source Data'!A992","v":"et.8"}]
[{"$f":"'Source Data'!A993","v":"et.8"}]
[{"$f":"'Source Data'!A994","v":"et.9"}]
[{"$f":"'Source Data'!A995","v":"et.9"}]
[{"$f":"'Source Data'!A996","v":"et.9"}]
[{"$f":"'Source Data'!A997","v":"et.9"}]
[{"$f":"'Source Data'!A998","v":"et.9"}]
[{"$f":"'Source Data'!A999","v":"et.9"}]
[{"$f":"'Source Data'!A1000","v":"et.9"}]
[{"$f":"'Source Data'!A1001","v":"et.9"}]
[{"$f":"'Source Data'!A1002","v":"et.9"}]
[{"$f":"'Source Data'!A1003","v":"et.9"}]
[{"$f":"'Source Data'!A1004","v":"et.9"}]
[{"$f":"'Source Data'!A1005","v":"et.9"}]
[{"$f":"'Source Data'!A1006","v":"et.9"}]
[{"$f":"'Source Data'!A1007","v":"et.9"}]
[{"$f":"'Source Data'!A1008","v":"et.10"}]
[{"$f":"'Source Data'!A1009","v":"et.10"}]
[{"$f":"'Source Data'!A1010","v":"et.10"}]
[{"$f":"'Source Data'!A1011","v":"et.10"}]
[{"$f":"'Source Data'!A1012","v":"et.10"}]
[{"$f":"'Source Data'!A1013","v":"et.10"}]
[{"$f":"'Source Data'!A1014","v":"et.10"}]
[{"$f":"'Source Data'!A1015","v":"et.11"}]
[{"$f":"'Source Data'!A1016","v":"et.11"}]
[{"$f":"'Source Data'!A1017","v":"et.11"}]
[{"$f":"'Source Data'!A1018","v":"et.11"}]
[{"$f":"'Source Data'!A1019","v":"et.11"}]
[{"$f":"'Source Data'!A1020","v":"et.11"}]
[{"$f":"'Source Data'!A1021","v":"et.11"}]
[{"$f":"'Source Data'!A1022","v":"et.11"}]
[{"$f":"'Source Data'!A1023","v":"et.11"}]
[{"$f":"'Source Data'!A1024","v":"et.11"}]
[{"$f":"'Source Data'!A1025","v":"et.11"}]
[{"$f":"'Source Data'!A1026","v":"et.11"}]
[{"$f":"'Source Data'!A1027","v":"et.11"}]
[{"$f":"'Source Data'!A1028","v":"et.11"}]
[{"$f":"'Source Data'!A1029","v":"et.11"}]
[{"$f":"'Source Data'!A1030","v":"et.11"}]
[{"$f":"'Source Data'!A1031","v":"et.11"}]
[{"$f":"'Source Data'!A1032","v":"et.11"}]
[{"$f":"'Source Data'!A1033","v":"et.11"}]
[{"$f":"'Source Data'!A1034","v":"et.11"}]
[{"$f":"'Source Data'!A1035","v":"et.12"}]
[{"$f":"'Source Data'!A1036","v":"et.12"}]
[{"$f":"'Source Data'!A1037","v":"et.12"}]
[{"$f":"'Source Data'!A1038","v":"et.12"}]
[{"$f":"'Source Data'!A1039","v":"et.12"}]
[{"$f":"'Source Data'!A1040","v":"et.12"}]
[{"$f":"'Source Data'!A1041","v":"et.12"}]
[{"$f":"'Source Data'!A1042","v":"et.12"}]
[{"$f":"'Source Data'!A1043","v":"et.13"}]
[{"$f":"'Source Data'!A1044","v":"et.13"}]
[{"$f":"'Source Data'!A1045","v":"et.13"}]
[{"$f":"'Source Data'!A1046","v":"et.13"}]
[{"$f":"'Source Data'!A1047","v":"et.13"}]
[{"$f":"'Source Data'!A1048","v":"et.13"}]
[{"$f":"'Source Data'!A1049","v":"et.13"}]
[{"$f":"'Source Data'!A1050","v":"et.13"}]
[{"$f":"'Source Data'!A1051","v":"et.13"}]
[{"$f":"'Source Data'!A1052","v":"et.13"}]
[{"$f":"'Source Data'!A1053","v":"et.13"}]
[{"$f":"'Source Data'!A1054","v":"et.13"}]
[{"$f":"'Source Data'!A1055","v":"et.13"}]
[{"$f":"'Source Data'!A1056","v":"et.13"}]
[{"$f":"'Source Data'!A1057","v":"et.14"}]
[{"$f":"'Source Data'!A1058","v":"et.14"}]
[{"$f":"'Source Data'!A1059","v":"et.14"}]
[{"$f":"'Source Data'!A1060","v":"et.14"}]
[{"$f":"'Source Data'!A1061","v":"et.14"}]
[{"$f":"'Source Data'!A1062","v":"et.14"}]
[{"$f":"'Source Data'!A1063","v":"et.14"}]
[{"$f":"'Source Data'!A1064","v":"et.14"}]
[{"$f":"'Source Data'!A1065","v":"et.14"}]
[{"$f":"'Source Data'!A1066","v":"et.14"}]
[{"$f":"'Source Data'!A1067","v":"et.14"}]
[{"$f":"'Source Data'!A1068","v":"et.14"}]
[{"$f":"'Source Data'!A1069","v":"et.15"}]
[{"$f":"'Source Data'!A1070","v":"et.15"}]
[{"$f":"'Source Data'!A1071","v":"et.15"}]
[{"$f":"'Source Data'!A1072","v":"et.15"}]
[{"$f":"'Source Data'!A1073","v":"et.15"}]
[{"$f":"'Source Data'!A1074","v":"et.15"}]
[{"$f":"'Source Data'!A1075","v":"et.15"}]
[{"$f":"'Source Data'!A1076","v":"et.15"}]
[{"$f":"'Source Data'!A1077","v":"et.15"}]
[{"$f":"'Source Data'!A1078","v":"et.15"}]
[{"$f":"'Source Data'!A1079","v":"et.15"}]
[{"$f":"'Source Data'!A1080","v":"et.15"}]
[{"$f":"'Source Data'!A1081","v":"et.15"}]
[{"$f":"'Source Data'!A1082","v":"et.15"}]
[{"$f":"'Source Data'!A1083","v":"et.15"}]
[{"$f":"'Source Data'!A1084","v":"et.15"}]
[{"$f":"'Source Data'!A1085","v":"et.15"}]
[{"$f":"'Source Data'!A1086","v":"et.16"}]
[{"$f":"'Source Data'!A1087","v":"et.16"}]
[{"$f":"'Source Data'!A1088","v":"et.16"}]
[{"$f":"'Source Data'!A1089","v":"et.16"}]
[{"$f":"'Source Data'!A1090","v":"et.16"}]
[{"$f":"'Source Data'!A1091","v":"et.16"}]
[{"$f":"'Source Data'!A1092","v":"et.16"}]
[{"$f":"'Source Data'!A1093","v":"et.16"}]
[{"$f":"'Source Data'!A1094","v":"et.16"}]
[{"$f":"'Source Data'!A1095","v":"et.16"}]
[{"$f":"'Source Data'!A1096","v":"et.16"}]
[{"$f":"'Source Data'!A1097","v":"et.16"}]
[{"$f":"'Source Data'!A1098","v":"et.16"}]
[{"$f":"'Source Data'!A1099","v":"et.16"}]
[{"$f":"'Source Data'!A1100","v":"et.16"}]
[{"$f":"'Source Data'!A1101","v":"et.16"}]
[{"$f":"'Source Data'!A1102","v":"et.16"}]
[{"$f":"'Source Data'!A1103","v":"et.16"}]
[{"$f":"'Source Data'!A1104","v":"et.16"}]
[{"$f":"'Source Data'!A1105","v":"et.16"}]
[{"$f":"'Source Data'!A1106","v":"et.16"}]
[{"$f":"'Source Data'!A1107","v":"et.16"}]
[{"$f":"'Source Data'!A1108","v":"et.16"}]
[{"$f":"'Source Data'!A1109","v":"et.16"}]
[{"$f":"'Source Data'!A1110","v":"dr.1"}]
[{"$f":"'Source Data'!A1111","v":"dr.1"}]
[{"$f":"'Source Data'!A1112","v":"dr.1"}]
[{"$f":"'Source Data'!A1113","v":"dr.1"}]
[{"$f":"'Source Data'!A1114","v":"dr.1"}]
[{"$f":"'Source Data'!A1115","v":"dr.1"}]
[{"$f":"'Source Data'!A1116","v":"dr.1"}]
[{"$f":"'Source Data'!A1117","v":"dr.1"}]
[{"$f":"'Source Data'!A1118","v":"dr.1"}]
[{"$f":"'Source Data'!A1119","v":"dr.1"}]
[{"$f":"'Source Data'!A1120","v":"dr.1"}]
[{"$f":"'Source Data'!A1121","v":"dr.1"}]
[{"$f":"'Source Data'!A1122","v":"dr.1"}]
[{"$f":"'Source Data'!A1123","v":"dr.1"}]
[{"$f":"'Source Data'!A1124","v":"dr.1"}]
[{"$f":"'Source Data'!A1125","v":"dr.1"}]
[{"$f":"'Source Data'!A1126","v":"dr.1"}]
[{"$f":"'Source Data'!A1127","v":"dr.1"}]
[{"$f":"'Source Data'!A1128","v":"dr.1"}]
[{"$f":"'Source Data'!A1129","v":"dr.1"}]
[{"$f":"'Source Data'!A1130","v":"dr.1"}]
[{"$f":"'Source Data'!A1131","v":"dr.1"}]
[{"$f":"'Source Data'!A1132","v":"dr.1"}]
[{"$f":"'Source Data'!A1133","v":"dr.1"}]
[{"$f":"'Source Data'!A1134","v":"dr.1"}]
[{"$f":"'Source Data'!A1135","v":"dr.1"}]
[{"$f":"'Source Data'!A1136","v":"dr.1"}]
[{"$f":"'Source Data'!A1137","v":"dr.1"}]
[{"$f":"'Source Data'!A1138","v":"dr.2"}]
[{"$f":"'Source Data'!A1139","v":"dr.2"}]
[{"$f":"'Source Data'!A1140","v":"dr.2"}]
[{"$f":"'Source Data'!A1141","v":"dr.2"}]
[{"$f":"'Source Data'!A1142","v":"dr.2"}]
[{"$f":"'Source Data'!A1143","v":"dr.2"}]
[{"$f":"'Source Data'!A1144","v":"dr.2"}]
[{"$f":"'Source Data'!A1145","v":"dr.2"}]
[{"$f":"'Source Data'!A1146","v":"dr.2"}]
[{"$f":"'Source Data'!A1147","v":"dr.2"}]
[{"$f":"'Source Data'!A1148","v":"dr.2"}]
[{"$f":"'Source Data'!A1149","v":"dr.2"}]
[{"$f":"'Source Data'!A1150","v":"dr.2"}]
[{"$f":"'Source Data'!A1151","v":"dr.2"}]
[{"$f":"'Source Data'!A1152","v":"dr.2"}]
[{"$f":"'Source Data'!A1153","v":"dr.2"}]
[{"$f":"'Source Data'!A1154","v":"dr.2"}]
[{"$f":"'Source Data'!A1155","v":"dr.2"}]
[{"$f":"'Source Data'!A1156","v":"dr.3"}]
[{"$f":"'Source Data'!A1157","v":"dr.3"}]
[{"$f":"'Source Data'!A1158","v":"dr.3"}]
[{"$f":"'Source Data'!A1159","v":"dr.3"}]
[{"$f":"'Source Data'!A1160","v":"dr.3"}]
[{"$f":"'Source Data'!A1161","v":"dr.3"}]
[{"$f":"'Source Data'!A1162","v":"dr.3"}]
[{"$f":"'Source Data'!A1163","v":"dr.3"}]
[{"$f":"'Source Data'!A1164","v":"dr.3"}]
[{"$f":"'Source Data'!A1165","v":"dr.3"}]
[{"$f":"'Source Data'!A1166","v":"dr.3"}]
[{"$f":"'Source Data'!A1167","v":"dr.3"}]
[{"$f":"'Source Data'!A1168","v":"dr.3"}]
[{"$f":"'Source Data'!A1169","v":"dr.3"}]
[{"$f":"'Source Data'!A1170","v":"dr.3"}]
[{"$f":"'Source Data'!A1171","v":"dr.3"}]
[{"$f":"'Source Data'!A1172","v":"dr.3"}]
[{"$f":"'Source Data'!A1173","v":"dr.3"}]
[{"$f":"'Source Data'!A1174","v":"dr.3"}]
[{"$f":"'Source Data'!A1175","v":"dr.3"}]
[{"$f":"'Source Data'!A1176","v":"dr.3"}]
[{"$f":"'Source Data'!A1177","v":"dr.3"}]
[{"$f":"'Source Data'!A1178","v":"dr.3"}]
[{"$f":"'Source Data'!A1179","v":"dr.4"}]
[{"$f":"'Source Data'!A1180","v":"dr.4"}]
[{"$f":"'Source Data'!A1181","v":"dr.4"}]
[{"$f":"'Source Data'!A1182","v":"dr.4"}]
[{"$f":"'Source Data'!A1183","v":"dr.4"}]
[{"$f":"'Source Data'!A1184","v":"dr.4"}]
[{"$f":"'Source Data'!A1185","v":"dr.4"}]
[{"$f":"'Source Data'!A1186","v":"dr.4"}]
[{"$f":"'Source Data'!A1187","v":"dr.4"}]
[{"$f":"'Source Data'!A1188","v":"dr.4"}]
[{"$f":"'Source Data'!A1189","v":"dr.4"}]
[{"$f":"'Source Data'!A1190","v":"dr.4"}]
[{"$f":"'Source Data'!A1191","v":"dr.4"}]
[{"$f":"'Source Data'!A1192","v":"dr.4"}]
[{"$f":"'Source Data'!A1193","v":"dr.4"}]
[{"$f":"'Source Data'!A1194","v":"dr.4"}]
[{"$f":"'Source Data'!A1195","v":"dr.4"}]
[{"$f":"'Source Data'!A1196","v":"dr.4"}]
[{"$f":"'Source Data'!A1197","v":"dr.4"}]
[{"$f":"'Source Data'!A1198","v":"dr.4"}]
[{"$f":"'Source Data'!A1199","v":"dr.5"}]
[{"$f":"'Source Data'!A1200","v":"dr.5"}]
[{"$f":"'Source Data'!A1201","v":"dr.5"}]
[{"$f":"'Source Data'!A1202","v":"dr.5"}]
[{"$f":"'Source Data'!A1203","v":"dr.5"}]
[{"$f":"'Source Data'!A1204","v":"dr.5"}]
[{"$f":"'Source Data'!A1205","v":"dr.5"}]
[{"$f":"'Source Data'!A1206","v":"dr.5"}]
[{"$f":"'Source Data'!A1207","v":"dr.5"}]
[{"$f":"'Source Data'!A1208","v":"dr.5"}]
[{"$f":"'Source Data'!A1209","v":"dr.5"}]
[{"$f":"'Source Data'!A1210","v":"dr.5"}]
[{"$f":"'Source Data'!A1211","v":"dr.5"}]
[{"$f":"'Source Data'!A1212","v":"dr.5"}]
[{"$f":"'Source Data'!A1213","v":"dr.5"}]
[{"$f":"'Source Data'!A1214","v":"dr.5"}]
[{"$f":"'Source Data'!A1215","v":"dr.6"}]
[{"$f":"'Source Data'!A1216","v":"dr.6"}]
[{"$f":"'Source Data'!A1217","v":"dr.6"}]
[{"$f":"'Source Data'!A1218","v":"dr.6"}]
[{"$f":"'Source Data'!A1219","v":"dr.6"}]
[{"$f":"'Source Data'!A1220","v":"dr.6"}]
[{"$f":"'Source Data'!A1221","v":"dr.6"}]
[{"$f":"'Source Data'!A1222","v":"dr.6"}]
[{"$f":"'Source Data'!A1223","v":"dr.6"}]
[{"$f":"'Source Data'!A1224","v":"dr.6"}]
[{"$f":"'Source Data'!A1225","v":"dr.6"}]
[{"$f":"'Source Data'!A1226","v":"dr.6"}]
[{"$f":"'Source Data'!A1227","v":"dr.6"}]
[{"$f":"'Source Data'!A1228","v":"dr.6"}]
[{"$f":"'Source Data'!A1229","v":"dr.6"}]
[{"$f":"'Source Data'!A1230","v":"dr.7"}]
[{"$f":"'Source Data'!A1231","v":"dr.7"}]
[{"$f":"'Source Data'!A1232","v":"dr.7"}]
[{"$f":"'Source Data'!A1233","v":"dr.7"}]
[{"$f":"'Source Data'!A1234","v":"dr.7"}]
[{"$f":"'Source Data'!A1235","v":"dr.7"}]
[{"$f":"'Source Data'!A1236","v":"dr.7"}]
[{"$f":"'Source Data'!A1237","v":"dr.7"}]
[{"$f":"'Source Data'!A1238","v":"dr.7"}]
[{"$f":"'Source Data'!A1239","v":"dr.7"}]
[{"$f":"'Source Data'!A1240","v":"dr.7"}]
[{"$f":"'Source Data'!A1241","v":"dr.7"}]
[{"$f":"'Source Data'!A1242","v":"dr.7"}]
[{"$f":"'Source Data'!A1243","v":"dr.7"}]
[{"$f":"'Source Data'!A1244","v":"dr.7"}]
[{"$f":"'Source Data'!A1245","v":"dr.7"}]
[{"$f":"'Source Data'!A1246","v":"dr.7"}]
[{"$f":"'Source Data'!A1247","v":"dr.7"}]
[{"$f":"'Source Data'!A1248","v":"dr.7"}]
[{"$f":"'Source Data'!A1249","v":"dr.7"}]
[{"$f":"'Source Data'!A1250","v":"dr.7"}]
[{"$f":"'Source Data'!A1251","v":"dgm.1"}]
[{"$f":"'Source Data'!A1252","v":"dgm.1"}]
[{"$f":"'Source Data'!A1253","v":"dgm.1"}]
[{"$f":"'Source Data'!A1254","v":"dgm.1"}]
[{"$f":"'Source Data'!A1255","v":"dgm.1"}]
[{"$f":"'Source Data'!A1256","v":"dgm.1"}]
[{"$f":"'Source Data'!A1257","v":"dgm.1"}]
[{"$f":"'Source Data'!A1258","v":"dgm.1"}]
[{"$f":"'Source Data'!A1259","v":"dgm.1"}]
[{"$f":"'Source Data'!A1260","v":"dgm.1"}]
[{"$f":"'Source Data'!A1261","v":"dgm.1"}]
[{"$f":"'Source Data'!A1262","v":"dgm.1"}]
[{"$f":"'Source Data'!A1263","v":"dgm.2"}]
[{"$f":"'Source Data'!A1264","v":"dgm.2"}]
[{"$f":"'Source Data'!A1265","v":"dgm.2"}]
[{"$f":"'Source Data'!A1266","v":"dgm.2"}]
[{"$f":"'Source Data'!A1267","v":"dgm.2"}]
[{"$f":"'Source Data'!A1268","v":"dgm.2"}]
[{"$f":"'Source Data'!A1269","v":"dgm.2"}]
[{"$f":"'Source Data'!A1270","v":"dgm.2"}]
[{"$f":"'Source Data'!A1271","v":"dgm.2"}]
[{"$f":"'Source Data'!A1272","v":"dgm.2"}]
[{"$f":"'Source Data'!A1273","v":"dgm.2"}]
[{"$f":"'Source Data'!A1274","v":"dgm.2"}]
[{"$f":"'Source Data'!A1275","v":"dgm.3"}]
[{"$f":"'Source Data'!A1276","v":"dgm.3"}]
[{"$f":"'Source Data'!A1277","v":"dgm.3"}]
[{"$f":"'Source Data'!A1278","v":"dgm.3"}]
[{"$f":"'Source Data'!A1279","v":"dgm.3"}]
[{"$f":"'Source Data'!A1280","v":"dgm.3"}]
[{"$f":"'Source Data'!A1281","v":"dgm.3"}]
[{"$f":"'Source Data'!A1282","v":"dgm.3"}]
[{"$f":"'Source Data'!A1283","v":"dgm.3"}]
[{"$f":"'Source Data'!A1284","v":"dgm.3"}]
[{"$f":"'Source Data'!A1285","v":"dgm.3"}]
[{"$f":"'Source Data'!A1286","v":"dgm.3"}]
[{"$f":"'Source Data'!A1287","v":"dgm.3"}]
[{"$f":"'Source Data'!A1288","v":"dgm.3"}]
[{"$f":"'Source Data'!A1289","v":"dgm.3"}]
[{"$f":"'Source Data'!A1290","v":"dgm.3"}]
[{"$f":"'Source Data'!A1291","v":"dgm.3"}]
[{"$f":"'Source Data'!A1292","v":"dgm.3"}]
[{"$f":"'Source Data'!A1293","v":"dgm.3"}]
[{"$f":"'Source Data'!A1294","v":"dgm.3"}]
[{"$f":"'Source Data'!A1295","v":"dgm.3"}]
[{"$f":"'Source Data'!A1296","v":"dgm.3"}]
[{"$f":"'Source Data'!A1297","v":"dgm.3"}]
[{"$f":"'Source Data'!A1298","v":"dgm.3"}]
[{"$f":"'Source Data'!A1299","v":"dgm.4"}]
[{"$f":"'Source Data'!A1300","v":"dgm.4"}]
[{"$f":"'Source Data'!A1301","v":"dgm.4"}]
[{"$f":"'Source Data'!A1302","v":"dgm.4"}]
[{"$f":"'Source Data'!A1303","v":"dgm.4"}]
[{"$f":"'Source Data'!A1304","v":"dgm.4"}]
[{"$f":"'Source Data'!A1305","v":"dgm.4"}]
[{"$f":"'Source Data'!A1306","v":"dgm.4"}]
[{"$f":"'Source Data'!A1307","v":"dgm.4"}]
[{"$f":"'Source Data'!A1308","v":"dgm.4"}]
[{"$f":"'Source Data'!A1309","v":"dgm.4"}]
[{"$f":"'Source Data'!A1310","v":"dgm.4"}]
[{"$f":"'Source Data'!A1311","v":"dgm.4"}]
[{"$f":"'Source Data'!A1312","v":"dgm.4"}]
[{"$f":"'Source Data'!A1313","v":"dgm.4"}]
[{"$f":"'Source Data'!A1314","v":"dgm.4"}]
[{"$f":"'Source Data'!A1315","v":"dgm.4"}]
[{"$f":"'Source Data'!A1316","v":"dgm.5"}]
[{"$f":"'Source Data'!A1317","v":"dgm.5"}]
[{"$f":"'Source Data'!A1318","v":"dgm.5"}]
[{"$f":"'Source Data'!A1319","v":"dgm.5"}]
[{"$f":"'Source Data'!A1320","v":"dgm.5"}]
[{"$f":"'Source Data'!A1321","v":"dgm.5"}]
[{"$f":"'Source Data'!A1322","v":"dgm.5"}]
[{"$f":"'Source Data'!A1323","v":"dgm.5"}]
[{"$f":"'Source Data'!A1324","v":"dgm.5"}]
[{"$f":"'Source Data'!A1325","v":"dgm.5"}]
[{"$f":"'Source Data'!A1326","v":"dgm.5"}]
[{"$f":"'Source Data'!A1327","v":"dgm.5"}]
[{"$f":"'Source Data'!A1328","v":"dgm.5"}]
[{"$f":"'Source Data'!A1329","v":"dgm.5"}]
[{"$f":"'Source Data'!A1330","v":"dgm.5"}]
[{"$f":"'Source Data'!A1331","v":"dgm.5"}]
[{"$f":"'Source Data'!A1332","v":"dgm.5"}]
[{"$f":"'Source Data'!A1333","v":"dgm.5"}]
[{"$f":"'Source Data'!A1334","v":"dgm.5"}]
[{"$f":"'Source Data'!A1335","v":"dgm.5"}]
[{"$f":"'Source Data'!A1336","v":"dgm.5"}]
[{"$f":"'Source Data'!A1337","v":"dgm.5"}]
[{"$f":"'Source Data'!A1338","v":"dgm.6"}]
[{"$f":"'Source Data'!A1339","v":"dgm.6"}]
[{"$f":"'Source Data'!A1340","v":"dgm.6"}]
[{"$f":"'Source Data'!A1341","v":"dgm.6"}]
[{"$f":"'Source Data'!A1342","v":"dgm.6"}]
[{"$f":"'Source Data'!A1343","v":"dgm.6"}]
[{"$f":"'Source Data'!A1344","v":"dgm.6"}]
[{"$f":"'Source Data'!A1345","v":"dgm.6"}]
[{"$f":"'Source Data'!A1346","v":"dgm.6"}]
[{"$f":"'Source Data'!A1347","v":"dgm.6"}]
[{"$f":"'Source Data'!A1348","v":"dgm.6"}]
[{"$f":"'Source Data'!A1349","v":"dgm.6"}]
[{"$f":"'Source Data'!A1350","v":"dgm.7"}]
[{"$f":"'Source Data'!A1351","v":"dgm.7"}]
[{"$f":"'Source Data'!A1352","v":"dgm.7"}]
[{"$f":"'Source Data'!A1353","v":"dgm.7"}]
[{"$f":"'Source Data'!A1354","v":"dgm.7"}]
[{"$f":"'Source Data'!A1355","v":"dgm.7"}]
[{"$f":"'Source Data'!A1356","v":"dgm.7"}]
[{"$f":"'Source Data'!A1357","v":"dgm.7"}]
[{"$f":"'Source Data'!A1358","v":"dgm.7"}]
[{"$f":"'Source Data'!A1359","v":"dgm.7"}]
[{"$f":"'Source Data'!A1360","v":"dgm.7"}]
[{"$f":"'Source Data'!A1361","v":"dgm.7"}]
[{"$f":"'Source Data'!A1362","v":"dgm.7"}]
[{"$f":"'Source Data'!A1363","v":"dgm.8"}]
[{"$f":"'Source Data'!A1364","v":"dgm.8"}]
[{"$f":"'Source Data'!A1365","v":"dgm.8"}]
[{"$f":"'Source Data'!A1366","v":"dgm.8"}]
[{"$f":"'Source Data'!A1367","v":"dgm.8"}]
[{"$f":"'Source Data'!A1368","v":"dgm.8"}]
[{"$f":"'Source Data'!A1369","v":"dgm.8"}]
[{"$f":"'Source Data'!A1370","v":"dgm.8"}]
[{"$f":"'Source Data'!A1371","v":"dgm.8"}]
[{"$f":"'Source Data'!A1372","v":"dgm.8"}]
[{"$f":"'Source Data'!A1373","v":"dgm.8"}]
[{"$f":"'Source Data'!A1374","v":"dgm.8"}]
[{"$f":"'Source Data'!A1375","v":"dgm.8"}]
[{"$f":"'Source Data'!A1376","v":"dgm.8"}]
[{"$f":"'Source Data'!A1377","v":"dgm.8"}]
[{"$f":"'Source Data'!A1378","v":"dgm.8"}]
[{"$f":"'Source Data'!A1379","v":"dgm.9"}]
[{"$f":"'Source Data'!A1380","v":"dgm.9"}]
[{"$f":"'Source Data'!A1381","v":"dgm.9"}]
[{"$f":"'Source Data'!A1382","v":"dgm.9"}]
[{"$f":"'Source Data'!A1383","v":"dgm.9"}]
[{"$f":"'Source Data'!A1384","v":"dgm.9"}]
[{"$f":"'Source Data'!A1385","v":"dgm.9"}]
[{"$f":"'Source Data'!A1386","v":"dgm.9"}]
[{"$f":"'Source Data'!A1387","v":"dgm.9"}]
[{"$f":"'Source Data'!A1388","v":"dgm.9"}]
[{"$f":"'Source Data'!A1389","v":"dgm.9"}]
[{"$f":"'Source Data'!A1390","v":"dgm.9"}]
[{"$f":"'Source Data'!A1391","v":"dgm.10"}]
[{"$f":"'Source Data'!A1392","v":"dgm.10"}]
[{"$f":"'Source Data'!A1393","v":"dgm.10"}]
[{"$f":"'Source Data'!A1394","v":"dgm.10"}]
[{"$f":"'Source Data'!A1395","v":"dgm.10"}]
[{"$f":"'Source Data'!A1396","v":"dgm.10"}]
[{"$f":"'Source Data'!A1397","v":"dgm.10"}]
[{"$f":"'Source Data'!A1398","v":"dgm.10"}]
[{"$f":"'Source Data'!A1399","v":"dgm.10"}]
[{"$f":"'Source Data'!A1400","v":"dgm.10"}]
[{"$f":"'Source Data'!A1401","v":"dgm.10"}]
[{"$f":"'Source Data'!A1402","v":"dgm.10"}]
[{"$f":"'Source Data'!A1403","v":"dgm.10"}]
[{"$f":"'Source Data'!A1404","v":"dgm.10"}]
[{"$f":"'Source Data'!A1405","v":"dgm.11"}]
[{"$f":"'Source Data'!A1406","v":"dgm.11"}]
[{"$f":"'Source Data'!A1407","v":"dgm.11"}]
[{"$f":"'Source Data'!A1408","v":"dgm.11"}]
[{"$f":"'Source Data'!A1409","v":"dgm.11"}]
[{"$f":"'Source Data'!A1410","v":"dgm.11"}]
[{"$f":"'Source Data'!A1411","v":"dgm.11"}]
[{"$f":"'Source Data'!A1412","v":"dgm.11"}]
[{"$f":"'Source Data'!A1413","v":"dgm.11"}]
[{"$f":"'Source Data'!A1414","v":"dgm.11"}]
[{"$f":"'Source Data'!A1415","v":"dgm.11"}]
[{"$f":"'Source Data'!A1416","v":"dgm.11"}]
[{"$f":"'Source Data'!A1417","v":"dgm.11"}]
[{"$f":"'Source Data'!A1418","v":"dgm.11"}]
[{"$f":"'Source Data'!A1419","v":"dgm.11"}]
[{"$f":"'Source Data'!A1420","v":"dgm.11"}]
[{"$f":"'Source Data'!A1421","v":"dgm.11"}]
[{"$f":"'Source Data'!A1422","v":"dgm.11"}]
[{"$f":"'Source Data'!A1423","v":"dgm.11"}]
[{"$f":"'Source Data'!A1424","v":"dgm.11"}]
[{"$f":"'Source Data'!A1425","v":"dgm.11"}]
[{"$f":"'Source Data'!A1426","v":"dgm.11"}]
[{"$f":"'Source Data'!A1427","v":"dgm.11"}]
[{"$f":"'Source Data'!A1428","v":"dgm.11"}]
[{"$f":"'Source Data'!A1429","v":"dgm.12"}]
[{"$f":"'Source Data'!A1430","v":"dgm.12"}]
[{"$f":"'Source Data'!A1431","v":"dgm.12"}]
[{"$f":"'Source Data'!A1432","v":"dgm.12"}]
[{"$f":"'Source Data'!A1433","v":"dgm.12"}]
[{"$f":"'Source Data'!A1434","v":"dgm.12"}]
[{"$f":"'Source Data'!A1435","v":"dgm.12"}]
[{"$f":"'Source Data'!A1436","v":"dgm.12"}]
[{"$f":"'Source Data'!A1437","v":"dgm.12"}]
[{"$f":"'Source Data'!A1438","v":"dgm.12"}]
[{"$f":"'Source Data'!A1439","v":"dgm.12"}]
[{"$f":"'Source Data'!A1440","v":"dgm.12"}]
[{"$f":"'Source Data'!A1441","v":"dgm.12"}]
[{"$f":"'Source Data'!A1442","v":"dgm.13"}]
[{"$f":"'Source Data'!A1443","v":"dgm.13"}]
[{"$f":"'Source Data'!A1444","v":"dgm.13"}]
[{"$f":"'Source Data'!A1445","v":"dgm.13"}]
[{"$f":"'Source Data'!A1446","v":"dgm.13"}]
[{"$f":"'Source Data'!A1447","v":"dgm.13"}]
[{"$f":"'Source Data'!A1448","v":"dgm.13"}]
[{"$f":"'Source Data'!A1449","v":"dgm.13"}]
[{"$f":"'Source Data'!A1450","v":"dgm.13"}]
[{"$f":"'Source Data'!A1451","v":"dgm.13"}]
[{"$f":"'Source Data'!A1452","v":"dgm.13"}]
[{"$f":"'Source Data'!A1453","v":"dgm.14"}]
[{"$f":"'Source Data'!A1454","v":"dgm.14"}]
[{"$f":"'Source Data'!A1455","v":"dgm.14"}]
[{"$f":"'Source Data'!A1456","v":"dgm.14"}]
[{"$f":"'Source Data'!A1457","v":"dgm.14"}]
[{"$f":"'Source Data'!A1458","v":"dgm.14"}]
[{"$f":"'Source Data'!A1459","v":"dgm.14"}]
[{"$f":"'Source Data'!A1460","v":"dgm.14"}]
[{"$f":"'Source Data'!A1461","v":"dgm.14"}]
[{"$f":"'Source Data'!A1462","v":"dgm.14"}]
[{"$f":"'Source Data'!A1463","v":"dgm.14"}]
[{"$f":"'Source Data'!A1464","v":"dgm.14"}]
[{"$f":"'Source Data'!A1465","v":"dgm.15"}]
[{"$f":"'Source Data'!A1466","v":"dgm.15"}]
[{"$f":"'Source Data'!A1467","v":"dgm.15"}]
[{"$f":"'Source Data'!A1468","v":"dgm.15"}]
[{"$f":"'Source Data'!A1469","v":"dgm.15"}]
[{"$f":"'Source Data'!A1470","v":"dgm.15"}]
[{"$f":"'Source Data'!A1471","v":"dgm.15"}]
[{"$f":"'Source Data'!A1472","v":"dgm.15"}]
[{"$f":"'Source Data'!A1473","v":"dgm.15"}]
[{"$f":"'Source Data'!A1474","v":"dgm.15"}]
[{"$f":"'Source Data'!A1475","v":"dgm.15"}]
[{"$f":"'Source Data'!A1476","v":"dgm.15"}]
[{"$f":"'Source Data'!A1477","v":"dgm.15"}]
[{"$f":"'Source Data'!A1478","v":"dgm.15"}]
[{"$f":"'Source Data'!A1479","v":"dgm.15"}]
[{"$f":"'Source Data'!A1480","v":"dgm.15"}]
[{"$f":"'Source Data'!A1481","v":"dgm.15"}]
[{"$f":"'Source Data'!A1482","v":"dgm.15"}]
[{"$f":"'Source Data'!A1483","v":"dgm.15"}]
[{"$f":"'Source Data'!A1484","v":"dgm.15"}]
[{"$f":"'Source Data'!A1485","v":"dgm.15"}]
[{"$f":"'Source Data'!A1486","v":"dgm.15"}]
[{"$f":"'Source Data'!A1487","v":"dgm.15"}]
[{"$f":"'Source Data'!A1488","v":"dgm.15"}]
[{"$f":"'Source Data'!A1489","v":"dgm.15"}]
[{"$f":"'Source Data'!A1490","v":"dgm.15"}]
[{"$f":"'Source Data'!A1491","v":"dgm.15"}]
[{"$f":"'Source Data'!A1492","v":"dgm.16"}]
[{"$f":"'Source Data'!A1493","v":"dgm.16"}]
[{"$f":"'Source Data'!A1494","v":"dgm.16"}]
[{"$f":"'Source Data'!A1495","v":"dgm.16"}]
[{"$f":"'Source Data'!A1496","v":"dgm.16"}]
[{"$f":"'Source Data'!A1497","v":"dgm.16"}]
[{"$f":"'Source Data'!A1498","v":"dgm.16"}]
[{"$f":"'Source Data'!A1499","v":"dgm.16"}]
[{"$f":"'Source Data'!A1500","v":"dgm.16"}]
[{"$f":"'Source Data'!A1501","v":"dgm.16"}]
[{"$f":"'Source Data'!A1502","v":"dgm.16"}]
[{"$f":"'Source Data'!A1503","v":"dgm.16"}]
[{"$f":"'Source Data'!A1504","v":"dgm.16"}]
[{"$f":"'Source Data'!A1505","v":"dgm.16"}]
[{"$f":"'Source Data'!A1506","v":"dgm.16"}]
[{"$f":"'Source Data'!A1507","v":"dgm.16"}]
[{"$f":"'Source Data'!A1508","v":"dgm.16"}]
[{"$f":"'Source Data'!A1509","v":"dgm.16"}]
[{"$f":"'Source Data'!A1510","v":"dgm.16"}]
[{"$f":"'Source Data'!A1511","v":"dgm.16"}]
[{"$f":"'Source Data'!A1512","v":"dgm.16"}]
[{"$f":"'Source Data'!A1513","v":"dgm.16"}]
[{"$f":"'Source Data'!A1514","v":"dgm.16"}]
[{"$f":"'Source Data'!A1515","v":"dgm.16"}]
[{"$f":"'Source Data'!A1516","v":"dgm.16"}]
[{"$f":"'Source Data'!A1517","v":"generic.1"}]
[{"$f":"'Source Data'!A1518","v":"generic.1"}]
[{"$f":"'Source Data'!A1519","v":"generic.1"}]
[{"$f":"'Source Data'!A1520","v":"generic.1"}]
[{"$f":"'Source Data'!A1521","v":"generic.1"}]
[{"$f":"'Source Data'!A1522","v":"generic.1"}]
[{"$f":"'Source Data'!A1523","v":"generic.1"}]
[{"$f":"'Source Data'!A1524","v":"generic.1"}]
[{"$f":"'Source Data'!A1525","v":"generic.1"}]
[{"$f":"'Source Data'!A1526","v":"generic.1"}]
[{"$f":"'Source Data'!A1527","v":"generic.1"}]
[{"$f":"'Source Data'!A1528","v":"generic.1"}]
[{"$f":"'Source Data'!A1529","v":"generic.2"}]
[{"$f":"'Source Data'!A1530","v":"generic.2"}]
[{"$f":"'Source Data'!A1531","v":"generic.2"}]
[{"$f":"'Source Data'!A1532","v":"generic.2"}]
[{"$f":"'Source Data'!A1533","v":"generic.2"}]
[{"$f":"'Source Data'!A1534","v":"generic.2"}]
[{"$f":"'Source Data'!A1535","v":"generic.2"}]
[{"$f":"'Source Data'!A1536","v":"generic.2"}]
[{"$f":"'Source Data'!A1537","v":"generic.2"}]
[{"$f":"'Source Data'!A1538","v":"generic.2"}]
[{"$f":"'Source Data'!A1539","v":"generic.2"}]
[{"$f":"'Source Data'!A1540","v":"generic.2"}]
[{"$f":"'Source Data'!A1541","v":"generic.2"}]
[{"$f":"'Source Data'!A1542","v":"generic.2"}]
[{"$f":"'Source Data'!A1543","v":"generic.2"}]
[{"$f":"'Source Data'!A1544","v":"generic.3"}]
[{"$f":"'Source Data'!A1545","v":"generic.3"}]
[{"$f":"'Source Data'!A1546","v":"generic.3"}]
[{"$f":"'Source Data'!A1547","v":"generic.3"}]
[{"$f":"'Source Data'!A1548","v":"generic.3"}]
[{"$f":"'Source Data'!A1549","v":"generic.3"}]
[{"$f":"'Source Data'!A1550","v":"generic.3"}]
[{"$f":"'Source Data'!A1551","v":"generic.3"}]
[{"$f":"'Source Data'!A1552","v":"generic.3"}]
[{"$f":"'Source Data'!A1553","v":"generic.3"}]
[{"$f":"'Source Data'!A1554","v":"generic.3"}]
[{"$f":"'Source Data'!A1555","v":"generic.3"}]
[{"$f":"'Source Data'!A1556","v":"generic.4"}]
[{"$f":"'Source Data'!A1557","v":"generic.4"}]
[{"$f":"'Source Data'!A1558","v":"generic.4"}]
[{"$f":"'Source Data'!A1559","v":"generic.4"}]
[{"$f":"'Source Data'!A1560","v":"generic.4"}]
[{"$f":"'Source Data'!A1561","v":"generic.4"}]
[{"$f":"'Source Data'!A1562","v":"generic.4"}]
[{"$f":"'Source Data'!A1563","v":"generic.4"}]
[{"$f":"'Source Data'!A1564","v":"generic.4"}]
[{"$f":"'Source Data'!A1565","v":"generic.4"}]
[{"$f":"'Source Data'!A1566","v":"generic.4"}]
[{"$f":"'Source Data'!A1567","v":"gen.1"}]
[{"$f":"'Source Data'!A1568","v":"gen.1"}]
[{"$f":"'Source Data'!A1569","v":"gen.1"}]
[{"$f":"'Source Data'!A1570","v":"gen.1"}]
[{"$f":"'Source Data'!A1571","v":"gen.1"}]
[{"$f":"'Source Data'!A1572","v":"gen.1"}]
[{"$f":"'Source Data'!A1573","v":"gen.1"}]
[{"$f":"'Source Data'!A1574","v":"gen.1"}]
[{"$f":"'Source Data'!A1575","v":"gen.1"}]
[{"$f":"'Source Data'!A1576","v":"gen.1"}]
[{"$f":"'Source Data'!A1577","v":"gen.1"}]
[{"$f":"'Source Data'!A1578","v":"gen.1"}]
[{"$f":"'Source Data'!A1579","v":"gen.1"}]
[{"$f":"'Source Data'!A1580","v":"gen.1"}]
[{"$f":"'Source Data'!A1581","v":"gen.1"}]
[{"$f":"'Source Data'!A1582","v":"gen.1"}]
[{"$f":"'Source Data'!A1583","v":"gen.1"}]
[{"$f":"'Source Data'!A1584","v":"gen.1"}]
[{"$f":"'Source Data'!A1585","v":"gen.1"}]
[{"$f":"'Source Data'!A1586","v":"gen.1"}]
[{"$f":"'Source Data'!A1587","v":"gen.2"}]
[{"$f":"'Source Data'!A1588","v":"gen.2"}]
[{"$f":"'Source Data'!A1589","v":"gen.2"}]
[{"$f":"'Source Data'!A1590","v":"gen.2"}]
[{"$f":"'Source Data'!A1591","v":"gen.2"}]
[{"$f":"'Source Data'!A1592","v":"gen.2"}]
[{"$f":"'Source Data'!A1593","v":"gen.2"}]
[{"$f":"'Source Data'!A1594","v":"gen.2"}]
[{"$f":"'Source Data'!A1595","v":"gen.2"}]
[{"$f":"'Source Data'!A1596","v":"gen.2"}]
[{"$f":"'Source Data'!A1597","v":"gen.2"}]
[{"$f":"'Source Data'!A1598","v":"gen.2"}]
[{"$f":"'Source Data'!A1599","v":"gen.3"}]
[{"$f":"'Source Data'!A1600","v":"gen.3"}]
[{"$f":"'Source Data'!A1601","v":"gen.3"}]
[{"$f":"'Source Data'!A1602","v":"gen.3"}]
[{"$f":"'Source Data'!A1603","v":"gen.3"}]
[{"$f":"'Source Data'!A1604","v":"gen.3"}]
[{"$f":"'Source Data'!A1605","v":"gen.3"}]
[{"$f":"'Source Data'!A1606","v":"gen.3"}]
[{"$f":"'Source Data'!A1607","v":"gen.3"}]
[{"$f":"'Source Data'!A1608","v":"gen.3"}]
[{"$f":"'Source Data'!A1609","v":"gen.3"}]
[{"$f":"'Source Data'!A1610","v":"gen.3"}]
[{"$f":"'Source Data'!A1611","v":"gen.3"}]
[{"$f":"'Source Data'!A1612","v":"gen.3"}]
[{"$f":"'Source Data'!A1613","v":"gen.3"}]
[{"$f":"'Source Data'!A1614","v":"gen.4"}]
[{"$f":"'Source Data'!A1615","v":"gen.4"}]
[{"$f":"'Source Data'!A1616","v":"gen.4"}]
[{"$f":"'Source Data'!A1617","v":"gen.4"}]
[{"$f":"'Source Data'!A1618","v":"gen.4"}]
[{"$f":"'Source Data'!A1619","v":"gen.4"}]
[{"$f":"'Source Data'!A1620","v":"gen.4"}]
[{"$f":"'Source Data'!A1621","v":"gen.4"}]
[{"$f":"'Source Data'!A1622","v":"gen.4"}]
[{"$f":"'Source Data'!A1623","v":"gen.4"}]
[{"$f":"'Source Data'!A1624","v":"gen.4"}]
[{"$f":"'Source Data'!A1625","v":"gen.4"}]
[{"$f":"'Source Data'!A1626","v":"gen.4"}]
[{"$f":"'Source Data'!A1627","v":"gen.4"}]
[{"$f":"'Source Data'!A1628","v":"gen.4"}]
[{"$f":"'Source Data'!A1629","v":"gen.5"}]
[{"$f":"'Source Data'!A1630","v":"gen.5"}]
[{"$f":"'Source Data'!A1631","v":"gen.5"}]
[{"$f":"'Source Data'!A1632","v":"gen.5"}]
[{"$f":"'Source Data'!A1633","v":"gen.5"}]
[{"$f":"'Source Data'!A1634","v":"gen.5"}]
[{"$f":"'Source Data'!A1635","v":"gen.5"}]
[{"$f":"'Source Data'!A1636","v":"gen.5"}]
[{"$f":"'Source Data'!A1637","v":"gen.5"}]
[{"$f":"'Source Data'!A1638","v":"gen.5"}]
[{"$f":"'Source Data'!A1639","v":"gen.5"}]
[{"$f":"'Source Data'!A1640","v":"gen.5"}]
[{"$f":"'Source Data'!A1641","v":"gen.5"}]
[{"$f":"'Source Data'!A1642","v":"gen.5"}]
[{"$f":"'Source Data'!A1643","v":"gen.6"}]
[{"$f":"'Source Data'!A1644","v":"gen.6"}]
[{"$f":"'Source Data'!A1645","v":"gen.6"}]
[{"$f":"'Source Data'!A1646","v":"gen.6"}]
[{"$f":"'Source Data'!A1647","v":"gen.6"}]
[{"$f":"'Source Data'!A1648","v":"gen.6"}]
[{"$f":"'Source Data'!A1649","v":"gen.6"}]
[{"$f":"'Source Data'!A1650","v":"gen.6"}]
[{"$f":"'Source Data'!A1651","v":"gen.6"}]
[{"$f":"'Source Data'!A1652","v":"gen.6"}]
[{"$f":"'Source Data'!A1653","v":"gen.6"}]
[{"$f":"'Source Data'!A1654","v":"gen.7"}]
[{"$f":"'Source Data'!A1655","v":"gen.7"}]
[{"$f":"'Source Data'!A1656","v":"gen.7"}]
[{"$f":"'Source Data'!A1657","v":"gen.7"}]
[{"$f":"'Source Data'!A1658","v":"gen.7"}]
[{"$f":"'Source Data'!A1659","v":"gen.7"}]
[{"$f":"'Source Data'!A1660","v":"gen.7"}]
[{"$f":"'Source Data'!A1661","v":"gen.7"}]
[{"$f":"'Source Data'!A1662","v":"gen.7"}]
[{"$f":"'Source Data'!A1663","v":"gen.7"}]
[{"$f":"'Source Data'!A1664","v":"gen.8"}]
[{"$f":"'Source Data'!A1665","v":"gen.8"}]
[{"$f":"'Source Data'!A1666","v":"gen.8"}]
[{"$f":"'Source Data'!A1667","v":"gen.8"}]
[{"$f":"'Source Data'!A1668","v":"gen.8"}]
[{"$f":"'Source Data'!A1669","v":"gen.8"}]
[{"$f":"'Source Data'!A1670","v":"gen.8"}]
[{"$f":"'Source Data'!A1671","v":"gen.8"}]
[{"$f":"'Source Data'!A1672","v":"gen.8"}]
[{"$f":"'Source Data'!A1673","v":"gen.8"}]
[{"$f":"'Source Data'!A1674","v":"gen.8"}]
[{"$f":"'Source Data'!A1675","v":"gen.8"}]
[{"$f":"'Source Data'!A1676","v":"gen.8"}]
[{"$f":"'Source Data'!A1677","v":"gen.9"}]
[{"$f":"'Source Data'!A1678","v":"gen.9"}]
[{"$f":"'Source Data'!A1679","v":"gen.9"}]
[{"$f":"'Source Data'!A1680","v":"gen.9"}]
[{"$f":"'Source Data'!A1681","v":"gen.9"}]
[{"$f":"'Source Data'!A1682","v":"gen.9"}]
[{"$f":"'Source Data'!A1683","v":"gen.9"}]
[{"$f":"'Source Data'!A1684","v":"gen.9"}]
[{"$f":"'Source Data'!A1685","v":"gen.9"}]
[{"$f":"'Source Data'!A1686","v":"gen.9"}]
[{"$f":"'Source Data'!A1687","v":"gen.9"}]
[{"$f":"'Source Data'!A1688","v":"gen.9"}]
[{"$f":"'Source Data'!A1689","v":"gen.10"}]
[{"$f":"'Source Data'!A1690","v":"gen.10"}]
[{"$f":"'Source Data'!A1691","v":"gen.10"}]
[{"$f":"'Source Data'!A1692","v":"gen.10"}]
[{"$f":"'Source Data'!A1693","v":"gen.10"}]
[{"$f":"'Source Data'!A1694","v":"gen.10"}]
[{"$f":"'Source Data'!A1695","v":"gen.10"}]
[{"$f":"'Source Data'!A1696","v":"gen.10"}]
[{"$f":"'Source Data'!A1697","v":"gen.10"}]
[{"$f":"'Source Data'!A1698","v":"gen.10"}]
[{"$f":"'Source Data'!A1699","v":"gen.10"}]
[{"$f":"'Source Data'!A1700","v":"gen.10"}]
[{"$f":"'Source Data'!A1701","v":"gen.10"}]
[{"$f":"'Source Data'!A1702","v":"gen.11"}]
[{"$f":"'Source Data'!A1703","v":"gen.11"}]
[{"$f":"'Source Data'!A1704","v":"gen.11"}]
[{"$f":"'Source Data'!A1705","v":"gen.11"}]
[{"$f":"'Source Data'!A1706","v":"gen.11"}]
[{"$f":"'Source Data'!A1707","v":"gen.11"}]
[{"$f":"'Source Data'!A1708","v":"gen.11"}]
[{"$f":"'Source Data'!A1709","v":"gen.11"}]
[{"$f":"'Source Data'!A1710","v":"gen.11"}]
[{"$f":"'Source Data'!A1711","v":"gen.11"}]
[{"$f":"'Source Data'!A1712","v":"gen.11"}]
[{"$f":"'Source Data'!A1713","v":"gen.12"}]
[{"$f":"'Source Data'!A1714","v":"gen.12"}]
[{"$f":"'Source Data'!A1715","v":"gen.12"}]
[{"$f":"'Source Data'!A1716","v":"gen.12"}]
[{"$f":"'Source Data'!A1717","v":"gen.12"}]
[{"$f":"'Source Data'!A1718","v":"gen.12"}]
[{"$f":"'Source Data'!A1719","v":"gen.12"}]
[{"$f":"'Source Data'!A1720","v":"gen.12"}]
[{"$f":"'Source Data'!A1721","v":"gen.13"}]
[{"$f":"'Source Data'!A1722","v":"gen.13"}]
[{"$f":"'Source Data'!A1723","v":"gen.13"}]
[{"$f":"'Source Data'!A1724","v":"gen.13"}]
[{"$f":"'Source Data'!A1725","v":"gen.13"}]
[{"$f":"'Source Data'!A1726","v":"gen.13"}]
[{"$f":"'Source Data'!A1727","v":"gen.13"}]
[{"$f":"'Source Data'!A1728","v":"gen.14"}]
[{"$f":"'Source Data'!A1729","v":"gen.14"}]
[{"$f":"'Source Data'!A1730","v":"gen.14"}]
[{"$f":"'Source Data'!A1731","v":"gen.14"}]
[{"$f":"'Source Data'!A1732","v":"gen.14"}]
[{"$f":"'Source Data'!A1733","v":"gen.14"}]
[{"$f":"'Source Data'!A1734","v":"gen.14"}]
[{"$f":"'Source Data'!A1735","v":"gen.14"}]
[{"$f":"'Source Data'!A1736","v":"gen.14"}]
[{"$f":"'Source Data'!A1737","v":"gen.14"}]
[{"$f":"'Source Data'!A1738","v":"gen.14"}]
[{"$f":"'Source Data'!A1739","v":"gen.14"}]
[{"$f":"'Source Data'!A1740","v":"gen.14"}]
[{"$f":"'Source Data'!A1741","v":"gen.15"}]
[{"$f":"'Source Data'!A1742","v":"gen.15"}]
[{"$f":"'Source Data'!A1743","v":"gen.15"}]
[{"$f":"'Source Data'!A1744","v":"gen.15"}]
[{"$f":"'Source Data'!A1745","v":"gen.15"}]
[{"$f":"'Source Data'!A1746","v":"gen.15"}]
[{"$f":"'Source Data'!A1747","v":"gen.15"}]
[{"$f":"'Source Data'!A1748","v":"gen.15"}]
[{"$f":"'Source Data'!A1749","v":"gen.15"}]
[{"$f":"'Source Data'!A1750","v":"gen.15"}]
[{"$f":"'Source Data'!A1751","v":"gen.15"}]
[{"$f":"'Source Data'!A1752","v":"gen.15"}]
[{"$f":"'Source Data'!A1753","v":"gen.15"}]
[{"$f":"'Source Data'!A1754","v":"gen.15"}]
[{"$f":"'Source Data'!A1755","v":"gen.15"}]
[{"$f":"'Source Data'!A1756","v":"gen.15"}]
[{"$f":"'Source Data'!A1757","v":"gen.15"}]
[{"$f":"'Source Data'!A1758","v":"gen.15"}]
[{"$f":"'Source Data'!A1759","v":"gen.15"}]
[{"$f":"'Source Data'!A1760","v":"gen.15"}]
[{"$f":"'Source Data'!A1761","v":"gen.15"}]
[{"$f":"'Source Data'!A1762","v":"gen.15"}]
[{"$f":"'Source Data'!A1763","v":"gen.15"}]
[{"$f":"'Source Data'!A1764","v":"gen.15"}]
[{"$f":"'Source Data'!A1765","v":"gen.15"}]
[{"$f":"'Source Data'!A1766","v":"gen.15"}]
[{"$f":"'Source Data'!A1767","v":"gen.15"}]
[{"$f":"'Source Data'!A1768","v":"gen.16"}]
[{"$f":"'Source Data'!A1769","v":"gen.16"}]
[{"$f":"'Source Data'!A1770","v":"gen.16"}]
[{"$f":"'Source Data'!A1771","v":"gen.16"}]
[{"$f":"'Source Data'!A1772","v":"gen.16"}]
[{"$f":"'Source Data'!A1773","v":"gen.16"}]
[{"$f":"'Source Data'!A1774","v":"gen.16"}]
[{"$f":"'Source Data'!A1775","v":"gen.16"}]
[{"$f":"'Source Data'!A1776","v":"gen.16"}]
[{"$f":"'Source Data'!A1777","v":"gen.16"}]
[{"$f":"'Source Data'!A1778","v":"gen.16"}]
[{"$f":"'Source Data'!A1779","v":0}]

{"sheet":"Summary Save","index":6,"n_rows":130,"n_cols":26,"rows_kept":130,"cut":false,"hidden":true,"merged":[]}
["FS #","ID","V Summary","M Summary","Skills","Access (P)","Access (L)","Vector","Com. V","Res V","Total","System","Pub Safe","Work Safe","Eco","Finance","Restore","Gen Cap","En Mark","Bulk Tran","Cus Serve","Bill","Goodwil","Im. Econ","Ex. Econ","Private"]
[{"$f":"Sheet1!B2","v":"ami.1"},{"$f":"INDEX(Saves[ID],MATCH(1,(A2=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.237788},null,null,1,null,null,null,null,null,{"$f":"E2+F2+G2+H2+I2","v":1},3]
[{"$f":"Sheet1!B3","v":"ami.2"},{"$f":"INDEX(Saves[ID],MATCH(1,(A3=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.89318799999999998},null,null,null,null,null,null,null,null,{"$f":"E3+F3+G3+H3+I3","v":0}]
[{"$f":"Sheet1!B4","v":"ami.3"},{"$f":"INDEX(Saves[ID],MATCH(1,(A4=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.72029200000000004},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B5","v":"ami.4"},{"$f":"INDEX(Saves[ID],MATCH(1,(A5=Saves[Category])*(\"t\"=Saves[Type]),0))","v":7.8233700000000003E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B6","v":"ami.5"},{"$f":"INDEX(Saves[ID],MATCH(1,(A6=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.68889800000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B7","v":"ami.6"},{"$f":"INDEX(Saves[ID],MATCH(1,(A7=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.94562500000000005},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B8","v":"ami.7"},{"$f":"INDEX(Saves[ID],MATCH(1,(A8=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.37693399999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B9","v":"ami.8"},{"$f":"INDEX(Saves[ID],MATCH(1,(A9=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.21212900000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B10","v":"ami.9"},{"$f":"INDEX(Saves[ID],MATCH(1,(A10=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.74736499999999995},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B11","v":"ami.10"},{"$f":"INDEX(Saves[ID],MATCH(1,(A11=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.39968599999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B12","v":"ami.11"},{"$f":"INDEX(Saves[ID],MATCH(1,(A12=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.25281500000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B13","v":"ami.12"},{"$f":"INDEX(Saves[ID],MATCH(1,(A13=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.20329800000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B14","v":"ami.13"},{"$f":"INDEX(Saves[ID],MATCH(1,(A14=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.55224499999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B15","v":"ami.14"},{"$f":"INDEX(Saves[ID],MATCH(1,(A15=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.79520999999999997},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B16","v":"ami.15"},{"$f":"INDEX(Saves[ID],MATCH(1,(A16=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.34544399999999997},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B17","v":"ami.16"},{"$f":"INDEX(Saves[ID],MATCH(1,(A17=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.35594100000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B18","v":"ami.17"},{"$f":"INDEX(Saves[ID],MATCH(1,(A18=Saves[Category])*(\"t\"=Saves[Type]),0))","v":1.7573499999999999E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B19","v":"ami.18"},{"$f":"INDEX(Saves[ID],MATCH(1,(A19=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.80232499999999995},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B20","v":"ami.19"},{"$f":"INDEX(Saves[ID],MATCH(1,(A20=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.54442000000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B21","v":"ami.20"},{"$f":"INDEX(Saves[ID],MATCH(1,(A21=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.66386000000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B22","v":"ami.21"},{"$f":"INDEX(Saves[ID],MATCH(1,(A22=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.53182799999999997},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B23","v":"ami.22"},{"$f":"INDEX(Saves[ID],MATCH(1,(A23=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.19144600000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B24","v":"ami.23"},{"$f":"INDEX(Saves[ID],MATCH(1,(A24=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.226574},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B25","v":"ami.24"},{"$f":"INDEX(Saves[ID],MATCH(1,(A25=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.53527000000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B26","v":"ami.25"},{"$f":"INDEX(Saves[ID],MATCH(1,(A26=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.85010699999999995},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B27","v":"ami.26"},{"$f":"INDEX(Saves[ID],MATCH(1,(A27=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.56832400000000005},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B28","v":"ami.27"},{"$f":"INDEX(Saves[ID],MATCH(1,(A28=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.12592500000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B29","v":"ami.28"},{"$f":"INDEX(Saves[ID],MATCH(1,(A29=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.197576},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B30","v":"ami.29"},{"$f":"INDEX(Saves[ID],MATCH(1,(A30=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.186555},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B31","v":"ami.30"},{"$f":"INDEX(Saves[ID],MATCH(1,(A31=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.417771},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B32","v":"ami.31"},{"$f":"INDEX(Saves[ID],MATCH(1,(A32=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.48572500000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B33","v":"ami.32"},{"$f":"INDEX(Saves[ID],MATCH(1,(A33=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.24684200000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B34","v":"der.1"},{"$f":"INDEX(Saves[ID],MATCH(1,(A34=Saves[Category])*(\"t\"=Saves[Type]),0))","v":9.6893900000000005E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B35","v":"der.2"},{"$f":"INDEX(Saves[ID],MATCH(1,(A35=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.99953899999999996},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B36","v":"der.3"},{"$f":"INDEX(Saves[ID],MATCH(1,(A36=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.88433399999999995},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B37","v":"der.4"},{"$f":"INDEX(Saves[ID],MATCH(1,(A37=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.63606600000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B38","v":"der.5"},{"$f":"INDEX(Saves[ID],MATCH(1,(A38=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.76008200000000004},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B39","v":"der.6"},{"$f":"INDEX(Saves[ID],MATCH(1,(A39=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.72423899999999997},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B40","v":"der.7"},{"$f":"INDEX(Saves[ID],MATCH(1,(A40=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.301012},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B41","v":"der.8"},{"$f":"INDEX(Saves[ID],MATCH(1,(A41=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.73446299999999998},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B42","v":"der.9"},{"$f":"INDEX(Saves[ID],MATCH(1,(A42=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.484433},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B43","v":"der.10"},{"$f":"INDEX(Saves[ID],MATCH(1,(A43=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.48461599999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B44","v":"der.11"},{"$f":"INDEX(Saves[ID],MATCH(1,(A44=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.37368400000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B45","v":"der.12"},{"$f":"INDEX(Saves[ID],MATCH(1,(A45=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.69616299999999998},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B46","v":"der.13"},{"$f":"INDEX(Saves[ID],MATCH(1,(A46=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.20522399999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B47","v":"der.14"},{"$f":"INDEX(Saves[ID],MATCH(1,(A47=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.70377900000000004},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B48","v":"der.15"},{"$f":"INDEX(Saves[ID],MATCH(1,(A48=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.918763},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B49","v":"der.16"},{"$f":"INDEX(Saves[ID],MATCH(1,(A49=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.29375499999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B50","v":"der.17"},{"$f":"INDEX(Saves[ID],MATCH(1,(A50=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.158607},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B51","v":"der.18"},{"$f":"INDEX(Saves[ID],MATCH(1,(A51=Saves[Category])*(\"t\"=Saves[Type]),0))","v":4.0426900000000002E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B52","v":"der.19"},{"$f":"INDEX(Saves[ID],MATCH(1,(A52=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.26954400000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B53","v":"der.20"},{"$f":"INDEX(Saves[ID],MATCH(1,(A53=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.51216600000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B54","v":"der.21"},{"$f":"INDEX(Saves[ID],MATCH(1,(A54=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.22281000000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B55","v":"der.22"},{"$f":"INDEX(Saves[ID],MATCH(1,(A55=Saves[Category])*(\"t\"=Saves[Type]),0))","v":9.8194000000000007E-3},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B56","v":"der.23"},{"$f":"INDEX(Saves[ID],MATCH(1,(A56=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.73768},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B57","v":"der.24"},{"$f":"INDEX(Saves[ID],MATCH(1,(A57=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.68696400000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B58","v":"der.25"},{"$f":"INDEX(Saves[ID],MATCH(1,(A58=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.92805000000000004},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B59","v":"der.26"},{"$f":"INDEX(Saves[ID],MATCH(1,(A59=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.99263100000000004},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B60","v":"wampac.1"},{"$f":"INDEX(Saves[ID],MATCH(1,(A60=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.58077699999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B61","v":"wampac.2"},{"$f":"INDEX(Saves[ID],MATCH(1,(A61=Saves[Category])*(\"t\"=Saves[Type]),0))","v":3.34582E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B62","v":"wampac.3"},{"$f":"INDEX(Saves[ID],MATCH(1,(A62=Saves[Category])*(\"t\"=Saves[Type]),0))","v":2.0425599999999999E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B63","v":"wampac.4"},{"$f":"INDEX(Saves[ID],MATCH(1,(A63=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.57004500000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B64","v":"wampac.5"},{"$f":"INDEX(Saves[ID],MATCH(1,(A64=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.82208999999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B65","v":"wampac.6"},{"$f":"INDEX(Saves[ID],MATCH(1,(A65=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.35440700000000003},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B66","v":"wampac.7"},{"$f":"INDEX(Saves[ID],MATCH(1,(A66=Saves[Category])*(\"t\"=Saves[Type]),0))","v":8.0934900000000004E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B67","v":"wampac.8"},{"$f":"INDEX(Saves[ID],MATCH(1,(A67=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.46553699999999998},null,null,null,null,null,null,null,null,{"$f":"E67+F67+G67+H67+I67","v":0}]
[{"$f":"Sheet1!B68","v":"wampac.9"},{"$f":"INDEX(Saves[ID],MATCH(1,(A68=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.61197999999999997},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B69","v":"wampac.10"},{"$f":"INDEX(Saves[ID],MATCH(1,(A69=Saves[Category])*(\"t\"=Saves[Type]),0))","v":5.33623E-3},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B70","v":"wampac.11"},{"$f":"INDEX(Saves[ID],MATCH(1,(A70=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.77071000000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B71","v":"wampac.12"},{"$f":"INDEX(Saves[ID],MATCH(1,(A71=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.55264100000000005},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B72","v":"et.1"},{"$f":"INDEX(Saves[ID],MATCH(1,(A72=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.128665},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B73","v":"et.2"},{"$f":"INDEX(Saves[ID],MATCH(1,(A73=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.75131400000000004},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B74","v":"et.3"},{"$f":"INDEX(Saves[ID],MATCH(1,(A74=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.96336200000000005},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B75","v":"et.4"},{"$f":"INDEX(Saves[ID],MATCH(1,(A75=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.27484399999999998},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B76","v":"et.5"},{"$f":"INDEX(Saves[ID],MATCH(1,(A76=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.73133300000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B77","v":"et.6"},{"$f":"INDEX(Saves[ID],MATCH(1,(A77=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.53701500000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B78","v":"et.7"},{"$f":"INDEX(Saves[ID],MATCH(1,(A78=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.459426},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B79","v":"et.8"},{"$f":"INDEX(Saves[ID],MATCH(1,(A79=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.123586},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B80","v":"et.9"},{"$f":"INDEX(Saves[ID],MATCH(1,(A80=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.297072},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B81","v":"et.10"},{"$f":"INDEX(Saves[ID],MATCH(1,(A81=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.57546399999999998},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B82","v":"et.11"},{"$f":"INDEX(Saves[ID],MATCH(1,(A82=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.55254400000000004},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B83","v":"et.12"},{"$f":"INDEX(Saves[ID],MATCH(1,(A83=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.961839},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B84","v":"et.13"},{"$f":"INDEX(Saves[ID],MATCH(1,(A84=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.57384800000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B85","v":"et.14"},{"$f":"INDEX(Saves[ID],MATCH(1,(A85=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.61115299999999995},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B86","v":"et.15"},{"$f":"INDEX(Saves[ID],MATCH(1,(A86=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.76615200000000006},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B87","v":"et.16"},{"$f":"INDEX(Saves[ID],MATCH(1,(A87=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.77788000000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B88","v":"dr.1"},{"$f":"INDEX(Saves[ID],MATCH(1,(A88=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.62171699999999996},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B89","v":"dr.2"},{"$f":"INDEX(Saves[ID],MATCH(1,(A89=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.20699100000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B90","v":"dr.3"},{"$f":"INDEX(Saves[ID],MATCH(1,(A90=Saves[Category])*(\"t\"=Saves[Type]),0))","v":8.5001499999999997E-3},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B91","v":"dr.4"},{"$f":"INDEX(Saves[ID],MATCH(1,(A91=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.49691600000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B92","v":"dr.5"},{"$f":"INDEX(Saves[ID],MATCH(1,(A92=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.14532900000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B93","v":"dr.6"},{"$f":"INDEX(Saves[ID],MATCH(1,(A93=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.37654700000000002},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B94","v":"dr.7"},{"$f":"INDEX(Saves[ID],MATCH(1,(A94=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.34283599999999997},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B95","v":"dgm.1"},{"$f":"INDEX(Saves[ID],MATCH(1,(A95=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.16287399999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B96","v":"dgm.2"},{"$f":"INDEX(Saves[ID],MATCH(1,(A96=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.41417599999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B97","v":"dgm.3"},{"$f":"INDEX(Saves[ID],MATCH(1,(A97=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.35069800000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B98","v":"dgm.4"},{"$f":"INDEX(Saves[ID],MATCH(1,(A98=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.51855899999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B99","v":"dgm.5"},{"$f":"INDEX(Saves[ID],MATCH(1,(A99=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.78934499999999996},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B100","v":"dgm.6"},{"$f":"INDEX(Saves[ID],MATCH(1,(A100=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.66791},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B101","v":"dgm.7"},{"$f":"INDEX(Saves[ID],MATCH(1,(A101=Saves[Category])*(\"t\"=Saves[Type]),0))","v":3.5641600000000002E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B102","v":"dgm.8"},{"$f":"INDEX(Saves[ID],MATCH(1,(A102=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.87504800000000005},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B103","v":"dgm.9"},{"$f":"INDEX(Saves[ID],MATCH(1,(A103=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.188694},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B104","v":"dgm.10"},{"$f":"INDEX(Saves[ID],MATCH(1,(A104=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.122403},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B105","v":"dgm.11"},{"$f":"INDEX(Saves[ID],MATCH(1,(A105=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.613313},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B106","v":"dgm.12"},{"$f":"INDEX(Saves[ID],MATCH(1,(A106=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.62339599999999995},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B107","v":"dgm.13"},{"$f":"INDEX(Saves[ID],MATCH(1,(A107=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.51028200000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B108","v":"dgm.14"},{"$f":"INDEX(Saves[ID],MATCH(1,(A108=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.74770099999999995},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B109","v":"dgm.15"},{"$f":"INDEX(Saves[ID],MATCH(1,(A109=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.430176},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B110","v":"dgm.16"},{"$f":"INDEX(Saves[ID],MATCH(1,(A110=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.251307},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B111","v":"generic.1"},{"$f":"INDEX(Saves[ID],MATCH(1,(A111=Saves[Category])*(\"t\"=Saves[Type]),0))","v":9.4897800000000004E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B112","v":"generic.2"},{"$f":"INDEX(Saves[ID],MATCH(1,(A112=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.35458200000000001},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B113","v":"generic.3"},{"$f":"INDEX(Saves[ID],MATCH(1,(A113=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.57678099999999999},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B114","v":"generic.4"},{"$f":"INDEX(Saves[ID],MATCH(1,(A114=Saves[Category])*(\"t\"=Saves[Type]),0))","v":8.2825999999999997E-2},null,null,null,null,null,null,null,null,0]
[{"$f":"Sheet1!B115","v":"gen.1"},{"$f":"INDEX(Saves[ID],MATCH(1,(A115=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.18282699999999999},null,null,1,3,9,3,1,3,{"$f":"E115+F115+G115+H115+I115","v":17},3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B116","v":"gen.2"},{"$f":"INDEX(Saves[ID],MATCH(1,(A116=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.18282799999999999},null,null,1,3,9,3,1,3,{"$f":"E116+F116+G116+H116+I116","v":17},3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B117","v":"gen.3"},{"$f":"INDEX(Saves[ID],MATCH(1,(A117=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.28282800000000002},null,null,1,3,9,3,1,3,{"$f":"E117+F117+G117+H117+I117","v":17},3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B118","v":"gen.4"},{"$f":"INDEX(Saves[ID],MATCH(1,(A118=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.12828290000000001},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B119","v":"gen.5"},{"$f":"INDEX(Saves[ID],MATCH(1,(A119=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.22828280000000001},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B120","v":"gen.6"},{"$f":"INDEX(Saves[ID],MATCH(1,(A120=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.32828279999999999},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B121","v":"gen.7"},{"$f":"INDEX(Saves[ID],MATCH(1,(A121=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.42828280000000002},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B122","v":"gen.8"},{"$f":"INDEX(Saves[ID],MATCH(1,(A122=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.52828280000000005},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B123","v":"gen.9"},{"$f":"INDEX(Saves[ID],MATCH(1,(A123=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.62828280000000003},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B124","v":"gen.10"},{"$f":"INDEX(Saves[ID],MATCH(1,(A124=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.72828280000000001},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B125","v":"gen.11"},{"$f":"INDEX(Saves[ID],MATCH(1,(A125=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.82828279999999999},null,null,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[{"$f":"Sheet1!B126","v":"gen.12"},{"$f":"INDEX(Saves[ID],MATCH(1,(A126=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.92828279999999996},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B127","v":"gen.13"},{"$f":"INDEX(Saves[ID],MATCH(1,(A127=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.93828279999999997},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B128","v":"gen.14"},{"$f":"INDEX(Saves[ID],MATCH(1,(A128=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.94828279999999998},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B129","v":"gen.15"},{"$f":"INDEX(Saves[ID],MATCH(1,(A129=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.94838279999999997},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]
[{"$f":"Sheet1!B130","v":"gen.16"},{"$f":"INDEX(Saves[ID],MATCH(1,(A130=Saves[Category])*(\"t\"=Saves[Type]),0))","v":0.94828279999999998},null,null,1,3,9,3,1,3,17,3,3,1,3,9,1,1,1,3,1,1,3,9,9,1]

{"sheet":"Vuln Class Report","index":7,"n_rows":64,"n_cols":14,"rows_kept":64,"cut":false,"hidden":false,"merged":[]}
[null,null,null,null,"Detailed View of Failure Scenario Severities sorted by Vulnerability Class",null,null,null,null,null,null,"Global View of Vulnerability Class Severities"]
[null,null,null,null,null,null,null,null,null,null,"Row Labels","Utility Rating"]
[null,null,null,null,null,null,null,null,null,null,0,0]
[null,null,null,null,null,null,null,null,null,null,"Business Logic Vulnerability (6.3.1.8)",0]
[null,null,null,null,null,null,null,null,null,null,"Inadequate Change and Configuration Management (6.2.2.5)",0]
[null,null,null,null,null,null,null,null,null,null,"Inadequate Malware Protection (6.4.2.3)",0]
[null,null,null,null,null,null,null,null,null,null,"Inadequate Network Segregation (6.5.1.2)",0]
[null,null,null,null,null,null,null,null,null,null,"Physical Access to the Device (6.5.1.6)",0]
[null,null,null,null,null,"Vulnerability Class",0,null,null,null,"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)",0]
[null,null,null,null,null,null,null,null,null,null,"API Abuse (6.3.2.1)",0]
[null,null,null,null,null,"Row Labels","Utility Rating",null,null,null,"Use of Insecure Protocols (6.3.1.21)",0]
[null,null,null,null,null,"der.10",0,null,null,null,"General Logic Error (6.3.1.7)",0]
[null,null,null,null,null,"der.11",0,null,null,null,"Insufficiently Trained Personnel (6.2.1.1)",0]
[null,null,null,null,null,"der.12",0,null,null,null,"Unnecessary System Access (6.2.2.6)",0]
["Row Labels","Sum of Utility",null,null,null,"der.13",0,null,null,null,"Inadequate Anomaly Tracking (6.4.4.1)",0]
[0,0,null,null,null,"der.14",0,null,null,null,"Use of Inadequate Security Architectures and Designs (6.4.1.1)",0]
["Business Logic Vulnerability (6.3.1.8)",0,null,null,null,"der.15",0,null,null,null,"Cryptographic Vulnerability (6.3.1.4)",0]
["Inadequate Change and Configuration Management (6.2.2.5)",0,null,null,null,"der.16",0,null,null,null,"Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)",0]
["Inadequate Malware Protection (6.4.2.3)",0,null,null,null,"der.17",0,null,null,null,"Inadequate Patch Management Process (6.2.2.4)",0]
["Inadequate Network Segregation (6.5.1.2)",0,null,null,null,"der.18",0,null,null,null,"Insufficient Identity Validation or Background Checks (6.2.2.1)",0]
["Physical Access to the Device (6.5.1.6)",0,null,null,null,"der.19",0,null,null,null,"Error Handling Vulnerability (6.3.1.6)",0]
["Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)",0,null,null,null,"der.20",0,null,null,null,"Sensitive Data Protection Vulnerability (6.3.1.15)",0]
["API Abuse (6.3.2.1)",0,null,null,null,"der.21",0,null,null,null,"Unneeded Services Running (6.4.3.2)",0]
["Use of Insecure Protocols (6.3.1.21)",0,null,null,null,"der.23",0,null,null,null,"Inadequate Periodic Security Audits (6.2.3.1)",0]
["General Logic Error (6.3.1.7)",0,null,null,null,"der.24",0,null,null,null,"Inadequate Incident Response Process (6.2.3.5)",0]
["Insufficiently Trained Personnel (6.2.1.1)",0,null,null,null,"der.25",0,null,null,null,"Insufficient Redundancy (6.5.1.5)",0]
["Unnecessary System Access (6.2.2.6)",0,null,null,"(use Vulnerability class filter at top to view results for specific vulnerability classes)","der.26",0,null,null,null,null,"Home",null,"Assessment Summary Tool"]
["Inadequate Anomaly Tracking (6.4.4.1)",0,null,null,null,"dgm.1",0]
["Use of Inadequate Security Architectures and Designs (6.4.1.1)",0,null,null,"Severity = (# of occurrences of vulnerability in scenario) X (integer risk rating of scenario)\n\n","dgm.10",0,null,null,null,null,null,"Vulnerability Classes List"]
["Cryptographic Vulnerability (6.3.1.4)",0,null,null,null,"dgm.11",0]
["Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)",0,null,null,"Integer risk rating:  L=1; M=2; H= 3","dgm.12",0]
["Inadequate Patch Management Process (6.2.2.4)",0,null,null,null,"dgm.13",0]
["Insufficient Identity Validation or Background Checks (6.2.2.1)",0,null,null,null,"dgm.14",0]
["Error Handling Vulnerability (6.3.1.6)",0,null,null,null,"dgm.15",0]
["Sensitive Data Protection Vulnerability (6.3.1.15)",0,null,null,null,"dgm.2",0]
["Unneeded Services Running (6.4.3.2)",0,null,null,null,"dgm.3",0]
["Inadequate Periodic Security Audits (6.2.3.1)",0,null,null,null,"dgm.4",0]
["Inadequate Incident Response Process (6.2.3.5)",0,null,null,null,"dgm.5",0]
["Insufficient Redundancy (6.5.1.5)",0,null,null,null,"dgm.6",0]
["Grand Total",0,null,null,null,"dgm.7",0]
[null,null,null,null,null,"dgm.8",0]
[null,null,null,null,null,"dgm.9",0]
[null,null,null,null,null,"dr.2",0]
[null,null,null,null,null,"dr.3",0]
[null,null,null,null,null,"dr.4",0]
[null,null,null,null,null,"dr.5",0]
[null,null,null,null,null,"dr.6",0]
[null,null,null,null,null,"dr.7",0]
[null,null,null,null,null,"et.1",0]
[null,null,null,null,null,"et.2",0]
[null,null,null,null,null,"et.3",0]
[null,null,null,null,null,"et.4",0]
[null,null,null,null,null,"wampac.1",0]
[null,null,null,null,null,"wampac.10",0]
[null,null,null,null,null,"wampac.11",0]
[null,null,null,null,null,"wampac.12",0]
[null,null,null,null,null,"wampac.2",0]
[null,null,null,null,null,"wampac.3",0]
[null,null,null,null,null,"wampac.4",0]
[null,null,null,null,null,"wampac.5",0]
[null,null,null,null,null,"wampac.6",0]
[null,null,null,null,null,"wampac.7",0]
[null,null,null,null,null,"wampac.8",0]
[null,null,null,null,null,"Grand Total",0]

{"sheet":"Common Vuln Report","index":8,"n_rows":178,"n_cols":32,"rows_kept":178,"cut":false,"hidden":false,"merged":[[29,31,29,34],[31,27,31,30]]}
["Common Vulnerability","(All)",null,null,null,null,null,"Detailed View of Common Vulnerability Severities",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Global View of Common Vulnerability Severities"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Row Labels","Utility Rating"]
["Row Labels","Utility Rating",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"a copy of a prior alarm is difficult or infeasible to distinguish from a new legitimate alarm",0]
["ami.1",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command",0]
["ami.10",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"adherence to policies and procedures degrades over time",0]
["ami.11",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"alarm management system does not support required processing for legitimate alarm conditions",0]
["ami.12",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"alarm processing capability is overwhelmed by unnecessary alarms",0]
["ami.13",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"back doors for access are left in place",0]
["ami.14",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"commands or other messages may be inserted on the network by unauthorized individuals",0]
["ami.15",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"communication channels are shared between different system owners",0]
["ami.16",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"configuration changes are not verified for correctness",0]
["ami.17",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"credentials are accessible in the clear",0]
["ami.18",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"critical communication paths are not isolated from communication paths that require fewer protections to operate",0]
["ami.19",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"critical components exhibit single point of failure",0]
["ami.2",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"critical operations are not locked out during maintenance",0]
["ami.20",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"cryptography used that employs algorithms that are breakable within a time period useful to the adversary",0]
["ami.21",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"default configuration allows access that is unnecessary after the system is operational",0]
["ami.22",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"default password is not changed",0]
["ami.23",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"design permits unnecessary privileges",0]
["ami.24",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"design, implementation, or maintenance permits system to enter a hazardous state",0]
["ami.25",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"emergency response policy, procedures, or execution intentionally disregards security controls to speed recovery",0]
["ami.26",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"encryption keys are shared",0]
["ami.27",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"inadequate binding of meter with energy users authorized to charge to that meter",0]
["ami.28",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"inadequate continuity and recovery security architecture",0]
["ami.29",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"inadequate criteria for determining which alarms deserve priority",0]
["ami.3",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data",0]
["ami.30",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Internet connection may be misused by adversary",0]
["ami.31",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message",0]
["ami.32",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"network interconnections provide users and hardware/software entities with access unnecessary for their roles",0]
["ami.4",0,null,"(use common vulnerability filter at top to view results for specific common vulnerabilities)",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"network interfaces permit unnecessary traffic flows",0,null,null,null,null,"Home",null,null,null,null,"Assessment Summary Tool"]
["ami.5",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"network is connected to untrusted networks",0]
["ami.6",0,null,null,"Severity = (# of occurrences of vulnerability in scenario) X (integer risk rating of scenario)\n",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"physical access may be obtained by unauthorized individuals",0,null,null,null,null,null,"Common Vulnerability List"]
["ami.7",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"physical access to a serial port may enable logical access by unauthorized entities",0]
["ami.8",0,null,null,"Integer risk rating:  L=1; M=2; H= 3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"physical access to mobile devices may enable logical access to business functions by unauthorized individuals",0]
["ami.9",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"presence of features or functions that may be misused by users",0]
["der.1",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"publicly accessible and/or third party controlled links used",0]
["der.10",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"remote access may be obtained by unauthorized individuals",0]
["der.11",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"secret key is stored or transmitted in the clear",0]
["der.12",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"security design does not consider the system lifecycle",0]
["der.13",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"sensitive data remains on disposed equipment",0]
["der.14",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"shared credentials are used for access",0]
["der.15",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"software patches are not checked regularly to ensure that they are current",0]
["der.16",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"software patches may be applied without verifying continued system operation",0]
["der.17",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"speed of incident response process is not appropriate for incident",0]
["der.18",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system assumes data inputs and resulting calculations are accurate",0]
["der.19",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system design limits opportunity for system recovery using reconfiguration",0]
["der.2",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system makes messages accessible to unauthorized individuals",0]
["der.20",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system makes private data accessible to unauthorized individuals",0]
["der.21",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system may become overwhelmed by traffic flooding or malformed traffic",0]
["der.23",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits bypass of access control mechanisms",0]
["der.24",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits installation of malware",0]
["der.25",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits messages to be modified by unauthorized individuals",0]
["der.26",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits networking components to be accessed by unauthorized individuals",0]
["der.3",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits potentially harmful command sequences",0]
["der.4",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits unauthorized changes",0]
["der.5",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits unauthorized installation of software or firmware",0]
["der.6",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits wireless access by unauthorized parties",0]
["der.7",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system relies on communications that are easy to jam",0]
["der.8",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system relies on credentials that are easy to obtain for access",0]
["der.9",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system takes action before confirming changes with user",0]
["dgm.1",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"the list of signatures used for detection of attacks is no longer current",0]
["dgm.10",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"unnecessary access is permitted to critical functions",0]
["dgm.11",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"unnecessary access is permitted to networking components",0]
["dgm.12",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"unnecessary access is permitted to system functions",0]
["dgm.13",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"unnecessary access is permitted to the communications channel",0]
["dgm.14",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"unnecessary access is permitted to the database",0]
["dgm.15",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"unnecessary access is permitted to the operating system",0]
["dgm.16",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"unnecessary network access is permitted",0]
["dgm.2",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"unnecessary system services are configured to run",0]
["dgm.3",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"users and hardware/software entities are given access unnecessary for their roles",0]
["dgm.4",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"users lack visibility of threat activity",0]
["dgm.5",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"users lack visibility of unapproved access",0]
["dgm.6",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"users lack visibility that unauthorized changes were made",0]
["dgm.7",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"users lack visibility that unauthorized firmware has been installed",0]
["dgm.8",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"users lack visibility to the failure of the system to respond to commands",0]
["dgm.9",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"weaker security architecture at backup sites",0]
["dr.1",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"workforce may be unaware of recommended precautions",0]
["dr.2",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"workforce not trained in proper procedures",0]
["dr.3",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A malicious individual accesses a FDEMS in a small- to medium-sized commercial or industrial site, and modifies the energy output, the volt-var curves, or other DER efficiency settings that were requested by the utility.",0]
["dr.4",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent gains access to a FDEMS in a small- to medium-sized commercial or industrial site, such as a shopping center, university campus, hospital complex, or manufacturing facility and installs malicious software. At a pre-planned time, the virus planted by the threat agent causes a synchronized shut down of all the DER systems on the site, either causing a complete or partial outage of the facility or forcing the facility to purchase additional power from the grid.",0]
["dr.5",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A malicious individual accesses a utility FDEMS that manages DER generation and storage systems within a substation, and modifies the energy output, the volt-var curves, or other DER management settings. When the utility requests the FDEMS to control the DER systems to provide more vars, the FDEMS causes the DER systems to behave erratically and cause the substation to have power quality problems, including tripping of the transmission line breaker.",0]
["dr.6",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent compromises the operating system/operating environment platform of a FDEMS and installs malware. The malware leverages automated machine-to-machine authentication mechanisms and/or compromises stored cryptographic authentication keys to allow it to impersonate the authorized FDEMS software. This gives the threat agent complete control over all of the FDEMS resources and remote resources controlled or managed by the FDEMS.",0]
["dr.7",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null," threat agent spoofs DER SCADA control commands to perform emergency shutdowns of a large number of DER systems simultaneously.",0]
["et.1",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent modifies the industrial and the larger commercial DER data being monitored by the utility distribution DER SCADA system in real-time, altering the load value so that it is much higher than the actual value. Although this modification does not affect the monthly revenue metering for these DER systems, it causes the utility to request and pay for additional ancillary services from a neighboring DER storage system.",0]
["et.10",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent breaches a DER SCADA system and causes the DER SCADA system to issue an invalid command to all DER systems. Since DER systems may react differently to invalid commands, the power system experiences immediate and rapid fluctuations as some DER systems shut down, while others go into default mode with no volt-var support, still others revert to full output, and a few become islanded microgrids. The distribution equipment tries to compensate automatically, but causes more problems as the voltage experiences severe surges and sags.",0]
["et.11",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A malicious individual modifies the utility DERMS system power flow analysis function (input, output, or power flow configuration) that determines what energy and ancillary services to request from the DER systems. Under these modifications, the results still remain \"reasonable,\" but lead to benefits to some DER systems and to the detriment of others.",0]
["et.12",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent gains access to the utility DERMS system and alters the conditions that determine when a utility has permission to disconnect a pre-established microgrid from the grid. This modification causes the microgrid either to disconnect at some random time in the future, or to prevent it from disconnecting even when it is supposed to disconnect (e.g., in the case of an outage).",0]
["et.13",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent uses a FDEMS to which they have full access, to access the utility's DERMS system. The threat agent is able to modify the DER commands, schedules, and requests sent to other DER systems, making these settings beneficial to their own DER systems, and consequently less beneficial to other DER systems.",0]
["et.14",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent accesses the DERMS system and modifies the weather data being used to forecast loads and DER generation/storage. Consequently, less than optimal requests are sent to DER systems, causing financial impacts to the utility.",0]
["et.15",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent accesses the DERMS systems and steals the customer DER registration information, using it for industrial espionage or other purposes, causing confidentiality impacts to these utility customers. For example, if stolen, this information could allow other DER owners to manipulate the retail (or wholesale) energy markets, for instance by bidding in prices or energy products that make it less likely the DER system (whose data was stolen) would be willing/able to bid, or if they did bid, making it less cost-effective for them.",0]
["et.16",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent obtains control of the DER management system of a Retail Energy Provider (REP) (who might be a department within a utility or could be a Third Party). The REP then provides invalid information to the utility grid operators on the future availability of large amounts of DER energy and ancillary services. This causes the grid operator to make less-than-optimal market decisions on purchasing energy and ancillary services.",0]
["et.2",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent obtains control of the DER management system of a REP (who might be a department within a utility or could be a Third Party). The REP provides information to the utility grid operators that all DER systems will continue to function normally but then the compromised DER management system shuts down large amounts of DER energy and ancillary services.",0]
["et.3",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent spoofs messages that appear to come from a microgrid to the utility. The messages indicate that the pre-established conditions have been met for the utility to disconnect from the microgrid. The utility disconnects from the microgrid, even though these conditions are not actually met.",0]
["et.4",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A set of Phasor Measurement Units (PMUs) receive their time via network communication from a Precision Time Protocol (PTP) server. A threat agent is able to perform a denial of service attack against PTP either by leveraging vulnerabilities in the PTP service itself or by flooding it with high volume of traffic or malformed packets targeting open ports that are not required by PTP. This leads to delays or lack of functionality of the PTP service, translating into the inability of the PMUs to correctly timestamp their measurements.",0]
["et.5",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent leverages vulnerabilities to perform a spoofing attack and inject messages in WAMPAC network equipment (router, switch, etc.). The altered messages might be either measurements used as input to the WAMPAC algorithms, or commands to phasor measurement units (PMUs) or phasor data concentrators (PDCs).",0]
["et.6",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"An insider is able to gain access to the network to which a PDC is connected and to the PDC's credentials, assuming credentials are in place. This individual compromises (malicious intent) or misconfigures (accidentally) the PDC. Consequently, the PDC does not recognize certain PDCs/PMUs and sends incomplete measurement data up in the WAMPAC hierarchy.",0]
["et.7",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Although access control and connection authentication from a PMU into a PDC are in place, these are compromised. This may be due to a backdoor not subject to the usual controls, social engineering, network sniffing to gain credentials or an attack on the authentication database to modify or steal credential information. This allows inadvertent or malicious introduction of false measurement data.",0]
["et.8",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"An authorized or unauthorized insider (e.g., social-engineered by a threat agent or accidentally) is able to gain access and misconfigures a phasor gateway, allowing less synchrophasor measurement data to be shared with other phasor gateways or altering the tagging of PMU ID associated with the shared data. This action results in a delay in other utilities' visibility to a cascading failure across utilities.",0]
["et.9",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"WAMPAC communications are slowed down or stopped by manipulating the communications link between the PMUs and the control center. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack.",0]
["generic.1",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"An insider delays local measurement data exchange between substations by compromising the integrity of the WAMPAC communication link between substations. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack. Note: The impact of the failure scenario presented below is assessed under the assumption that WAMPAC is used as part of a special protection scheme (SPS).",0]
["generic.2",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"An attacker blocks or alters the GPS time signal that is associated with the synchrophasor measurements. The attacker can perform either a GPS spoofing or GPS jamming attack, where the GPS receiver is deceived by a more powerful signal resulting in the GPS signal being intentionally blocked or altered.",0]
["generic.3",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent directly accesses and compromises the Electric Vehicle (EV) firmware or inserts a Trojan horse to always indicate the EV is undercharged. Consequently, the battery becomes overcharged and may eventually explode.",0]
["generic.4",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent is able to compromise a fast-charging station management system. When a large number of electric vehicles are connected to charging stations, the threat agent modifies the charge-staggering algorithm such that fast-charging begins concurrently for all the EVs, thus overloading the distribution transformer, causing a local outage, and preventing the EVs from being charged.",0]
["wampac.1",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent such as a disgruntled employee or an employee subjected to social engineering could inject a virus into the computer system of an EV at an EV maintenance center or at a factory. Although not present today, future wireless communication technologies for Vehicle-to-Infrastructure (V2I) could enable a vehicle to establish additional data communications channels through which the virus infects public charging stations. A public charging station may in turn infect other EVs. The virus could harm other key functions for car safety in the EV as well as charging functions in the EV and EVSE (Electric Vehicle Service Equipment).",0]
["wampac.10",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent cracks through an enterprise firewall and exploits a weak operating system password. Because of a poor database server security configuration, the threat agent is able to obtain confidential utility records regarding charging locations for specific vehicles from the database.",0]
["wampac.11",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"system permits device identifier to be misused",0]
["wampac.12",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent eavesdrops on traffic on the network between a DRAS and a customer system. This could leak private information to the threat agent. This might be the easiest attack that the agent can launch while not being detected by utilities.",0]
["wampac.2",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent obtains access to the communications channel between the DRAS and the customer DR system, modifies on-going traffic or communications, inserts false messages, or launches a replay attack. The DRAS and the customer system could receive an unauthorized message or a corrupted message. Such a message may cause unintentional (often unfavorable) behaviors of these systems. (Note: Spoofed last gasp messages as in AMI.11 is an important special case of this failure scenario.)",0]
["wampac.3",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"The DRAS or customer DR system is infected by non-specific common malware. This malware may consume system resources, thus slowing other system processes or may attempt to compromise typical components such as databases. This could cause the DRAS to fail to send DR messages when needed or to disclose customer information in its database. It could cause the customer system not to execute the contractual terms of the DR service although it receives legitimate DR messages.",0]
["wampac.4",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent injects purpose-built malware into the DRAS. This malware places the server under remote command of this agent. The agent might use this capability to send out DR messages appropriate for non-peak times at peak times, and vice versa.",0]
["wampac.5",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent injects a malware into a customer DR system that runs an OpenADR client program at the gateway of the customer domain. The malware might be controlled remotely by the agent or could directly change the behaviors of the customer DR system without any remote connection. As a consequence, the compromised DR system sends incorrect DR messages back to the DRAS. For instance, it sends a false DR registration message to the DRAS, when registering the customer's capability of energy reduction - the false message informs the DRAS that the customer is able to reduce 500kW, although he cannot. Alternatively, the compromised DR system sends a false DR report message to the DRAS, after the DR event finishes - the false message informs the DRAS that the customer reduced 500kW, although the customer actually reduced 100kW.",0]
["wampac.6",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent uses a wireless signal jammer to disrupt wireless communications channels used to monitor and control distribution systems and substations. Examples are wireless local area network (LAN) communications for inter-substation differential protection, wireless communications between a distribution management system (DMS) and static VAR compensators (SVC), and communications to wireless monitoring equipment.",0]
["wampac.7",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent compromises distribution management system (DMS) functionality through remote access modification of executable programs and libraries, rendering the DMS inoperable.",0]
["wampac.8",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Threat agent spoofs data inputs from field devices at substations and below to cause the DMS to report a false system state. This could cause operator or automated responses that are inappropriate.",0]
["gen.1",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Assuming the same communications system serves DGM, DR, AMI, and many other services at the distribution level, a Quality of Service (QoS) allocation of bandwidth is necessary. QoS can be spoofed and if end device classifications are trusted, a threat agent can escalate the priority of malevolent data streams. If denial of service is the goal, the threat agent could spoof the QoS of flooded ICMP packets to prevent the transmission and reception of monitoring and control packets.",0]
["gen.2",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent could take advantage of the confusion, lack of security, and hasty reconstitution of the distribution grid after a disaster. For example, a threat agent could delay the recovery effort by leveraging temporary communications with low security to access DMS to switch breakers. Likewise this objective could be achieved by subverting weak physical security at substations (due to damage or communication outages) to access engineering or console ports or relays to change settings and render them inoperable. Further, the interception of temporary communications with low security might support reconnaissance of high priority vulnerabilities to aid in future attacks.",0]
["gen.3",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"After a maintenance employee retires, computer services personnel forgot to deactivate the employees account on the DMS network. A week later, a threat agent uses the employee's credentials to access the DMS network. The threat agent alters DMS switching schedules so that automated and manual switching actions trip the wrong lines after a fault or before maintenance to cause power interruptions for critical loads, such as hospitals or prisons.",0]
["gen.4",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A Retail Energy Provider (REP) that manages a group of DER systems normally receives commands from the DERMS on what energy levels and ancillary services that group of DER systems should provide. A threat agent accesses confidential or private information in the DERMS DER database on customers who own DER systems, and uses that information to \"market\" to those customers.",0]
["gen.5",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"An insider is able to gain unauthorized access to the network to which a WAMPAC historian is connected and to the historian host/database software's credentials, assuming credentials are in place. The insider corrupts or deletes the measurement data from the database.",0]
["gen.6",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent inserts firmware into PMU/PDC that alters measurements while they are collected. The altering mechanism can be triggered at all times, randomly or by certain events (e.g., time of day, certain date, etc.) that are assumed to inflict significant damage.",0]
["gen.7",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent is able to gain unauthorized access to the credentials of the PMU/PDC/Phasor Gateway metadata that describes the data structure, assuming credentials are in place, and corrupts or deletes the associated metadata from the database.",0]
["gen.8",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent maliciously modifies the DRAS configuration to send (or not send) DR messages at incorrect times and to incorrect devices. This could deliver a wrong, but seemingly legitimate set of messages to the customer system.",0]
["gen.9",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Some utilities depend upon communication providers for long-haul and wide area network (WAN) communications for monitoring and control of their distribution system. Furthermore, utilities that provide their own communication network for critical functions often resell unused bandwidth to offset costs while others have spun off their communication network as a separate communications company. There is also a general trend toward economizing communications costs by sharing them. A threat agent could take advantage of these paradigms by compromising computer systems using the same network as the Distribution Management System (DMS) to facilitate a distributed denial of service attack through the infected computer system by means of a botnet centered on IP spoofing and Internet Control Message Protocol (ICMP) flooding. With the network overburdened, monitoring and control functions could become unavailable for optimization or protection.",0]
["gen.10",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent injects malicious code into substation equipment through physical access of engineering serial ports or by memory update devices such as USB memory sticks, Secure Digital (SD) cards or Compact Flash (CF) cards. Examples of target equipment include communications concentrators, remote terminal units (RTUs), and protection relays. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration.",0]
["gen.11",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent uploads malicious code into substation equipment via remote engineering access, either through an IP network WAN or dialup to a line-sharing switch (LSS). Examples of target equipment include communication concentrators, RTUs, and protection relays. Connections with peers are another avenue of attack. Some distribution substations, particularly in urban environments, use Bluetooth or ZigBee for access to reduce the need for crews to install underground cables. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration.",0]
["gen.12",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Lifecycle attacks against equipment during development, production, shipping, and maintenance can introduce deliberate errors that will result in failure under special conditions. For example, a threat agent might upload modified firmware in a relay during production that introduces a back door for changing relay settings and set points. This could render the relay inoperable or cause it to operate unexpectedly.",0]
["gen.13",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Switched capacitor banks can create large switching transients when connected to a utility feeder, generating voltage spikes up to twice the rated voltage and can be exacerbated when two are switched on back-to-back. A threat agent social engineers DMS Human Machine Interface (HMI) passwords to gain control of switched capacitor bank relays to repeatedly switch capacitor banks on and off, generating cascading voltage spikes and instability to trip protection devices.",0]
["gen.14",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent performs reconnaissance of utility communications, electrical infrastructure, and ancillary systems to identify critical feeders and electrical equipment. Threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent manufactures an artificial cascade through sequential tripping of select critical feeders and components, causing automated tripping of generation sources due to power and voltage fluctuations. A blackout of varying degree and potential equipment damage ensues. The remote connections might be established using a variety of methods or combination of methods. These include, but are not limited to, using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly.",0]
["gen.15",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent carries out a man in the middle attack, hijacking the wireless communications channel to a substation transformer. The threat agent uses this capability to disable transformer cooling fans and overheat the device. Depending on the transformer and its controller, this could be done through a direct command or by drastically increasing oil temperature setpoints. Many transformers are also custom built and have long lead times for replacement or repair.",0]
["gen.16",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Serial communications to substations over phone lines often lack authentication of field devices, such as RTUs.┬áThis might allow a threat agent to directly dial into modems attached to RTU equipment by war dialing city phone numbers or company phone extensions. Such techniques could allow a threat agent to send breaker trip commands to substation relays and disconnect feeders.",0]
["Grand Total",0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"A threat agent performs reconnaissance of utility maintenance operations to identify current or scheduled maintenance on distribution lines and equipment performed by utility linemen. The threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent energizes distribution lines or equipment that are under maintenance by linemen to elicit injury or death by electrocution. The remote connections might be established using a variety of methods or combination of methods. These include but are not limited to: using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly.",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Physical access may be obtained by unauthorized individuals as many sites have pump houses",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System relies on credentials that are easy to obtain for access to make configuration changes to",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits unauthorized changes to the",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Configuration changes are not verified for correctness as an individual user is able to modify the referenced",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System relies on credentials that are easy to obtain for access to potentially damaging",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Remote access may be obtained by unauthorized",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Users lack visibility that unauthorized changes were made to the configuration",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits potentially harmful command sequences by allowing for disabling the disconnect capability to be modified",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Workforce may be unaware of recommended precautions to block social engineering attacks, such as spear",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Unnecessary access is permitted to critical functions such as commands to activate the deluge system and to make changes to the alerting",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits unauthorized changes to the system",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Configuration changes are not verified for correctness to prevent and detect unauthorized setting",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Workforce not trained in proper procedures through allowing a USB drive with malware to be connected to a network",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits installation of",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits installation of malware onto the firmware of the programmable logic",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System may become overwhelmed by traffic flooding or malformed traffic through the DCS",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits wireless access by unauthorized parties to the DCS",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Unnecessary access is permitted to networking components by putting a diagnostic component on the DCS network with unnecessary visibility to other",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Network interfaces permit unnecessary traffic flows through the ôdual-homedö",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Workforce may be unaware of recommended precautions to block social engineering attacks, such as",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits unauthorized changes through remote configuration",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Physical access may be obtained by unauthorized individuals to communications channel",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Unnecessary access is permitted to the communications channel in that the lines are unnecessarily marked by the phone",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits unauthorized changes to",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Publicly accessible and/or third party controlled links used in plant/system operating center communication",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits installation of malware on the HMI",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Workforce may be unaware of recommended precautions regarding USB/laptop",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System may become overwhelmed by traffic flooding or malformed traffic because of an exploited",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Software patches are not checked regularly to ensure that they are current on the DCS operating",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Software patches are not checked regularly to ensure that they are current in the corporate chemical inventory process control",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Unnecessary access is permitted to critical",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Users and hardware/software entities are given access unnecessary for their roles. The M&D center has access to both plant operational and information informing strategic power market decision which may not be necessary for the core function of the M&D",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Network interfaces permit unnecessary traffic flows to the",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits potentially harmful command sequences to be transmitted by a threat",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Commands or other messages may be inserted on the network by unauthorized",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Spoofed signal is either difficult or infeasible to distinguish from a legitimate",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Publicly accessible and/or third-party control links",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Design permits unnecessary",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Presence of features or functions that may be misused by",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Users lack visibility of threat activity, specifically unexpected access to network components or unusual traffic on the",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Users and hardware/software entities are given access unnecessary for their roles to perform duties that should be",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Users lack visibility that unauthorized changes were made to the",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"System permits unauthorized changes by allowing remote access for vendors to do monitoring and",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Physical access may be obtained by unauthorized individuals to control system",0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Grand Total",0]

{"sheet":"Mit Group Report","index":9,"n_rows":27,"n_cols":26,"rows_kept":27,"cut":false,"hidden":false,"merged":[]}
[]
[null,"Mitigation Group","encrypt",null,"Detailed View of Failure Scenario Severities sorted by Mitigation Group",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Global View of Mitigation Group Severities"]
[]
[null,"Row Labels","Sum of Utility",null,null,null,null,null,null,null,null,"Row Labels","Sum of Utility"]
[null,"ami.10",0,null,null,null,null,null,null,null,null,"alert",0]
[null,"ami.11",0,null,null,null,null,null,null,null,null,"analyze",0]
[null,"ami.21",0,null,null,null,null,null,null,null,null,"audit",0]
[null,"ami.8",0,null,null,null,null,null,null,null,null,"authenticate",0]
[null,"ami.9",0,null,null,null,null,null,null,null,null,"check integrity",0]
[null,"der.21",0,null,null,null,null,null,null,null,null,"control access",0]
[null,"der.4",0,null,null,null,null,null,null,null,null,"detect",0]
[null,"dgm.11",0,null,null,null,null,null,null,null,null,"encrypt",0]
[null,"dgm.12",0,null,null,null,null,null,null,null,null,"enforce limits",0]
[null,"dgm.14",0,null,null,null,null,null,null,null,null,"ensure availability",0]
[null,"dgm.15",0,null,null,null,null,null,null,null,null,"isolate",0]
[null,"dgm.16",0,null,null,null,null,null,null,null,null,"learn",0]
[null,"dgm.4",0,null,null,null,null,null,null,null,null,"plan",0]
[null,"dgm.6",0,null,null,null,null,null,null,null,null,"profile",0]
[null,"dgm.7",0,null,null,null,null,null,null,null,null,"sanitize",0]
[null,"et.11",0,null,null,null,null,null,null,null,null,"secure design and implementation",0]
[null,"et.4",0,null,null,null,null,null,null,null,null,"secure operations",0]
[null,"et.7",0,null,"(use Mitigation Group filter at top to view results for specific Mitigation Groups)",null,null,null,null,null,null,"test",0]
[null,"wampac.10",0,null,null,null,null,null,null,null,null,"track",0,null,null,null,null,null,null,null,null,null,"Home",null,null,"Assessment Summary Tool"]
[null,"wampac.2",0,null,null,null,null,null,null,null,null,"train",0]
[null,"wampac.4",0,null,"Severity = (# of occurrences of mitigation in scenario) X (integer risk rating of scenario)\n",null,null,null,null,null,null,"user decision",0,null,null,null,null,null,null,null,null,null,null,"Mitigation Group List"]
[null,"Grand Total",0,null,null,null,null,null,null,null,null,"verify",0]
[null,null,null,null,"Integer risk rating:  L=1; M=2; H= 3",null,null,null,null,null,null,"Grand Total",0]

{"sheet":"Common Mit Report","index":10,"n_rows":782,"n_cols":28,"rows_kept":782,"cut":false,"hidden":false,"merged":[]}
[]
[null,null,null,null,null,null,null,null,"Detailed View of Common Mitigation Severities",null,null,null,null,null,null,"Common Mitigation","train personnel",null,null,null,null,"Global View of Common Mitigation Severities"]
[null,"Row Labels","Sum of Utility"]
[null,"ami.1",0,"Row Labels","Sum of Utility",null,null,null,null,null,null,null,null,null,null,"Row Labels","Sum of Utility"]
[null,"create audit logs",0,"analyze anomalous events",0,null,null,null,null,null,null,null,null,null,null,"ami.13",0]
[null,"cross check",0,"authenticate data source",0,null,null,null,null,null,null,null,null,null,null,"ami.2",0]
[null,"detect anomalous commands",0,"authenticate devices",0,null,null,null,null,null,null,null,null,null,null,"ami.9",0]
[null,"generate alarms",0,"authenticate messages",0,null,null,null,null,null,null,null,null,null,null,"der.1",0]
[null,"limit events",0,"authenticate users",0,null,null,null,null,null,null,null,null,null,null,"der.10",0]
[null,"require two-person rule",0,"change default credentials",0,null,null,null,null,null,null,null,null,null,null,"der.11",0]
[null,"use Role-Based Access Control",0,"check message integrity",0,null,null,null,null,null,null,null,null,null,null,"der.2",0]
[null,"validate data",0,"check OS integrity",0,null,null,null,null,null,null,null,null,null,null,"dgm.10",0]
[null,"ami.10",0,"check software execution integrity",0,null,null,null,null,null,null,null,null,null,null,"dgm.11",0]
[null,"create audit logs",0,"check software file integrity",0,null,null,null,null,null,null,null,null,null,null,"dgm.15",0]
[null,"detect unauthorized access",0,"choose own rate",0,null,null,null,null,null,null,null,null,null,null,"generic.2",0]
[null,"enforce least privilege",0,"conduct code review",0,null,null,null,null,null,null,null,null,null,null,"generic.3",0]
[null,"generate alarms",0,"conduct penetration testing",0,null,null,null,null,null,null,null,null,null,null,"Grand Total",0]
[null,"protect credentials",0,"configure for least functionality",0]
[null,"require multi-factor authentication",0,"confirm action",0]
[null,"require two-person rule",0,"continue normal operations",0]
[null,"require VPNs",0,"create audit logs",0]
[null,"restrict Internet access",0,"cross check",0]
[null,"restrict network access",0,"define contingency plan",0]
[null,"validate data",0,"define incident response plan",0]
[null,"ami.11",0,"define policy",0]
[null,"authenticate messages",0,"define procedures",0,null,"(use common mitigation filter at top to view results for specific common mitigations)",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Home",null,null,"Assessment Summary Tool"]
[null,"confirm action",0,"define SLA",0]
[null,"continue normal operations",0,"design for security",0,null,"Severity = (# of occurrences of mitigation in scenario) X (integer risk rating of scenario)\n",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Common Mitigation List"]
[null,"define procedures",0,"design for trust",0]
[null,"encrypt communication paths",0,"detect abnormal behavior",0,null,"Integer risk rating:  L=1; M=2; H= 3"]
[null,"protect against replay",0,"detect abnormal functionality",0]
[null,"verify load",0,"detect abnormal output",0]
[null,"ami.12",0,"detect anomalous commands",0]
[null,"conduct penetration testing",0,"detect physical intrusion",0]
[null,"create audit logs",0,"detect unauthorized access",0]
[null,"detect unauthorized access",0,"detect unauthorized configuration",0]
[null,"detect unauthorized configuration changes",0,"detect unauthorized configuration changes",0]
[null,"detect unusual patterns",0,"detect unauthorized connections",0]
[null,"enforce least privilege",0,"detect unauthorized devices",0]
[null,"implement configuration management",0,"detect unauthorized use",0]
[null,"protect credentials",0,"detect unusual patterns",0]
[null,"require multi-factor authentication",0,"emphasize security management",0]
[null,"require strong passwords",0,"encrypt application layer",0]
[null,"ami.13",0,"encrypt communication paths",0]
[null,"confirm action",0,"encrypt data at rest",0]
[null,"cross check",0,"encrypt link layer",0]
[null,"lock workstations",0,"enforce changing default passwords",0]
[null,"require second-level authentication",0,"enforce hardware limits",0]
[null,"require video surveillance",0,"enforce least privilege",0]
[null,"restrict physical access",0,"enforce limits in hardware",0]
[null,"train personnel",0,"enforce restrictive firewall rules",0]
[null,"ami.14",0,"generate alarms",0]
[null,"isolate networks",0,"generate alerts",0]
[null,"protect against replay",0,"harden platforms",0]
[null,"require approved cryptographic algorithms",0,"implement configuration management",0]
[null,"ami.15",0,"isolate functions",0]
[null,"define policy",0,"isolate networks",0]
[null,"detect physical intrusion",0,"learn from others",0]
[null,"emphasize security management",0,"limit events",0]
[null,"require video surveillance",0,"limit remote modification",0]
[null,"restrict physical access",0,"lock workstations",0]
[null,"ami.16",0,"maintain anti-virus",0]
[null,"require approved key management",0,"maintain latest firmware",0]
[null,"ami.17",0,"maintain patches",0]
[null,"detect unusual patterns",0,"minimize private information",0]
[null,"protect credentials",0,"perform audit",0]
[null,"require fail-over",0,"perform financial audit",0]
[null,"require multi-factor authentication",0,"perform hardware acceptance testing",0]
[null,"require strong passwords",0,"perform security testing",0]
[null,"verify mode",0,"prevent modification",0]
[null,"ami.18",0,"prioritize alarms",0]
[null,"authenticate devices",0,"prioritize recovery activities",0]
[null,"restrict device access",0,"profile equipment",0]
[null,"ami.19",0,"protect against replay",0]
[null,"check software execution integrity",0,"protect audit logs",0]
[null,"cross check",0,"protect credentials",0]
[null,"protect against replay",0,"protect from overcharge",0]
[null,"require reliable external time source",0,"protect security configuration",0]
[null,"verify time synchronization",0,"re-evaluate scheduled disconnects",0]
[null,"ami.2",0,"require acknowledgment",0]
[null,"check software execution integrity",0,"require application whitelisting",0]
[null,"check software file integrity",0,"require approval",0]
[null,"create audit logs",0,"require approved cryptographic algorithms",0]
[null,"detect abnormal output",0,"require approved key management",0]
[null,"detect physical intrusion",0,"require assured maintenance",0]
[null,"detect unusual patterns",0,"require authentication",0]
[null,"generate alarms",0,"require backup",0]
[null,"harden platforms",0,"require circuit breaker",0]
[null,"implement configuration management",0,"require credential revocation",0]
[null,"lock workstations",0,"require fail-over",0]
[null,"perform financial audit",0,"require fail-safe rollback",0]
[null,"restrict physical access",0,"require failure messages",0]
[null,"train personnel",0,"require intrusion detection and prevention",0]
[null,"use Role-Based Access Control",0,"require lockout",0]
[null,"validate data",0,"require message verification",0]
[null,"ami.20",0,"require multi-factor authentication",0]
[null,"create audit logs",0,"require non-repudiation",0]
[null,"implement configuration management",0,"require on-going validation",0]
[null,"require two-person rule",0,"require password rule enforcement",0]
[null,"ami.21",0,"require periodic walk-downs",0]
[null,"configure for least functionality",0,"require physical connection",0]
[null,"encrypt data at rest",0,"require PIN",0]
[null,"require credential revocation",0,"require read-only access",0]
[null,"sanitize device",0,"require reconfiguration in test mode",0]
[null,"track asset",0,"require redundancy",0]
[null,"ami.22",0,"require reliable external time source",0]
[null,"require approved cryptographic algorithms",0,"require resiliency",0]
[null,"require multi-factor authentication",0,"require safe mode",0]
[null,"restrict application access",0,"require second-level authentication",0]
[null,"ami.23",0,"require secure boot loader",0]
[null,"require multi-factor authentication",0,"require secure factory settings",0]
[null,"require password rule enforcement",0,"require secure key storage",0]
[null,"verify absence of hardcoded credentials",0,"require secure remote firmware upgrade",0]
[null,"ami.24",0,"require separation of duty",0]
[null,"define procedures",0,"require single sign-on",0]
[null,"perform security testing",0,"require spares",0]
[null,"require approved cryptographic algorithms",0,"require spread-spectrum radio",0]
[null,"ami.25",0,"require strong passwords",0]
[null,"define procedures",0,"require synchronous functions",0]
[null,"detect unauthorized access",0,"require tamper detection and response",0]
[null,"generate alarms",0,"require two-person rule",0]
[null,"maintain patches",0,"require unique keys",0]
[null,"perform security testing",0,"require video surveillance",0]
[null,"restrict network access",0,"require VPNs",0]
[null,"ami.26",0,"restrict access",0]
[null,"authenticate data source",0,"restrict application access",0]
[null,"check software file integrity",0,"restrict communication access",0]
[null,"design for security",0,"restrict configuration access",0]
[null,"perform security testing",0,"restrict database access",0]
[null,"ami.27",0,"restrict device access",0]
[null,"configure for least functionality",0,"restrict file access",0]
[null,"design for security",0,"restrict Internet access",0]
[null,"ami.28",0,"restrict network access",0]
[null,"require fail-safe rollback",0,"restrict network service access",0]
[null,"test before installation",0,"restrict occurrence",0]
[null,"ami.29",0,"restrict physical access",0]
[null,"minimize private information",0,"restrict port access",0]
[null,"require approved cryptographic algorithms",0,"restrict remote access",0]
[null,"require multi-factor authentication",0,"restrict system access",0]
[null,"ami.3",0,"review recovery response",0]
[null,"authenticate users",0,"sanitize device",0]
[null,"check software execution integrity",0,"test after installation",0]
[null,"check software file integrity",0,"test after maintenance",0]
[null,"create audit logs",0,"test before installation",0]
[null,"generate alerts",0,"test for malware",0]
[null,"isolate networks",0,"track asset",0]
[null,"protect credentials",0,"train personnel",0]
[null,"require multi-factor authentication",0,"use Role-Based Access Control",0]
[null,"require strong passwords",0,"validate data",0]
[null,"require video surveillance",0,"validate inputs",0]
[null,"restrict configuration access",0,"validate signal",0]
[null,"restrict Internet access",0,"verify absence of hardcoded credentials",0]
[null,"restrict physical access",0,"verify correct operation",0]
[null,"use Role-Based Access Control",0,"verify EV owner",0]
[null,"ami.30",0,"verify load",0]
[null,"check software file integrity",0,"verify mode",0]
[null,"detect unusual patterns",0,"verify network changes",0]
[null,"require multi-factor authentication",0,"verify personnel",0]
[null,"use Role-Based Access Control",0,"verify settings",0]
[null,"ami.31",0,"verify time synchronization",0]
[null,"check software file integrity",0,"vulnerability scan before install",0]
[null,"detect anomalous commands",0,"Grand Total",0]
[null,"require multi-factor authentication",0]
[null,"ami.32",0]
[null,"detect unauthorized configuration changes",0]
[null,"detect unusual patterns",0]
[null,"protect credentials",0]
[null,"require password rule enforcement",0]
[null,"use Role-Based Access Control",0]
[null,"verify personnel",0]
[null,"ami.4",0]
[null,"detect unusual patterns",0]
[null,"perform financial audit",0]
[null,"require approved cryptographic algorithms",0]
[null,"require approved key management",0]
[null,"require unique keys",0]
[null,"ami.5",0]
[null,"require approved key management",0]
[null,"require secure key storage",0]
[null,"require unique keys",0]
[null,"ami.6",0]
[null,"check software file integrity",0]
[null,"detect unusual patterns",0]
[null,"require multi-factor authentication",0]
[null,"use Role-Based Access Control",0]
[null,"ami.7",0]
[null,"conduct penetration testing",0]
[null,"cross check",0]
[null,"detect abnormal functionality",0]
[null,"generate alarms",0]
[null,"generate alerts",0]
[null,"require secure boot loader",0]
[null,"require secure remote firmware upgrade",0]
[null,"ami.8",0]
[null,"analyze anomalous events",0]
[null,"authenticate messages",0]
[null,"cross check",0]
[null,"encrypt communication paths",0]
[null,"perform hardware acceptance testing",0]
[null,"prioritize alarms",0]
[null,"protect against replay",0]
[null,"ami.9",0]
[null,"authenticate devices",0]
[null,"define policy",0]
[null,"define procedures",0]
[null,"detect unauthorized access",0]
[null,"detect unusual patterns",0]
[null,"enforce least privilege",0]
[null,"isolate networks",0]
[null,"re-evaluate scheduled disconnects",0]
[null,"require approved cryptographic algorithms",0]
[null,"require multi-factor authentication",0]
[null,"require VPNs",0]
[null,"restrict Internet access",0]
[null,"restrict network access",0]
[null,"train personnel",0]
[null,"der.1",0]
[null,"authenticate users",0]
[null,"change default credentials",0]
[null,"enforce limits in hardware",0]
[null,"require approval",0]
[null,"train personnel",0]
[null,"der.10",0]
[null,"authenticate users",0]
[null,"change default credentials",0]
[null,"enforce least privilege",0]
[null,"enforce restrictive firewall rules",0]
[null,"protect credentials",0]
[null,"require multi-factor authentication",0]
[null,"restrict application access",0]
[null,"train personnel",0]
[null,"use Role-Based Access Control",0]
[null,"der.11",0]
[null,"enforce least privilege",0]
[null,"enforce restrictive firewall rules",0]
[null,"generate alerts",0]
[null,"protect credentials",0]
[null,"require application whitelisting",0]
[null,"require multi-factor authentication",0]
[null,"train personnel",0]
[null,"use Role-Based Access Control",0]
[null,"der.12",0]
[null,"authenticate users",0]
[null,"enforce changing default passwords",0]
[null,"enforce least privilege",0]
[null,"enforce restrictive firewall rules",0]
[null,"protect credentials",0]
[null,"require multi-factor authentication",0]
[null,"restrict application access",0]
[null,"use Role-Based Access Control",0]
[null,"der.13",0]
[null,"check OS integrity",0]
[null,"check software execution integrity",0]
[null,"check software file integrity",0]
[null,"create audit logs",0]
[null,"maintain patches",0]
[null,"protect credentials",0]
[null,"require secure boot loader",0]
[null,"der.14",0]
[null,"authenticate data source",0]
[null,"authenticate messages",0]
[null,"limit events",0]
[null,"require intrusion detection and prevention",0]
[null,"use Role-Based Access Control",0]
[null,"validate inputs",0]
[null,"der.15",0]
[null,"authenticate data source",0]
[null,"authenticate messages",0]
[null,"require intrusion detection and prevention",0]
[null,"use Role-Based Access Control",0]
[null,"der.16",0]
[null,"authenticate messages",0]
[null,"authenticate users",0]
[null,"protect credentials",0]
[null,"use Role-Based Access Control",0]
[null,"validate inputs",0]
[null,"der.17",0]
[null,"create audit logs",0]
[null,"generate alerts",0]
[null,"require intrusion detection and prevention",0]
[null,"require multi-factor authentication",0]
[null,"use Role-Based Access Control",0]
[null,"der.18",0]
[null,"authenticate messages",0]
[null,"check message integrity",0]
[null,"require intrusion detection and prevention",0]
[null,"require multi-factor authentication",0]
[null,"use Role-Based Access Control",0]
[null,"der.19",0]
[null,"authenticate messages",0]
[null,"check message integrity",0]
[null,"use Role-Based Access Control",0]
[null,"validate inputs",0]
[null,"der.2",0]
[null,"authenticate devices",0]
[null,"authenticate messages",0]
[null,"authenticate users",0]
[null,"configure for least functionality",0]
[null,"detect unauthorized configuration changes",0]
[null,"limit remote modification",0]
[null,"require acknowledgment",0]
[null,"require approved cryptographic algorithms",0]
[null,"require failure messages",0]
[null,"require secure factory settings",0]
[null,"train personnel",0]
[null,"use Role-Based Access Control",0]
[null,"verify network changes",0]
[null,"der.20",0]
[null,"authenticate messages",0]
[null,"check message integrity",0]
[null,"use Role-Based Access Control",0]
[null,"validate inputs",0]
[null,"der.21",0]
[null,"create audit logs",0]
[null,"encrypt data at rest",0]
[null,"protect credentials",0]
[null,"require approved cryptographic algorithms",0]
[null,"require intrusion detection and prevention",0]
[null,"use Role-Based Access Control",0]
[null,"der.23",0]
[null,"create audit logs",0]
[null,"protect credentials",0]
[null,"require multi-factor authentication",0]
[null,"require non-repudiation",0]
[null,"require strong passwords",0]
[null,"use Role-Based Access Control",0]
[null,"der.24",0]
[null,"authenticate messages",0]
[null,"create audit logs",0]
[null,"generate alerts",0]
[null,"isolate functions",0]
[null,"use Role-Based Access Control",0]
[null,"der.25",0]
[null,"cross check",0]
[null,"protect credentials",0]
[null,"require multi-factor authentication",0]
[null,"require strong passwords",0]
[null,"restrict application access",0]
[null,"der.26",0]
[null,"authenticate messages",0]
[null,"confirm action",0]
[null,"der.3",0]
[null,"authenticate users",0]
[null,"cross check",0]
[null,"require on-going validation",0]
[null,"test for malware",0]
[null,"use Role-Based Access Control",0]
[null,"verify personnel",0]
[null,"der.4",0]
[null,"encrypt communication paths",0]
[null,"der.5",0]
[null,"configure for least functionality",0]
[null,"create audit logs",0]
[null,"protect audit logs",0]
[null,"require assured maintenance",0]
[null,"require authentication",0]
[null,"restrict access",0]
[null,"test after installation",0]
[null,"test after maintenance",0]
[null,"test before installation",0]
[null,"use Role-Based Access Control",0]
[null,"verify personnel",0]
[null,"der.6",0]
[null,"check message integrity",0]
[null,"create audit logs",0]
[null,"generate alarms",0]
[null,"protect against replay",0]
[null,"der.7",0]
[null,"authenticate messages",0]
[null,"check message integrity",0]
[null,"cross check",0]
[null,"der.8",0]
[null,"require non-repudiation",0]
[null,"require read-only access",0]
[null,"der.9",0]
[null,"authenticate messages",0]
[null,"create audit logs",0]
[null,"generate alarms",0]
[null,"validate data",0]
[null,"dgm.1",0]
[null,"require redundancy",0]
[null,"require safe mode",0]
[null,"require spread-spectrum radio",0]
[null,"dgm.10",0]
[null,"enforce least privilege",0]
[null,"require single sign-on",0]
[null,"require synchronous functions",0]
[null,"restrict physical access",0]
[null,"train personnel",0]
[null,"verify personnel",0]
[null,"dgm.11",0]
[null,"confirm action",0]
[null,"create audit logs",0]
[null,"define policy",0]
[null,"encrypt communication paths",0]
[null,"generate alerts",0]
[null,"implement configuration management",0]
[null,"isolate networks",0]
[null,"require strong passwords",0]
[null,"require two-person rule",0]
[null,"restrict remote access",0]
[null,"train personnel",0]
[null,"dgm.12",0]
[null,"authenticate users",0]
[null,"create audit logs",0]
[null,"design for trust",0]
[null,"encrypt communication paths",0]
[null,"generate alerts",0]
[null,"dgm.13",0]
[null,"generate alarms",0]
[null,"perform audit",0]
[null,"require credential revocation",0]
[null,"dgm.14",0]
[null,"authenticate users",0]
[null,"design for trust",0]
[null,"encrypt communication paths",0]
[null,"dgm.15",0]
[null,"confirm action",0]
[null,"create audit logs",0]
[null,"define policy",0]
[null,"define procedures",0]
[null,"encrypt communication paths",0]
[null,"generate alerts",0]
[null,"implement configuration management",0]
[null,"isolate networks",0]
[null,"require strong passwords",0]
[null,"require two-person rule",0]
[null,"restrict remote access",0]
[null,"train personnel",0]
[null,"dgm.16",0]
[null,"detect unauthorized access",0]
[null,"detect unusual patterns",0]
[null,"encrypt communication paths",0]
[null,"require approved cryptographic algorithms",0]
[null,"require approved key management",0]
[null,"require authentication",0]
[null,"require multi-factor authentication",0]
[null,"require tamper detection and response",0]
[null,"restrict physical access",0]
[null,"dgm.2",0]
[null,"require redundancy",0]
[null,"require safe mode",0]
[null,"verify personnel",0]
[null,"dgm.3",0]
[null,"authenticate users",0]
[null,"check software execution integrity",0]
[null,"configure for least functionality",0]
[null,"create audit logs",0]
[null,"generate alarms",0]
[null,"maintain latest firmware",0]
[null,"maintain patches",0]
[null,"require video surveillance",0]
[null,"restrict access",0]
[null,"restrict device access",0]
[null,"restrict physical access",0]
[null,"restrict port access",0]
[null,"use Role-Based Access Control",0]
[null,"dgm.4",0]
[null,"authenticate users",0]
[null,"create audit logs",0]
[null,"generate alarms",0]
[null,"maintain anti-virus",0]
[null,"maintain patches",0]
[null,"require application whitelisting",0]
[null,"require VPNs",0]
[null,"restrict remote access",0]
[null,"dgm.5",0]
[null,"check software file integrity",0]
[null,"create audit logs",0]
[null,"detect abnormal behavior",0]
[null,"implement configuration management",0]
[null,"maintain anti-virus",0]
[null,"maintain patches",0]
[null,"require application whitelisting",0]
[null,"require backup",0]
[null,"require intrusion detection and prevention",0]
[null,"require multi-factor authentication",0]
[null,"use Role-Based Access Control",0]
[null,"dgm.6",0]
[null,"authenticate messages",0]
[null,"detect unusual patterns",0]
[null,"encrypt communication paths",0]
[null,"restrict communication access",0]
[null,"dgm.7",0]
[null,"authenticate users",0]
[null,"design for trust",0]
[null,"encrypt communication paths",0]
[null,"profile equipment",0]
[null,"restrict network access",0]
[null,"dgm.8",0]
[null,"conduct code review",0]
[null,"confirm action",0]
[null,"create audit logs",0]
[null,"design for trust",0]
[null,"enforce least privilege",0]
[null,"implement configuration management",0]
[null,"require spares",0]
[null,"restrict access",0]
[null,"verify personnel",0]
[null,"vulnerability scan before install",0]
[null,"dgm.9",0]
[null,"define policy",0]
[null,"implement configuration management",0]
[null,"prioritize recovery activities",0]
[null,"review recovery response",0]
[null,"verify correct operation",0]
[null,"dr.1",0]
[null,"authenticate users",0]
[null,"check software file integrity",0]
[null,"detect abnormal output",0]
[null,"detect unauthorized access",0]
[null,"require acknowledgment",0]
[null,"require intrusion detection and prevention",0]
[null,"require redundancy",0]
[null,"require safe mode",0]
[null,"restrict network access",0]
[null,"restrict physical access",0]
[null,"restrict remote access",0]
[null,"use Role-Based Access Control",0]
[null,"dr.2",0]
[null,"detect unauthorized access",0]
[null,"require approved cryptographic algorithms",0]
[null,"require intrusion detection and prevention",0]
[null,"require unique keys",0]
[null,"restrict network access",0]
[null,"restrict physical access",0]
[null,"restrict remote access",0]
[null,"dr.3",0]
[null,"authenticate messages",0]
[null,"check message integrity",0]
[null,"detect abnormal output",0]
[null,"detect unauthorized access",0]
[null,"detect unusual patterns",0]
[null,"protect against replay",0]
[null,"require intrusion detection and prevention",0]
[null,"restrict network access",0]
[null,"restrict physical access",0]
[null,"validate data",0]
[null,"dr.4",0]
[null,"detect abnormal output",0]
[null,"generate alerts",0]
[null,"require two-person rule",0]
[null,"restrict network access",0]
[null,"restrict remote access",0]
[null,"use Role-Based Access Control",0]
[null,"dr.5",0]
[null,"authenticate users",0]
[null,"configure for least functionality",0]
[null,"maintain anti-virus",0]
[null,"maintain patches",0]
[null,"restrict physical access",0]
[null,"dr.6",0]
[null,"check software file integrity",0]
[null,"configure for least functionality",0]
[null,"require application whitelisting",0]
[null,"restrict network access",0]
[null,"restrict remote access",0]
[null,"use Role-Based Access Control",0]
[null,"dr.7",0]
[null,"authenticate users",0]
[null,"configure for least functionality",0]
[null,"cross check",0]
[null,"enforce least privilege",0]
[null,"maintain anti-virus",0]
[null,"maintain patches",0]
[null,"require message verification",0]
[null,"restrict remote access",0]
[null,"et.1",0]
[null,"authenticate users",0]
[null,"check software execution integrity",0]
[null,"protect from overcharge",0]
[null,"et.10",0]
[null,"authenticate devices",0]
[null,"require lockout",0]
[null,"require PIN",0]
[null,"et.11",0]
[null,"create audit logs",0]
[null,"encrypt communication paths",0]
[null,"encrypt data at rest",0]
[null,"enforce least privilege",0]
[null,"require authentication",0]
[null,"require lockout",0]
[null,"require PIN",0]
[null,"restrict file access",0]
[null,"restrict network access",0]
[null,"restrict remote access",0]
[null,"et.12",0]
[null,"choose own rate",0]
[null,"learn from others",0]
[null,"require resiliency",0]
[null,"et.13",0]
[null,"create audit logs",0]
[null,"enforce least privilege",0]
[null,"generate alarms",0]
[null,"restrict file access",0]
[null,"restrict network access",0]
[null,"restrict remote access",0]
[null,"et.14",0]
[null,"check software execution integrity",0]
[null,"create audit logs",0]
[null,"isolate functions",0]
[null,"require redundancy",0]
[null,"et.15",0]
[null,"authenticate users",0]
[null,"check software file integrity",0]
[null,"confirm action",0]
[null,"enforce hardware limits",0]
[null,"generate alarms",0]
[null,"require circuit breaker",0]
[null,"restrict file access",0]
[null,"et.16",0]
[null,"analyze anomalous events",0]
[null,"check software execution integrity",0]
[null,"detect abnormal output",0]
[null,"detect unusual patterns",0]
[null,"maintain anti-virus",0]
[null,"maintain patches",0]
[null,"require circuit breaker",0]
[null,"require unique keys",0]
[null,"restrict application access",0]
[null,"et.2",0]
[null,"authenticate users",0]
[null,"check software file integrity",0]
[null,"generate alarms",0]
[null,"require circuit breaker",0]
[null,"et.3",0]
[null,"analyze anomalous events",0]
[null,"check software execution integrity",0]
[null,"conduct code review",0]
[null,"create audit logs",0]
[null,"detect abnormal functionality",0]
[null,"detect unusual patterns",0]
[null,"implement configuration management",0]
[null,"isolate functions",0]
[null,"isolate networks",0]
[null,"maintain anti-virus",0]
[null,"verify personnel",0]
[null,"vulnerability scan before install",0]
[null,"et.4",0]
[null,"detect abnormal behavior",0]
[null,"encrypt data at rest",0]
[null,"require password rule enforcement",0]
[null,"restrict database access",0]
[null,"et.5",0]
[null,"check software file integrity",0]
[null,"restrict occurrence",0]
[null,"et.6",0]
[null,"authenticate devices",0]
[null,"prevent modification",0]
[null,"require physical connection",0]
[null,"et.7",0]
[null,"encrypt communication paths",0]
[null,"et.8",0]
[null,"authenticate devices",0]
[null,"detect unusual patterns",0]
[null,"et.9",0]
[null,"authenticate devices",0]
[null,"create audit logs",0]
[null,"detect unauthorized use",0]
[null,"isolate functions",0]
[null,"learn from others",0]
[null,"require lockout",0]
[null,"require PIN",0]
[null,"verify EV owner",0]
[null,"generic.1",0]
[null,"define procedures",0]
[null,"detect abnormal behavior",0]
[null,"require separation of duty",0]
[null,"use Role-Based Access Control",0]
[null,"generic.2",0]
[null,"define contingency plan",0]
[null,"define incident response plan",0]
[null,"enforce restrictive firewall rules",0]
[null,"generate alerts",0]
[null,"isolate networks",0]
[null,"require intrusion detection and prevention",0]
[null,"train personnel",0]
[null,"generic.3",0]
[null,"configure for least functionality",0]
[null,"define policy",0]
[null,"require periodic walk-downs",0]
[null,"test before installation",0]
[null,"train personnel",0]
[null,"verify settings",0]
[null,"vulnerability scan before install",0]
[null,"generic.4",0]
[null,"define policy",0]
[null,"define SLA",0]
[null,"detect abnormal behavior",0]
[null,"perform audit",0]
[null,"require approved cryptographic algorithms",0]
[null,"test before installation",0]
[null,"wampac.1",0]
[null,"configure for least functionality",0]
[null,"isolate functions",0]
[null,"require intrusion detection and prevention",0]
[null,"restrict access",0]
[null,"restrict network access",0]
[null,"restrict network service access",0]
[null,"test before installation",0]
[null,"verify correct operation",0]
[null,"wampac.10",0]
[null,"detect unauthorized configuration",0]
[null,"encrypt data at rest",0]
[null,"require multi-factor authentication",0]
[null,"restrict database access",0]
[null,"restrict network access",0]
[null,"wampac.11",0]
[null,"detect unauthorized access",0]
[null,"protect credentials",0]
[null,"require intrusion detection and prevention",0]
[null,"require multi-factor authentication",0]
[null,"require strong passwords",0]
[null,"restrict network access",0]
[null,"test before installation",0]
[null,"verify correct operation",0]
[null,"wampac.12",0]
[null,"design for trust",0]
[null,"require fail-over",0]
[null,"validate signal",0]
[null,"wampac.2",0]
[null,"authenticate users",0]
[null,"check message integrity",0]
[null,"detect unauthorized devices",0]
[null,"detect unusual patterns",0]
[null,"encrypt application layer",0]
[null,"encrypt link layer",0]
[null,"maintain patches",0]
[null,"restrict network access",0]
[null,"use Role-Based Access Control",0]
[null,"wampac.3",0]
[null,"detect unauthorized connections",0]
[null,"enforce restrictive firewall rules",0]
[null,"require approved cryptographic algorithms",0]
[null,"require multi-factor authentication",0]
[null,"require redundancy",0]
[null,"restrict network service access",0]
[null,"restrict remote access",0]
[null,"use Role-Based Access Control",0]
[null,"wampac.4",0]
[null,"authenticate devices",0]
[null,"authenticate users",0]
[null,"change default credentials",0]
[null,"detect unauthorized access",0]
[null,"encrypt communication paths",0]
[null,"encrypt data at rest",0]
[null,"protect credentials",0]
[null,"protect security configuration",0]
[null,"require approved key management",0]
[null,"require intrusion detection and prevention",0]
[null,"restrict network service access",0]
[null,"restrict remote access",0]
[null,"wampac.5",0]
[null,"detect unauthorized configuration",0]
[null,"require multi-factor authentication",0]
[null,"require reconfiguration in test mode",0]
[null,"require redundancy",0]
[null,"require two-person rule",0]
[null,"use Role-Based Access Control",0]
[null,"wampac.6",0]
[null,"detect unauthorized access",0]
[null,"require intrusion detection and prevention",0]
[null,"require redundancy",0]
[null,"restrict network access",0]
[null,"test before installation",0]
[null,"wampac.7",0]
[null,"check message integrity",0]
[null,"detect abnormal behavior",0]
[null,"detect unauthorized connections",0]
[null,"enforce restrictive firewall rules",0]
[null,"generate alerts",0]
[null,"require multi-factor authentication",0]
[null,"require read-only access",0]
[null,"restrict application access",0]
[null,"restrict remote access",0]
[null,"use Role-Based Access Control",0]
[null,"wampac.8",0]
[null,"check software execution integrity",0]
[null,"implement configuration management",0]
[null,"require redundancy",0]
[null,"restrict system access",0]
[null,"Grand Total",0]

{"sheet":"Likelihood","index":11,"n_rows":9,"n_cols":6,"rows_kept":9,"cut":false,"hidden":true,"merged":[]}
[]
[null,"The following scores are entered on the Detail tab for a failure scenario. The total appears on the Detail tab, and also on the Assess tab for the scenario in the Likelihood Score column."]
[]
[null,"Criterion","Definition","How to score"]
[null,"Skill required","This criterion rates the skill and specialized knowledge that it takes for a threat agent to cause the failure scenario to occur.","0: Deep domain/insider knowledge and ability to build custom attack tools, 1: Domain knowledge and cyber attack techniques, 3: Special insider knowledge needed, 9: Basic domain understanding and computer skills",null,"Return"]
[null,"Accessibility (physical)","This criterion scores the difficulty of obtaining physical access that is required to cause a failure scenario. Accessibility ranges from easy and obvious to obtain for anyone, to not feasible to obtain. ","0: Inaccessible, 1: Guarded, monitored, 3: Fence, standard locks, 9: Publicly accessible"]
[null,"Accessibility (logical, assume have physical access)","This criterion in similar to the previous one. Logical access refers to any non-physical form of access required to cause a failure scenario, such as network access or a particular utility employee’s phone number. The scoring of this criterion assumes that physical access has already been achieved. ","0: High expertise to gain access, 1: Not readily accessible, 3: Publicly accessible but not common knowledge, 9: Common knowledge or none needed"]
[null,"Attack vector (assume have physical and logical access)","This criterion evaluates how easy it is to obtain the technical means to carry out a failure scenario, once physical and logical access have been achieved. The exploit may be simple to carry out with little further effort given physical and logical access. There may be tools available for download from the Internet, or available instructions for the exploit or for similar exploits, or the exploit may be theoretical at this time. ","0: Theoretical, 1: Similar attack has been described, 3: Similar attack has occurred, 9: Straightforward, for example script or tools available, simple once access is obtained"]
[null,"Common vulnerability among others","This criterion acknowledges that a vulnerability shared among many organizations and in many contexts is more likely to be exploited. ","0: Isolated occurrence 1: More than one utility, 3: Half or more of power infrastructure, 9: Nearly all utilities "]

{"sheet":"Source Data","index":12,"n_rows":1778,"n_cols":6,"rows_kept":1778,"cut":false,"hidden":true,"merged":[]}
["ami.1","t",0.237788,"Authorized Employee Issues Unauthorized Mass Remote Disconnect"]
["ami.1","d",0.29106599999999999,"An employee within the utility having valid authorization, issues a \"remote disconnect\" command to a large number of meters. The employee may be bribed, disgruntled, or socially engineered."]
["ami.1","v",0.84581399999999995,"system permits potentially harmful command sequences"," such as a sufficiently large number of disconnects that may threaten system balance.","Business Logic Vulnerability (6.3.1.8)"]
["ami.1","i",0.15220800000000001,"An instantaneous mass disconnect/reconnect over multiple feeders, if permitted by the system, could cause temporary blackouts due to circuit breaker trips until power on the grid can be rebalanced"]
["ami.1","i",0.58553699999999997,"A small number of disconnects could subvert the Smart Grid deployment and make the utility lose consumer confidence"]
["ami.1","m",0.19347500000000001,"detect anomalous commands"," (anomalous disconnect and reconnect commands) not stemming from the normal Customer Information System (CIS) system","detect"]
["ami.1","m",0.81062299999999998,"use Role-Based Access Control"," to limit who has access to sensitive functions","control access"]
["ami.1","m",0.17353099999999999,"validate data"," to ensure reasonableness of changes","verify"]
["ami.1","m",0.484983,"generate alarms"," for changes to sensitive data","alert"]
["ami.1","m",0.151863,"create audit logs"," to track who has made system configuration, software, or database additions or modifications","audit"]
["ami.1","m",0.36695699999999998,"require two-person rule"," for single transactions that initiate mass disconnects (e.g., substation feeder, all meters listening to a given aggregation point, geographic region, etc.)","verify"]
["ami.1","m",0.49173600000000001,"limit events"," to no more than (n) number of disconnects (using any number of transactions) within a specified time period","enforce limits"]
["ami.1","m",0.91009399999999996,"require two-person rule"," for greater than (n) number of disconnects within a specified time period","verify"]
["ami.1","m",0.26525700000000002,"cross check"," with the billing system to ensure the customer has the appropriate status before the disconnect command is issued","verify"]
["ami.2","t",0.89318799999999998,"Authorized Employee Manipulates MDMS Data to Over/Under Charge"]
["ami.2","d",0.22035099999999999,"The Meter Data Management System (MDMS) is accessed by an employee (coerced or disgruntled) who selects a few accounts to overcharge or undercharge. This could be done by altering usage or pricing data. It may also be accomplished using malware. When the bills are paid, either the utility receives more or less revenue. An audit uncovering this activity could cause embarrassment or financial burden to the utility."]
["ami.2","v",0.63179799999999997,"system permits unauthorized changes"," to Meter Data Management System (MDMS) user billing data,","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.2","v",0.57107699999999995,"system assumes data inputs and resulting calculations are accurate"," for customer energy billing calculations in the Meter Data Management System (MDMS),","Business Logic Vulnerability (6.3.1.8)"]
["ami.2","v",0.10268099999999999,"system permits installation of malware"," on the MDMS","Inadequate Malware Protection (6.4.2.3)"]
["ami.2","i",0.33215800000000001,"Utility may be liable for mischarging customers"]
["ami.2","i",0.10445500000000001,"Utilities will have to correct billing errors"]
["ami.2","m",0.50293100000000002,"detect unusual patterns"," of energy usage (all utilities have some type of revenue protection scheme, but these may not be adequate)","detect"]
["ami.2","m",0.56739399999999995,"use Role-Based Access Control"," to limit access to sensitive functions","control access"]
["ami.2","m",0.85416499999999995,"validate data"," to ensure reasonableness for changes","verify"]
["ami.2","m",4.01409E-2,"generate alarms"," on changes to sensitive data","alert"]
["ami.2","m",0.10802200000000001,"create audit logs"," of who has made software or database modifications","audit"]
["ami.2","m",0.63939599999999996,"check software execution integrity"," since software may be compromised when loaded for execution,","check integrity"]
["ami.2","m",1.3110999999999999E-2,"detect abnormal output"," (unexpected data or destinations) in billing and AMI system network traffic","detect"]
["ami.2","m",0.72018400000000005,"perform financial audit"," checking for unexpected results","audit"]
["ami.2","m",0.101814,"implement configuration management"," ","track"]
["ami.2","m",0.48294500000000001,"restrict physical access"," ","control access"]
["ami.2","m",0.254355,"train personnel"," regarding need to lock unattended workstations","train"]
["ami.2","m",0.67669699999999999,"detect physical intrusion"," with the use of video surveillance","detect"]
["ami.2","m",0.89678199999999997,"lock workstations"," when workstations are unattended","secure operations"]
["ami.2","m",0.75989600000000002,"harden platforms"," ","secure operations"]
["ami.2","m",0.47811999999999999,"check software file integrity"," (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation","check integrity"]
["ami.3","t",0.72029200000000004,"Invalid Access Used to Install Malware Enabling Remote Internet Control"]
["ami.3","d",0.90762299999999996,"A threat agent acquires physical and logical access to the utility enterprise network. The threat agent installs remote accessible malware allowing remote command and control of the AMI system accessible from any available Internet connection. Physical access may be achieved via poor locks, unlocked doors, stolen credentials, or social engineering."]
["ami.3","v",0.92861099999999996,"system permits installation of malware"," on the utility enterprise network or AMI implementation,","Inadequate Malware Protection (6.4.2.3)"]
["ami.3","v",0.37766300000000003,"Internet connection may be misused by adversary"," specifically the connection from the Internet to the utility enterprise network or AMI implementation can serve as a command channel for malware on the AMI system,","Inadequate Network Segregation (6.5.1.2)"]
["ami.3","v",0.899756,"physical access may be obtained by unauthorized individuals"," to the utility enterprise network or AMI implementation.","Physical Access to the Device (6.5.1.6)"]
["ami.3","v",0.77888000000000002,"system relies on credentials that are easy to obtain for access"," to the utility enterprise network or AMI implementation.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.3","i",0.32425500000000002,"Potential remote command and control capability by a threat agent"]
["ami.3","i",0.19423099999999999,"Depending on the system's architecture and permissions, performance of meter disconnects"]
["ami.3","m",0.99555300000000002,"use Role-Based Access Control"," to limit who has access to the AMI system and the enterprise network","control access"]
["ami.3","m",0.16129599999999999,"create audit logs"," of who has made software additions or modifications","audit"]
["ami.3","m",0.70803400000000005,"generate alerts"," when software additions or modifications have been made","alert"]
["ami.3","m",0.50151900000000005,"check software execution integrity"," since software may be compromised when loaded for execution,","check integrity"]
["ami.3","m",0.93630100000000005,"authenticate users"," so that physical access to the system(s) does not automatically grant logical access","authenticate"]
["ami.3","m",0.71632300000000004,"require multi-factor authentication"," to gain access to sensitive systems","authenticate"]
["ami.3","m",0.10519000000000001,"isolate networks"," serving critical functionality such as control systems from the Internet","isolate"]
["ami.3","m",0.209205,"restrict Internet access"," to deny controls systems networks access to or from the Internet","control access"]
["ami.3","m",0.55939700000000003,"require video surveillance"," to document who enters the server room","secure operations"]
["ami.3","m",0.70543199999999995,"restrict configuration access"," to limit who has access and can make configuration changes","control access"]
["ami.3","m",0.139322,"check software file integrity"," (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation","check integrity"]
["ami.3","m",2.6977299999999999E-2,"restrict physical access"," to the utility enterprise network or AMI implementation","control access"]
["ami.3","m",0.13674800000000001,"protect credentials"," for the enterprise network and/or AMI system","secure design and implementation"]
["ami.3","m",0.28537400000000002,"require strong passwords"," for the enterprise network and/or AMI system","secure operations"]
["ami.4","t",7.8233700000000003E-2,"Overused Key Captured on Meter Bus Enables Usage Data Manipulation"]
["ami.4","d",0.51053000000000004,"Meters are deployed with the same symmetric cryptographic key on all meters in the AMI implementation. A threat agent is able to acquire the secret encryption key after monitoring communications on the internal bus of one of these meters. The secret key is passed in the clear on the bus. Usage data is then manipulated to overstate/understate energy usage or to under/overstate energy production from Distributed Energy Resources (DERs)."]
["ami.4","v",0.19619700000000001,"secret key is stored or transmitted in the clear"," while in transit on the internal bus of a meter,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.4","v",0.27421099999999998,"encryption keys are shared"," by multiple meters in an AMI implementation.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.4","i",0.638602,"Continuous loss of revenue due to understated energy usage or overstated energy production"]
["ami.4","i",0.448208,"The utility may be liable for mischarging customers and may have to correct billing errors. If over-payments were received from customers, restitution would have to be paid to those customers"]
["ami.4","i",3.9871799999999999E-2,"Loss of customer trust in the utility billing (negative publicity)"]
["ami.4","m",0.46725100000000003,"require approved cryptographic algorithms"," to protect the confidentiality of communications on the internal meter bus and the cryptographic keys","secure design and implementation"]
["ami.4","m",7.7756500000000006E-2,"require approved key management"," to protect the cryptographic keys","secure design and implementation"]
["ami.4","m",3.81004E-2,"require unique keys"," (symmetric keys) for each deployed meter","isolate"]
["ami.4","m",0.16004399999999999,"detect unusual patterns"," of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be adequate)","detect"]
["ami.4","m",0.39783200000000002,"perform financial audit"," to check for unexpected results","audit"]
["ami.5","t",0.68889800000000001,"Mass Meter Rekeying Required when Common Key Compromised"]
["ami.5","d",0.53471199999999997,"Meters are deployed with the same symmetric cryptographic key on all meters in the AMI implementation. Key compromise occurs in the field due to the ability to extract the secret key when in physical possession of a meter, or during distribution of keys to meters. In this failure scenario, no known financial or energy usage information is actually compromised due to the compromised key, but all the meters still need to be rekeyed to mitigate the potential for future malicious activities"]
["ami.5","v",0.68691999999999998,"encryption keys are shared"," by multiple meters in an AMI implementation.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.5","v",0.272457,"secret key is stored or transmitted in the clear"," on the meter.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.5","v",0.46593299999999999,"secret key is stored or transmitted in the clear"," during transit to the meter during key distribution.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.5","i",0.276555,"Negative publicity"]
["ami.5","i",0.45008599999999999,"Cost of rekeying meters"]
["ami.5","m",0.93506900000000004,"require unique keys"," (symmetric key) for each meter","isolate"]
["ami.5","m",8.6931800000000004E-2,"require approved key management"," ","secure design and implementation"]
["ami.5","m",0.45388899999999999,"require secure key storage"," on meters","secure design and implementation"]
["ami.6","t",0.94562500000000005,"One Compromised Meter in a Mesh Wireless Network Blocks Others"]
["ami.6","d",0.85571900000000001,"An unauthorized entity installs rogue firmware or software on a single smart meter. This might be via direct access to the meter or via interception/modification of a legitimate meter update. The compromised meter software could report an understatement of usage, or cause sporadic failure of the self-test process to impede discovery. If meters in the system implement a mesh wireless network, the compromised meter might misroute communications from other meters, blocking the path back to the AMI headend for those meters and making those meters effectively \"unresponsive.\""]
["ami.6","v",0.120976,"system relies on credentials that are easy to obtain for access"," for privileges to install firmware or software on a smart meter,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.6","v",1.41639E-2,"system permits unauthorized installation of software or firmware"," on a smart meter.","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.6","i",0.234515,"Continuous loss of revenue for utility if modified software/firmware understates usage (impact scales as more meters are affected)"]
["ami.6","i",0.866313,"Truck rolls needed to investigate compromised meter failure or nonresponsive meters due to misrouting"]
["ami.6","m",0.43739,"detect unusual patterns"," of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient)","detect"]
["ami.6","m",0.76954800000000001,"require multi-factor authentication"," for firmware or software updates","authenticate"]
["ami.6","m",0.87400299999999997,"check software file integrity"," (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during operation","check integrity"]
["ami.6","m",0.33770099999999997,"use Role-Based Access Control"," to limit privileges to install software","control access"]
["ami.7","t",0.37693399999999999,"Deployed Meters Containing Undesirable Functionality Need Repair"]
["ami.7","d",0.94432799999999995,"Undesirable capabilities and features are discovered in smart meters deployed by a utility. This discovery may happen as the result of focused security research or because the utility discovers it has deployed a product containing the same compromised chipset used in a common consumer product.For example, an additional communications channel could be available on the meter, which, if activated, permits offloading of personally identifiable information (PII) or interferes with the functioning of the devices. The compromised smart meters will need to be upgraded or replaced."]
["ami.7","v",0.79849300000000001,"physical access may be obtained by unauthorized individuals"," via the smart meter interfaces which can permit modifying device functionality,","Physical Access to the Device (6.5.1.6)"]
["ami.7","v",0.83863399999999999,"presence of features or functions that may be misused by users"," in a manner not intended by the designers of the smart meter.","API Abuse (6.3.2.1)"]
["ami.7","i",0.94665600000000005,"Cost to upgrade or potentially replace meters"]
["ami.7","i",0.58605200000000002,"If violations of consumer privacy are proven, the utility may be subject to legal actions"]
["ami.7","i",0.599163,"If meters go \"dead\" or misstate usage, the utility would lose revenue from impacted customers until the meters are fixed or replaced"]
["ami.7","m",0.31934699999999999,"conduct penetration testing"," of devices which includes security analysis of all device interfaces, regardless of their respective impact on meter functionality (such as labeling and internal Joint Test Action Group (JTAG) interfaces)","test"]
["ami.7","m",0.42116199999999998,"require secure remote firmware upgrade"," on the meter","secure operations"]
["ami.7","m",0.90410699999999999,"require secure boot loader"," ","secure operations"]
["ami.7","m",0.15846199999999999,"generate alarms"," for unusual or unexpected meter operations","alert"]
["ami.7","m",0.83515899999999998,"detect abnormal functionality"," to identify network ports and services in use and generate alerts","detect"]
["ami.7","m",0.73194199999999998,"cross check"," network ports and services against intended applications","verify"]
["ami.7","m",0.49183700000000002,"generate alerts"," for unapproved traffic","alert"]
["ami.8","t",0.21212900000000001,"False Meter Alarms Overwhelm AMI and Mask Real Alarms"]
["ami.8","d",0.119752,"Either due to spoofed tamper alarms or design/implementation problems with the legitimate alarm capability, false meter alarms overwhelm the AMI system and/or cause real meter alarms to be disabled or ignored."]
["ami.8","v",4.8363099999999999E-2,"a copy of a prior alarm is difficult or infeasible to distinguish from a new legitimate alarm"," along the path used for receipt of tamper alarms,","Use of Insecure Protocols (6.3.1.21)"]
["ami.8","v",0.42602600000000002,"alarm management system does not support required processing for legitimate alarm conditions"," in the AMI system,","General Logic Error (6.3.1.7)"]
["ami.8","v",0.32578200000000002,"alarm processing capability is overwhelmed by unnecessary alarms"," in the alarm management component of the AMI system","General Logic Error (6.3.1.7)"]
["ami.8","v",0.10466200000000001,"inadequate criteria for determining which alarms deserve priority"," in the alarm management component of the AMI system","Business Logic Vulnerability (6.3.1.8)"]
["ami.8","i",0.42891600000000002,"Disabling or ignoring of alarms leads to loss of metering tamper awareness and increases the impact of those failure scenarios in which meter tampering occurs"]
["ami.8","m",0.62314800000000004,"prioritize alarms"," by type, location, and other criteria so that high-profile alarms can be distinguished and highlighted","alert"]
["ami.8","m",0.61870000000000003,"authenticate messages"," for receipt of tamper alarms","authenticate"]
["ami.8","m",0.77999700000000005,"encrypt communication paths"," for receipt of tamper alarms","encrypt"]
["ami.8","m",0.48803099999999999,"protect against replay"," involving receipt of tamper alarms","check integrity"]
["ami.8","m",0.98955000000000004,"cross check"," that tamper alarm is for a real meter","verify"]
["ami.8","m",0.92585099999999998,"perform hardware acceptance testing"," including tamper alarms","test"]
["ami.8","m",0.64217400000000002,"cross check"," outage alerts with existing technology such as the customer service systems","verify"]
["ami.8","m",0.83242499999999997,"analyze anomalous events"," that trigger alarms in order to aggregate alarms for reporting","analyze"]
["ami.9","t",0.74736499999999995,"Invalid Disconnect Messages to Meters Impact Customers and Utility"]
["ami.9","d",0.956569,"A threat agent obtains legitimate credentials to the AMI system via social engineering. The threat agent may already have access to the network on which this system resides or may succeed in reaching the network from another network. The threat agent issues a disconnect command for one or more target meters. Alternatively, a disconnect may be placed in a schedule and then occur automatically at a later time."]
["ami.9","v",0.51596600000000004,"system relies on credentials that are easy to obtain for access"," (via social engineering) in the AMI system,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.9","v",0.22139800000000001,"workforce may be unaware of recommended precautions"," to prevent social engineering attacks,","Insufficiently Trained Personnel (6.2.1.1)"]
["ami.9","v",0.29963200000000001,"system relies on credentials that are easy to obtain for access"," for a meter disconnect command (single-factor authentication),","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.9","v",0.81016200000000005,"network interconnections provide users and hardware/software entities with access unnecessary for their roles"," from remote networks to network containing the AMI system","Inadequate Network Segregation (6.5.1.2)"]
["ami.9","i",6.3590299999999999E-3,"Customers experience power outages"]
["ami.9","i",0.28056999999999999,"Utility may need to roll a truck to identify the problem"]
["ami.9","i",0.91917199999999999,"Utility loses revenue (scales based on number of meters affected)"]
["ami.9","i",0.36737999999999998,"Threat agent may use power outage to mask criminal activity at customer sites"]
["ami.9","m",0.407252,"detect unusual patterns"," of disconnects on smart meters","detect"]
["ami.9","m",0.87450300000000003,"re-evaluate scheduled disconnects"," ","analyze"]
["ami.9","m",0.95226,"define policy"," for mass meter disconnect","plan"]
["ami.9","m",0.99036000000000002,"define procedures"," for mass meter disconnect","plan"]
["ami.9","m",0.15040400000000001,"require multi-factor authentication"," for mass meter disconnect","authenticate"]
["ami.9","m",0.54823599999999995,"train personnel"," regarding social engineering techniques","train"]
["ami.9","m",0.23713400000000001,"restrict Internet access"," using firewall rules","control access"]
["ami.9","m",0.77184600000000003,"require VPNs"," for internal connections from the Internet","encrypt"]
["ami.9","m",0.45876600000000001,"detect unauthorized access"," in network traffic between Internet and AMI headend","detect"]
["ami.9","m",0.73122299999999996,"restrict network access"," between Internet and AMI headend","control access"]
["ami.9","m",0.197155,"restrict Internet access"," for the AMI headend system","control access"]
["ami.9","m",0.47371099999999999,"isolate networks"," for the AMI headend system from the Internet","isolate"]
["ami.9","m",0.92379699999999998,"authenticate devices"," connecting to the AMI headend system","authenticate"]
["ami.9","m",0.85886600000000002,"require approved cryptographic algorithms"," for the AMI headend system","secure design and implementation"]
["ami.9","m",0.94579800000000003,"enforce least privilege"," to the minimum number of systems and/or individuals requiring MDMS access","control access"]
["ami.10","t",0.39968599999999999,"Unauthorized Pricing Information Impacts Utility Revenue"]
["ami.10","d",0.34531200000000001,"The threat agent sends out unauthorized pricing information, such as Time-of-Use (TOU) pricing. This may result in either a loss or increase in utility revenue until the invalid price is recognized. At that point law suits may occur."]
["ami.10","v",0.20103099999999999,"network interconnections provide users and hardware/software entities with access unnecessary for their roles"," at the enterprise boundary","Inadequate Network Segregation (6.5.1.2)"]
["ami.10","v",0.32200800000000002,"system relies on credentials that are easy to obtain for access"," to pricing change functions,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.10","v",0.336171,"system permits unauthorized changes"," to accounts required to make TOU pricing changes,","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.10","v",0.57068600000000003,"configuration changes are not verified for correctness"," in pricing data (e.g., TOU pricing).","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.10","i",0.437,"Potential for brownout or blackout depending upon the level of response from TOU participants"]
["ami.10","i",0.87439,"Utility will lose or gain revenue due to invalid prices"]
["ami.10","i",0.64393800000000001,"Lawsuits might be required to resolve the discrepancies"]
["ami.10","m",0.51794099999999998,"validate data"," to detect a person overriding the calculated prices or entering inconsistent prices in the price calculation system","verify"]
["ami.10","m",0.89487399999999995,"create audit logs"," when a person overrides the calculated prices or enters inconsistent prices in the price calculation system","audit"]
["ami.10","m",0.839202,"generate alarms"," when a person overrides the calculated prices or enters inconsistent prices in the price calculation system","alert"]
["ami.10","m",0.63769500000000001,"restrict Internet access"," using firewall rules","control access"]
["ami.10","m",0.476329,"require VPNs"," for internal connections from the Internet","encrypt"]
["ami.10","m",0.422985,"detect unauthorized access"," between the Internet and AMI","detect"]
["ami.10","m",9.0364199999999999E-3,"restrict network access"," between the Internet and AMI","control access"]
["ami.10","m",0.60819900000000005,"require multi-factor authentication"," for price changes","authenticate"]
["ami.10","m",0.92754700000000001,"enforce least privilege"," to minimize personnel with access to perform price changes","control access"]
["ami.10","m",0.34870800000000002,"require two-person rule"," for execution of price changes","verify"]
["ami.10","m",0.81632400000000005,"protect credentials"," permitting price changes, in both user and administrative processes","secure design and implementation"]
["ami.11","t",0.25281500000000001,"Spoofed Meter \"Last Gasp\" Messages Cause Fake Outage"]
["ami.11","d",0.411277,"A threat agent is able to send many spoofed meter \"last gasp\" messages to the AMI MDMS, indicating a power outage. As more spoofed messages are sent, the grid operator tries to reconfigure the grid to compensate, causing utilities to roll trucks to determine why meters continue to be unresponsive. (Note: This is a special case of failure scenarios AMI.14 and DR.3.)"]
["ami.11","v",0.24643599999999999,"system permits messages to be modified by unauthorized individuals"," in the path used to receive last gasp messages","Use of Insecure Protocols (6.3.1.21)"]
["ami.11","v",0.97837799999999997,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in the path used to receive last gasp messages","Use of Insecure Protocols (6.3.1.21)"]
["ami.11","v",0.80209699999999995,"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"," in the path used to receive last gasp messages","Use of Insecure Protocols (6.3.1.21)"]
["ami.11","i",0.85045999999999999,"Cost to roll trucks to investigate fake outages"]
["ami.11","i",0.27648600000000001,"Loss of revenue and creation of a customer service situation"]
["ami.11","i",0.60226800000000003,"Loss of confidence by customers due to visible attempts to repair non-existent problems. This may lead to reduced customer acceptance of advanced programs such as DR"]
["ami.11","i",0.70692999999999995,"Loss of true system state visibility"]
["ami.11","m",0.13584599999999999,"define procedures"," to confirm an outage when receiving an AMI last gasp outage message","plan"]
["ami.11","m",0.75899399999999995,"continue normal operations"," rather than responding to AMI last gasp outage messages","user decision"]
["ami.11","m",0.37769399999999997,"verify load"," at substation and line level to verify reduced demand associated with meters reporting last gasp messages","verify"]
["ami.11","m",0.157691,"authenticate messages"," that report last gasp messages from a meter","authenticate"]
["ami.11","m",0.64572200000000002,"encrypt communication paths"," for last gasp messages","encrypt"]
["ami.11","m",0.63527299999999998,"confirm action"," on receipt of last gasp messages by checking that a last gasp message is from a real meter","verify"]
["ami.11","m",0.56112399999999996,"confirm action"," after receiving last gasp message from a meter","verify"]
["ami.11","m",0.58870500000000003,"protect against replay"," of last gasp messages","check integrity"]
["ami.12","t",0.20329800000000001,"Improper Firewall Configuration Exposes Customer Data"]
["ami.12","d",0.95066300000000004,"A firewall rule is intentionally or unintentionally created allowing direct access from another network. Taking advantage of this rule, a threat agent subsequently gains access to the database that receives data from the customer accounts database. This enables the threat agent to steal customer personally identifiable information, including electricity usage data."]
["ami.12","v",0.90723200000000004,"system permits unauthorized changes"," to the firewall","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.12","v",0.42319800000000002,"system relies on credentials that are easy to obtain for access"," to the database","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.12","v",0.64459599999999995,"default configuration allows access that is unnecessary after the system is operational"," This allows unnecessary access to the database","Unnecessary System Access (6.2.2.6)"]
["ami.12","v",0.94422799999999996,"users lack visibility of threat activity"," in the AMI system","Inadequate Anomaly Tracking (6.4.4.1)"]
["ami.12","i",0.75439000000000001,"Potential for breach of customer privacy and loss of customer confidence"]
["ami.12","m",0.76074900000000001,"detect unauthorized access"," between Internet and AMI consumer information","detect"]
["ami.12","m",0.96049099999999998,"implement configuration management"," to reduce the likelihood that a threat agent can compromise an entire system","track"]
["ami.12","m",0.32787100000000002,"conduct penetration testing"," for changes to Internet-facing resources or high value targets","test"]
["ami.12","m",0.609626,"enforce least privilege"," to limit database access to authorized applications and/or locally authenticated users","control access"]
["ami.12","m",0.56188499999999997,"protect credentials"," for access to the customer information database","secure design and implementation"]
["ami.12","m",0.55976199999999998,"create audit logs"," of firewall rule changes and customer database accesses","audit"]
["ami.12","m",0.23144999999999999,"detect unusual patterns"," of database access","detect"]
["ami.12","m",0.528196,"detect unauthorized configuration changes"," to the firewall","detect"]
["ami.12","m",0.49569299999999999,"require strong passwords"," for access to the customer information database","secure operations"]
["ami.12","m",0.16761499999999999,"require multi-factor authentication"," for access to the customer information database","authenticate"]
["ami.13","t",0.55224499999999999,"Authorized User uses Unattended Console to Disconnect Customer"]
["ami.13","d",0.70265,"An authorized user gains physical access to the operations room and subsequently an unattended console. The authorized user then disconnects service to a customer's house."]
["ami.13","v",0.250886,"system permits bypass of access control mechanisms"," when the user has physical access to the console","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["ami.13","v",0.48802099999999998,"physical access may be obtained by unauthorized individuals"," at an unattended user console","Physical Access to the Device (6.5.1.6)"]
["ami.13","v",0.25986599999999999,"workforce may be unaware of recommended precautions"," when leaving consoles unattended and unlocked","Insufficiently Trained Personnel (6.2.1.1)"]
["ami.13","i",0.71863200000000005,"Unexpected power outage for a single customer"]
["ami.13","m",0.449855,"restrict physical access"," to operations room with sensitive consoles","control access"]
["ami.13","m",0.64700999999999997,"train personnel"," regarding need to lock unattended consoles","train"]
["ami.13","m",0.12072099999999999,"require video surveillance"," for operations rooms containing sensitive user consoles","secure operations"]
["ami.13","m",4.4517099999999997E-2,"lock workstations"," when unattended","secure operations"]
["ami.13","m",0.90338300000000005,"confirm action"," by requiring approval for some actions in the user interface design","verify"]
["ami.13","m",0.84918000000000005,"lock workstations"," for inactivity on non-safety-critical consoles","secure operations"]
["ami.13","m",0.248867,"cross check"," physical access identification with system identification to detect failure scenarios such as a threat agent using Person A's badge to access a physical console and subsequently logging into a system using Person B's credentials","verify"]
["ami.13","m",0.59417900000000001,"require second-level authentication"," to the application interface to initiate customer disconnect","authenticate"]
["ami.14","t",0.79520999999999997,"Breach of Cellular Provider's Network Exposes AMI Access"]
["ami.14","d",0.117217,"A cellular phone provider's network is breached, allowing access to a private network leased to a utility for AMI command and control. The AMI implementation is vulnerable to replay attacks and DR messages are replayed to a group of customers. (Note: This is a special case of failure scenario DR.3.)"]
["ami.14","v",0.45338899999999999,"publicly accessible and/or third party controlled links used"," (e.g., commercial mobile, utility leased)","Inadequate Network Segregation (6.5.1.2)"]
["ami.14","v",2.4075300000000001E-2,"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"," ","Cryptographic Vulnerability (6.3.1.4)"]
["ami.14","v",0.46107500000000001,"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"," in the AMI system","Use of Insecure Protocols (6.3.1.21)"]
["ami.14","i",0.33546500000000001,"Costs of customer service for complaints and investigations"]
["ami.14","i",0.97940300000000002,"Loss of revenue (if DR messages decrease power draw) or temporary loss of power to more critical uses (if messages increase power draw)"]
["ami.14","i",0.49734400000000001,"Cost to re-secure the network"]
["ami.14","m",0.39221800000000001,"isolate networks"," using different encryption keys to prevent a breach in one network from affecting another network","isolate"]
["ami.14","m",0.23141999999999999,"require approved cryptographic algorithms"," at the link layer to prevent a threat agent from being able to affect the confidentiality and integrity on the AMI network if a breach should occur","secure design and implementation"]
["ami.14","m",0.86911499999999997,"protect against replay"," using time-stamping or other methods","check integrity"]
["ami.15","t",0.34544399999999997,"Inadequate Security for Backup AMI Enables Malicious Activity"]
["ami.15","d",0.768428,"Inadequate security implementation in the AMI monitoring and control backup system allows a threat agent to execute an attack on the AMI implementation during a business continuity or disaster recovery scenario. Access to these backup systems allows a threat agent to perform malicious activity such as mass disconnects of meters, stopping or modifying DR messages, or creating large numbers of problem meter reports."]
["ami.15","v",0.77746499999999996,"weaker security architecture at backup sites"," ","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["ami.15","v",0.38566400000000001,"inadequate continuity and recovery security architecture"," used in business continuity and disaster recovery planning and procedures.","Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"]
["ami.15","i",0.31321100000000002,"Power and revenue loss for disconnected customers"]
["ami.15","i",0.66191900000000004,"Outages due to inadequate power available at peak times"]
["ami.15","i",0.91473400000000005,"Cost for rolling trucks to investigate problem meters"]
["ami.15","i",0.326011,"Additional operational strain on the utility during a business continuity/disaster recovery situation"]
["ami.15","m",0.57244700000000004,"restrict physical access"," for backup sites comparable to normal operational sites","control access"]
["ami.15","m",0.55082500000000001,"require video surveillance"," for backup sites comparable to normal operational sites","secure operations"]
["ami.15","m",2.1039599999999999E-2,"detect physical intrusion"," for backup sites comparable to normal operational sites","detect"]
["ami.15","m",0.70338400000000001,"emphasize security management"," in business continuity and disaster recovery planning, procedures and execution","plan"]
["ami.15","m",0.50548099999999996,"define policy"," to include risk and vulnerability assessments in business continuity and disaster recovery testing","plan"]
["ami.16","t",0.35594100000000001,"Compromised Headend Allows Impersonation of CA"]
["ami.16","d",0.63242699999999996,"The private key for the certificate authority (CA) used to set up a Public Key Infrastructure (PKI) at the headend is compromised, which allows a threat agent to impersonate the CA."]
["ami.16","v",0.23469499999999999,"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"," for protection of the private CA key,","Cryptographic Vulnerability (6.3.1.4)"]
["ami.16","v",0.94162500000000005,"security design does not consider the system lifecycle"," in the headend.","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["ami.16","i",7.7471600000000002E-2,"Costs incurred for rekeying"]
["ami.16","i",0.83646600000000004,"Potential for power overload if the threat agent is able to introduce malicious nodes in the metering system"]
["ami.16","i",0.21415999999999999,"Potential to perform security-relevant tasks such as firmware upgrades, configuration changes, etc. that are initiated from the CA"]
["ami.16","m",0.37185099999999999,"require approved key management"," including secure generation, distribution, storage, and update of cryptographic keys","secure design and implementation"]
["ami.17","t",1.7573499999999999E-2,"Malicious Creation of Duplicate APN Prevents Valid AMI Messages"]
["ami.17","d",0.65284600000000004,"A malicious individual creates a duplicate Access Point Name (APN) for the Group Special Mobile (GSM)-based cellular communications on an AMI network. The meters that are within the range then associate with the fake APN and do not receive messages from the AMI network."]
["ami.17","v",0.21396999999999999,"system permits unauthorized changes"," in the routing mechanisms of the cellular network,","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.17","v",0.41726799999999997,"system relies on credentials that are easy to obtain for access"," for reconfiguration of the AMI network.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.17","i",0.36793100000000001,"Denial of Service for cellular-based functions within the AMI network"]
["ami.17","i",0.27516400000000002,"Cost to roll a truck to investigate unresponsive meter and to read meter data"]
["ami.17","i",0.69836200000000004,"Inability for meters to receive DR messages could cause customers to either pay more for power or experience a loss of power"]
["ami.17","i",0.34295900000000001,"If exploited on a large scale, potential outages could occur due to a utility's inability to implement DR"]
["ami.17","m",0.28718700000000003,"verify mode"," of GSM-based communications in the AMI to operate only in 3G mode","verify"]
["ami.17","m",4.1576500000000002E-2,"require fail-over"," for cellular-based functions to an alternative non-wireless technology such as power line carrier (PLC)","ensure availability"]
["ami.17","m",0.86269300000000004,"protect credentials"," for modifying the configuration of the AMI network,","secure design and implementation"]
["ami.17","m",0.29485299999999998,"require strong passwords"," for modifying the configuration of the AMI network,","secure operations"]
["ami.17","m",0.89282700000000004,"require multi-factor authentication"," for modifying the configuration of the AMI network,","authenticate"]
["ami.17","m",0.20893100000000001,"detect unusual patterns"," of traffic on the AMI cellular network.","detect"]
["ami.18","t",0.80232499999999995,"Unauthorized Devices Create DoS and Prevent Valid DR Messages"]
["ami.18","d",0.84364399999999995,"Unauthorized devices gain access to a home area network (HAN). The devices can then be used to create a Denial-of-Service (DoS) condition so that DR messages cannot reach end customer devices. (Note: this is a special case of DR.1.)"]
["ami.18","v",0.80413500000000004,"system relies on credentials that are easy to obtain for access"," to the HAN,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.18","v",0.13200500000000001,"network interfaces permit unnecessary traffic flows"," instead of only flows to the HAN router/gateway/trust center.","Inadequate Network Segregation (6.5.1.2)"]
["ami.18","i",0.86712800000000001,"Inability to receive DR messages may cause affected customers to either pay more for power or to suffer a loss of usage of a device requiring power"]
["ami.18","i",0.47675400000000001,"Utility will have associated customer service and troubleshooting costs"]
["ami.18","i",3.8638899999999997E-2,"If exploited on a large scale, potential outages could occur due to utility inability to implement DR"]
["ami.18","m",0.59088399999999996,"restrict device access"," to the HAN network","control access"]
["ami.18","m",0.29353400000000002,"authenticate devices"," accessing the HAN network","authenticate"]
["ami.19","t",0.54442000000000002,"Out of Sync Time-stamping Causes Discard of Legitimate Commands"]
["ami.19","d",3.2440999999999998E-2,"Time-stamping, sometimes used to detect replay attacks, gets out of sync between a meter and its respective AMI headend system, causing the meter to ignore legitimate commands it interprets as a potential replay attack. This causes loss of advanced metering functionality such as two-way communications, remote connect/disconnect, and metrology."]
["ami.19","v",0.29230699999999998,"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"," for meter commands from the AMI headend,","Use of Insecure Protocols (6.3.1.21)"]
["ami.19","v",1.0939000000000001E-2,"system permits unauthorized changes"," to the time synchronization between meters and the AMI headend,","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.19","v",0.46079399999999998,"system permits unauthorized changes"," to timestamps on meter commands from the AMI headend.","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.19","i",0.107803,"Higher cost, or no cost savings, to read meter data if remote reading fails"]
["ami.19","i",0.228524,"If exploited on a large scale, outages could occur due to utility inability to implement DR"]
["ami.19","i",0.27304099999999998,"Cost of associated customer service, late invoicing, and troubleshooting efforts"]
["ami.19","m",0.176424,"require reliable external time source"," for the meter's time-stamping functionality","verify"]
["ami.19","m",2.5604499999999999E-2,"cross check"," periodically, the results of the time synchronization protocol","verify"]
["ami.19","m",0.27447100000000002,"check software execution integrity"," of the time synchronization protocol, since software may be compromised when loaded for execution,","check integrity"]
["ami.19","m",0.86865000000000003,"verify time synchronization"," in the time synchronization protocol","verify"]
["ami.19","m",0.21009800000000001,"protect against replay"," using session tokens","check integrity"]
["ami.20","t",0.66386000000000001,"Independent Energy Generator Causes Lower TOU Pricing"]
["ami.20","d",0.78107700000000002,"An independent energy generator bribes an AMI operator to lower time-of-use (TOU) pricing to increase demand."]
["ami.20","v",0.23446600000000001,"system permits unauthorized changes"," to the TOU pricing implementation.","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.20","i",0.25854199999999999,"Utility may lose revenue due to lower prices charged customers at a large volume"]
["ami.20","m",0.71961699999999995,"create audit logs"," to record TOU pricing changes","audit"]
["ami.20","m",5.5081400000000003E-2,"require two-person rule"," for major changes","verify"]
["ami.20","m",3.4484300000000002E-2,"implement configuration management"," to reduce the likelihood that one person can implement a change that impacts the entire system","track"]
["ami.21","t",0.53182799999999997,"Stolen Field Service Tools Expose AMI Infrastructure"]
["ami.21","d",0.92404600000000003,"A utility's field service laptop and optical probe are lost or stolen, exposing the software to control components of the AMI infrastructure (e.g., meters and concentrators) to any user."]
["ami.21","v",0.15546599999999999,"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"," to software components of the AMI infrastructure.","Physical Access to the Device (6.5.1.6)"]
["ami.21","i",2.45813E-2,"Potential for unexpected and perhaps intermittent power loss for a targeted customer or for a large number of customers, and associated revenue loss for a utility"]
["ami.21","i",0.37002499999999999,"Impact may continue even after the laptop is retrieved if a copy of the laptop's OS and/or applications can be exfiltrated or recreated by the threat agent"]
["ami.21","m",0.13845399999999999,"configure for least functionality"," on the field service laptop","secure design and implementation"]
["ami.21","m",0.91591800000000001,"encrypt data at rest"," on the field service equipment laptop","encrypt"]
["ami.21","m",0.30158299999999999,"track asset"," (phone home) for the field service equipment laptop","track"]
["ami.21","m",0.61479300000000003,"require credential revocation"," for laptops","control access"]
["ami.21","m",0.27671200000000001,"sanitize device"," with remote wipe capability for lost field assets","sanitize"]
["ami.22","t",0.19144600000000001,"Wireless Access to AMI Administration Causes Invalid Disconnect"]
["ami.22","d",0.51745699999999994,"A threat agent gains wireless access to a web-based administration page on an AMI device that controls the ability to disconnect power from the device."]
["ami.22","v",8.9903399999999994E-2,"system permits wireless access by unauthorized parties"," to the wireless network used to control an AMI device,","Unnecessary System Access (6.2.2.6)"]
["ami.22","v",0.64072799999999996,"system relies on credentials that are easy to obtain for access"," to the web-based administration page used to control an AMI device.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.22","i",0.66176800000000002,"Unexpected power loss for the customer"]
["ami.22","m",0.36515199999999998,"require multi-factor authentication"," for privileged functionality","authenticate"]
["ami.22","m",0.87063299999999999,"restrict application access"," to web-based administration","control access"]
["ami.22","m",0.67315000000000003,"require approved cryptographic algorithms"," to protect the wireless network","secure design and implementation"]
["ami.23","t",0.226574,"Meter Authentication Credentials are Compromised and Posted on Internet"]
["ami.23","d",0.85900100000000001,"A utility deploys all AMI devices with the same authentication credentials granting privileged access via the local infra-red port, and the credentials are compromised and posted on the Internet."]
["ami.23","v",9.3696799999999997E-2,"system relies on credentials that are easy to obtain for access"," to AMI devices (hardcoded passwords),","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.23","v",3.5321999999999999E-2,"shared credentials are used for access"," to AMI devices.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.23","i",0.11279400000000001,"Potential for unexpected and perhaps intermittent power loss for a targeted customer or for a large number of customers, and associated revenue loss for a utility"]
["ami.23","m",0.94925899999999996,"require multi-factor authentication"," for privileged functionality","authenticate"]
["ami.23","m",0.16341900000000001,"verify absence of hardcoded credentials"," on AMI equipment","verify"]
["ami.23","m",0.38778299999999999,"require password rule enforcement"," including rule that limits sharing of a password by many meters","secure operations"]
["ami.24","t",0.53527000000000002,"Weak Cryptography Exposes AMI Device Communication"]
["ami.24","d",0.552844,"An AMI vendor implements weak cryptography that is easy to crack, allowing access to and modification of configuration or data on that interface."]
["ami.24","v",0.20569000000000001,"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"," to control access to configuration or data in AMI implementation.","Cryptographic Vulnerability (6.3.1.4)"]
["ami.24","i",0.41965999999999998,"Cost to upgrade or to replace all devices, if upgrade is not feasible. This impact is expected whether or not a threat agent ever uses this vulnerability to launch an attack"]
["ami.24","i",0.83692800000000001,"Loss of customers' private information, and associated costs"]
["ami.24","i",0.20485999999999999,"Mass disconnect of meters potentially causing circuit breaker trips, resulting in temporary outages until power on the grid can be rebalanced"]
["ami.24","m",0.48002299999999998,"require approved cryptographic algorithms"," ","secure design and implementation"]
["ami.24","m",0.17838599999999999,"define procedures"," in configuration management policies and procedures to allow future cryptographic changes","plan"]
["ami.24","m",0.52134400000000003,"define procedures"," to include security, including cryptography, in the purchasing process","plan"]
["ami.24","m",0.808531,"perform security testing"," of security controls during system acceptance testing","test"]
["ami.25","t",0.85010699999999995,"Known but Unpatched Vulnerability Exposes AMI Infrastructure"]
["ami.25","d",0.65243300000000004,"A threat agent is able to gain access to the AMI system by exploiting a known vulnerability that has not yet been patched. The threat agent is unable to access the AMI applications but can access other AMI devices and the headend system."]
["ami.25","v",0.49607699999999999,"software patches are not checked regularly to ensure that they are current"," in the AMI devices and headend system.","Inadequate Patch Management Process (6.2.2.4)"]
["ami.25","i",0.30021100000000001,"Access to an AMI headend, via an unpatched firewall and operating system for example, could permit a threat agent to shut down the AMI headend"]
["ami.25","i",0.43221700000000002,"Outages caused by an AMI headend shut down due to the utility's inability to implement DR at peak times"]
["ami.25","i",0.29934500000000003,"Customer service and troubleshooting costs"]
["ami.25","m",0.77609799999999995,"maintain patches"," including a severity rating (e.g., critical, important, moderate, low) and timeframes for patching vulnerabilities based on severity","secure operations"]
["ami.25","m",0.81473700000000004,"detect unauthorized access"," in network traffic to the AMI headend servers","detect"]
["ami.25","m",0.40562100000000001,"generate alarms"," for unauthorized access to the AMI headend servers","alert"]
["ami.25","m",0.69915499999999997,"restrict network access"," to the AMI headend servers","control access"]
["ami.25","m",0.24357599999999999,"define procedures"," for equipment purchase, to ensure timely availability of validated security updates from vendor","plan"]
["ami.25","m",0.27601700000000001,"perform security testing"," to validate that the system as purchased is current with respect to security updates","test"]
["ami.26","t",0.56832400000000005,"AMI Billing Cards are Compromised Incurring Loss of Revenu"]
["ami.26","d",0.57926299999999997,"The smart cards or magnetic cards for AMI billing are compromised. Example compromises include tampering with cards to change the credit amount, erasing the logic that decrements the credit amount remaining, or forging cards."]
["ami.26","v",4.0056500000000002E-2,"system assumes data inputs and resulting calculations are accurate"," on smartcards inserted into a meter,","Business Logic Vulnerability (6.3.1.8)"]
["ami.26","v",0.14785999999999999,"system permits unauthorized changes"," to AMI billing information on smartcards.","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.26","i",0.376384,"Loss of revenue"]
["ami.26","m",0.64942500000000003,"design for security"," in the payment system","secure design and implementation"]
["ami.26","m",0.82584900000000006,"check software file integrity"," (digital signatures or keyed hashes) of card contents","check integrity"]
["ami.26","m",0.85145400000000004,"perform security testing"," as part of system acceptance testing","test"]
["ami.26","m",8.0446699999999996E-2,"authenticate data source"," i.e., smart cards or magnetic cards for AMI billing","authenticate"]
["ami.27","t",0.12592500000000001,"Reverse Engineering of AMI Equipment Allows Unauthorized Mass Control"]
["ami.27","d",0.99457499999999999,"A threat agent is able to reverse engineer AMI equipment (meters and concentrators) to determine how to remotely control them. This allows the threat agent to control many devices simultaneously, and, for example, to perform a simultaneous mass disconnect, send DR messages that cause consumption of electricity to go up dramatically, or cause devices to send out last gasp or self-test failed messages."]
["ami.27","v",0.43951200000000001,"design permits unnecessary privileges"," such as unprotected interfaces used for development, testing, monitoring or maintenance purposes that remain in production equipment.","Unnecessary System Access (6.2.2.6)"]
["ami.27","v",0.67397899999999999,"back doors for access are left in place"," for AMI equipment.","Unnecessary System Access (6.2.2.6)"]
["ami.27","i",0.93252000000000002,"When demand can be manipulated quickly by a threat agent, there is the potential for outages while operators adjust generation to demand"]
["ami.27","i",0.65213699999999997,"Faked failure messages cause the utility to assume the cost of investigation and deploying technicians to resolve issues, as well as cost of their inability to address real problem meters due to the false event \"noise.\""]
["ami.27","m",0.70721800000000001,"design for security"," to identify and remove unsecure development features and \"nonstandard\" interfaces from production devices","secure design and implementation"]
["ami.27","m",0.74170199999999997,"design for security"," in equipment such that knowledge alone should not allow a threat agent to access a device without knowledge of keys and other credentials in equipment design","secure design and implementation"]
["ami.27","m",0.27353,"configure for least functionality"," by removing unnecessary interfaces and labeling from production devices","secure design and implementation"]
["ami.28","t",0.197576,"Failed Patching Causes AMI Devices to Stop Operating"]
["ami.28","d",0.35304200000000002,"A utility attempts to patch the AMI devices, but fails. Many AMI devices are no longer able to operate due to the failed patching process."]
["ami.28","v",0.37762400000000002,"software patches may be applied without verifying continued system operation"," in the realistic environment of a large footprint operation.","Inadequate Patch Management Process (6.2.2.4)"]
["ami.28","i",0.74764900000000001,"Cost to utility to repair or replace devices"]
["ami.28","i",0.88610199999999995,"Lack of capability to invoice customers, causing temporary financial loss"]
["ami.28","i",0.80202099999999998,"Loss of capability to perform DR, which may cause outages during periods of peak use"]
["ami.28","i",0.103603,"Cost of handling customer service situation"]
["ami.28","m",0.71839600000000003,"require fail-safe rollback"," for the patching process","ensure availability"]
["ami.28","m",0.99510900000000002,"test before installation"," to troubleshoot problems by testing a (non-production) set of meters prior to applying patches to production units","test"]
["ami.29","t",0.186555,"Unauthorized Device Acquires HAN Access and Steals Private Information"]
["ami.29","d",0.70401100000000005,"An unauthorized device gains access to the HAN and uses the web interface to obtain private information. Examples of such information are patterns of energy usage and the presence of medical devices."]
["ami.29","v",0.79391500000000004,"system relies on credentials that are easy to obtain for access"," to the HAN.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.29","i",0.434643,"Privacy violations for customers"]
["ami.29","i",9.6410499999999996E-2,"Loss of public confidence in AMI, even if the utility is not held legally responsible for the privacy violations"]
["ami.29","i",0.46156199999999997,"Costs of privacy breach notification if required of the utility"]
["ami.29","m",0.33219500000000002,"require approved cryptographic algorithms"," for protection of the HAN","secure design and implementation"]
["ami.29","m",0.55876899999999996,"minimize private information"," in HAN systems and devices","secure design and implementation"]
["ami.29","m",4.0978399999999998E-2,"require multi-factor authentication"," for access to the HAN","authenticate"]
["ami.30","t",0.417771,"Threat Agent Performs Unauthorized Firmware Alteration"]
["ami.30","d",0.51146800000000003,"A threat agent installs rogue firmware on multiple smart meters, bypassing any protection mechanism (e.g., checksums, signatures) and fully controlling smart meter behavior. This might be achieved via direct access to meters, via interception/modification of legitimate meter updates or via access to the headend."]
["ami.30","v",0.54679,"system relies on credentials that are easy to obtain for access"," to install firmware on the meter,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.30","v",0.65958300000000003,"system permits installation of malware"," on a meter.","Inadequate Malware Protection (6.4.2.3)"]
["ami.30","i",0.60884199999999999,"Continuous loss of revenue for utility if modified firmware understates usage (impact scales as more meters are affected)"]
["ami.30","i",0.77226099999999998,"Truck rolls needed to investigate compromised meter failure or nonresponsive meters"]
["ami.30","m",0.307531,"detect unusual patterns"," of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient)","detect"]
["ami.30","m",0.860375,"require multi-factor authentication"," for firmware updates","authenticate"]
["ami.30","m",6.6064999999999999E-2,"check software file integrity"," (using digital signatures or keyed hash) on code files to validate firmware updates before installation","check integrity"]
["ami.30","m",0.75114899999999996,"use Role-Based Access Control"," to limit privileges to install firmware","control access"]
["ami.31","t",0.48572500000000002,"Rogue Firmware Enables Unauthorized Mass Remote Disconnect"]
["ami.31","d",0.322654,"A threat agent prepares smart meter firmware containing malware and manually installs it on a target smart meter in each neighborhood.  The single insertion point in each neighborhood becomes the bot master for a smart meter based botnet. The bot master acquires the IP address for the neighborhood's headend at the utility and spoofs that address. As other smart meters attempt to connect to the headend, the bot master sends a firmware update command to the smart meters and transmits the malicious firmware to each victim. Individual bots propagate the malicious firmware throughout the neighborhood and use them to achieve a mass remote disconnect scheduled at the same time."]
["ami.31","v",0.52751300000000001,"system relies on credentials that are easy to obtain for access"," to communicate to the meter with the privileges of the headend, such as updating meter firmware,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.31","v",7.5368099999999997E-3,"system permits unauthorized installation of software or firmware"," such as the propagation of unauthorized firmware to meters by a compromised headend system","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.31","i",0.70726599999999995,"A small number of disconnects could subvert the smart grid deployment and make the utility lose consumer confidence"]
["ami.31","m",0.51579699999999995,"detect anomalous commands"," (disconnect and reconnect commands) on the network not stemming from the normal Customer Information System (CIS) system","detect"]
["ami.31","m",0.36590499999999998,"require multi-factor authentication"," for firmware updates","authenticate"]
["ami.31","m",1.83374E-2,"check software file integrity"," (digital signature or keyed hash) on code files to validate firmware updates before installation","check integrity"]
["ami.32","t",0.24684200000000001,"Power Stolen by Reconfiguring Meter via Optical Port"]
["ami.32","d",0.54618599999999995,"Many smart meters provide the capability of re-calibrating the settings via an optical port, which is then misused by economic thieves who offer to alter the meters for a fee, changing the settings for recording power consumption and often cutting utility bills by 50-75%. This requires collusion between a knowledgeable criminal and an electric customer, and will spread because of the ease of intrusion and the economic benefit to both parties."]
["ami.32","v",0.32228499999999999,"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data"," in particular, procedures and equipment for modifying meter configurations,","Insufficient Identity Validation or Background Checks (6.2.2.1)"]
["ami.32","v",0.137021,"system relies on credentials that are easy to obtain for access"," to the meter optical port, which in many cases allows reconfiguration of the meter settings (the optical port password may be found unencrypted on the meter or in field equipment that accesses the meter),","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.32","v",0.54264299999999999,"system permits unauthorized changes"," to the configuration that determines how power consumption is recorded,","Inadequate Change and Configuration Management (6.2.2.5)"]
["ami.32","v",0.24179800000000001,"system relies on credentials that are easy to obtain for access"," (via password) to field tool or third party installations of software that can reconfigure meters.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["ami.32","i",0.48537400000000003,"The utility experiences a loss of revenue due to under billing"]
["ami.32","m",0.76139100000000004,"require password rule enforcement"," (not the same password for all meters),","secure operations"]
["ami.32","m",0.90897700000000003,"detect unusual patterns"," of energy usage on smart meters (all utilities have some type of revenue protection scheme, but these may not be sufficient),","detect"]
["ami.32","m",0.94903400000000004,"detect unauthorized configuration changes"," on the meter.","detect"]
["ami.32","m",1.7953199999999999E-2,"verify personnel"," with extensive background checks on utility employeees and contract maintenance personnel, especially those that directly interact with field devices,","verify"]
["ami.32","m",3.9877300000000001E-3,"use Role-Based Access Control"," to limit privilege to change meter settings that determine how power consumption is recorded,","control access"]
["ami.32","m",0.108041,"protect credentials"," to meter optical port, within administrative processes, on meter and in field equipment","secure design and implementation"]
["der.1","t",9.6893900000000005E-2,"Inadequate Access Control of DER Systems Causes Electrocution"]
["der.1","d",0.47327799999999998,"The DER owner fails to change the default password or not set a password for the DER system user interface. A threat agent (inept installer, hacker, or industrial spy) gets access through the user interface and changes the DER settings so that it does not trip off upon low voltage (anti-islanding protection), but continues to provide power during a power system fault."]
["der.1","v",0.12270300000000001,"physical access may be obtained by unauthorized individuals"," to DER settings through the DER system user interface","Physical Access to the Device (6.5.1.6)"]
["der.1","v",0.94855199999999995,"default password is not changed"," for the DER system","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.1","v",0.80000599999999999,"system permits unauthorized changes"," to anti-islanding protection in the DER system due to poor configuration design,","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.1","v",0.92593099999999995,"commands or other messages may be inserted on the network by unauthorized individuals"," between the user interface and the DER system, that result in unauthenticated changes to sensitive parameters.","Use of Insecure Protocols (6.3.1.21)"]
["der.1","i",0.92050600000000005,"DER system suffers physical damage due to feeding into a fault"]
["der.1","i",0.57894100000000004,"A utility field crew member may be electrocuted"]
["der.1","i",1.8452799999999998E-2,"The utility experiences damage to its reputation due to smart grid anomalies"]
["der.1","m",0.69243100000000002,"authenticate users"," for all user interface interactions","authenticate"]
["der.1","m",0.62495199999999995,"change default credentials"," after installation","secure operations"]
["der.1","m",0.277088,"enforce limits in hardware"," to ensure that no setting changes can damage equipment","enforce limits"]
["der.1","m",0.98430600000000001,"train personnel"," on secure networking requirements so that DER owners will understand the impact of bypassing security settings","train"]
["der.1","m",0.72600900000000002,"require approval"," of next level management for critical security settings","verify"]
["der.2","t",0.99953899999999996,"DER's Rogue Wireless Connection Exposes the DER System to Threat Agents via the Internet"]
["der.2","d",0.19711500000000001,"An industrial or large commercial DER system is configured for local operational access through a wireless network, but is erroneously connected to the company's wireless corporate network, thus exposing the DER system to the Internet. Through the incorrect connection to the Internet, a threat agent gains control of the DER system and alters the operation of the DER functions to make them ignore utility commands and to turn off the \"acknowledge command\" interaction with the utility. The DER system may no longer limit power output during critical situations."]
["der.2","v",0.55015800000000004,"network is connected to untrusted networks"," specifically the DER operational network is connected to the company's wireless corporate network,","Inadequate Network Segregation (6.5.1.2)"]
["der.2","v",0.92778099999999997,"system relies on credentials that are easy to obtain for access"," to the wireless network allowing an unauthorized entity to gain control of DER system through the Internet,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.2","v",0.67542999999999997,"system permits wireless access by unauthorized parties"," to the wireless network in the DER system,","Unnecessary System Access (6.2.2.6)"]
["der.2","v",0.56153200000000003,"unnecessary access is permitted to system functions"," in the DER system,","Unnecessary System Access (6.2.2.6)"]
["der.2","v",0.36355300000000002,"users lack visibility to the failure of the system to respond to commands"," by the utility for the DER system.","Error Handling Vulnerability (6.3.1.6)"]
["der.2","i",0.46715600000000002,"Utility power equipment is damaged, causing financial impacts and outages of customers"]
["der.2","i",0.185553,"The utility experiences damage to its reputation due to smart grid anomalies"]
["der.2","i",0.18066099999999999,"The utility's networked grid in a city may experience damaging reverse power flows, or overloads to substation transformers"]
["der.2","m",0.36721599999999999,"verify network changes"," including connections available between networks","verify"]
["der.2","m",7.1227299999999993E-2,"authenticate devices"," so that any new connections support only authorized equipment","authenticate"]
["der.2","m",0.86514199999999997,"detect unauthorized configuration changes"," to the DER system","detect"]
["der.2","m",0.29978500000000002,"configure for least functionality"," by limiting the types of traffic, shutting down certain ports, etc.","secure design and implementation"]
["der.2","m",0.39619500000000002,"authenticate messages"," , including their source and destinations, in communication protocols used between DER system components","authenticate"]
["der.2","m",0.85775800000000002,"require acknowledgment"," in communication protocols used for critical commands from the utility to DER systems,","verify"]
["der.2","m",0.18995300000000001,"require failure messages"," in communication protocols used for critical commands from the utility to DER systems,","verify"]
["der.2","m",0.748722,"train personnel"," (DER system installers) to ensure that the recommended access control security settings are enabled","train"]
["der.2","m",0.166493,"require secure factory settings"," for configuration and network parameters by default","secure design and implementation"]
["der.2","m",0.67796100000000004,"authenticate users"," who make modifications to secure configuration and network settings","authenticate"]
["der.2","m",0.22475000000000001,"limit remote modification"," of functional and security settings for the DER system","control access"]
["der.2","m",0.24379700000000001,"require approved cryptographic algorithms"," to protect DER wireless network,","secure design and implementation"]
["der.2","m",0.46083400000000002,"use Role-Based Access Control"," to limit privileges to safety critical functions","control access"]
["der.3","t",0.88433399999999995,"Malware Introduced in DER System During Deployment"]
["der.3","d",0.493176,"A threat agent, possibly a disgruntled employee of the DER vendor or a DER implementation company, makes malicious software changes to equipment software or firmware. This malware causes large numbers of DER systems to ignore certain critical commands from the utility. For example, after some future date, it prevents the DER systems from limiting their energy output when so commanded and then locks out any other commands."]
["der.3","v",0.26543699999999998,"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data"," when granted access to software and firmware in equipment that is at the vendor factory or during implementation,","Insufficient Identity Validation or Background Checks (6.2.2.1)"]
["der.3","v",0.57296899999999995,"system permits unauthorized installation of software or firmware"," in DER equipment,","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.3","v",0.43334400000000001,"system relies on credentials that are easy to obtain for access"," to modify software or firmware on systems post-delivery,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.3","v",0.49940899999999999,"system permits unauthorized installation of software or firmware"," in the DER system.","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.3","i",0.98513399999999995,"Loss of a transformer"]
["der.3","i",0.30778800000000001,"Financial loss to utility"]
["der.3","i",0.83530099999999996,"Financial loss to DER owner"]
["der.3","i",0.84283799999999998,"The combined effect causes a large reverse power flow in a substation and causes severe damage to a substation transformer. All DER software/firmware will have to be updated"]
["der.3","m",2.87602E-2,"cross check"," software/firmware before installation by comparing with a known good version (a \"gold disk\")","verify"]
["der.3","m",0.73602699999999999,"require on-going validation"," of software/firmware","verify"]
["der.3","m",0.25182399999999999,"authenticate users"," for access to modify software/firmware","authenticate"]
["der.3","m",0.61772899999999997,"test for malware"," in DER systems","test"]
["der.3","m",0.31470100000000001,"verify personnel"," with background checks on DER development personnel, implementers, and contract maintenance personnel, especially those that interact directly with the DER interface to the utility","verify"]
["der.3","m",0.58674999999999999,"use Role-Based Access Control"," to limit privileges to modify software/firmware after installation","control access"]
["der.4","t",0.63606600000000002,"Confidential DER Generation Information Stolen to Harm Customer"]
["der.4","d",0.15048,"A utility is monitoring the energy and ancillary services provided by an industrial or commercial customer's DER system. The communication protocol that transports this information is intercepted and a threat agent gains access to the private generation data from the DER system because the protocol provides either no confidentiality or inadequate confidentiality. This private data is used to harm the customer."]
["der.4","v",0.96510499999999999,"system makes messages accessible to unauthorized individuals"," in the communication protocol of the DER system,","Use of Insecure Protocols (6.3.1.21)"]
["der.4","v",0.211947,"system makes private data accessible to unauthorized individuals"," in the communication protocol of the DER system.","Sensitive Data Protection Vulnerability (6.3.1.15)"]
["der.4","i",0.75813399999999997,"Utility is sued for financial damages due to lost customer privacy"]
["der.4","i",8.0418000000000003E-2,"Utility reputation is damaged for not providing security for private information"]
["der.4","m",0.21743899999999999,"encrypt communication paths"," used for confidential or private information","encrypt"]
["der.5","t",0.76008200000000004,"Trojan Horse Attack Captures Confidential DER Generation Information"]
["der.5","d",1.8801600000000001E-3,"A DER system installed for the mutual benefit of a utility partnership with an industrial or commercial customer contains a Trojan horse, either embedded at the factory, added during installation, or inserted by maintenance personnel. The Trojan horse captures confidential market-related information from both the utility and the partner. An industrial competitor uses this market information to the detriment of both the utility and the customer."]
["der.5","v",0.48725400000000002,"system permits installation of malware"," in the supply chain for the DER system","Inadequate Malware Protection (6.4.2.3)"]
["der.5","i",0.248644,"Utility suffers from financial losses due to market manipulation by the industrial competitor"]
["der.5","i",0.57835899999999996,"Utility is sued for financial damages due to lost customer confidentiality"]
["der.5","i",0.48733599999999999,"Utility reputation is damaged for not being able to secure confidential information"]
["der.5","m",0.43636999999999998,"test before installation"," of the DER system, for the presence of malware,","test"]
["der.5","m",0.53326399999999996,"test after installation"," of the DER system, for the presence of malware,","test"]
["der.5","m",6.5420399999999998E-3,"require assured maintenance"," by security-certified maintenance organizations that can be trusted not to install malware","secure operations"]
["der.5","m",0.129245,"test after maintenance"," for malware in all DER systems","test"]
["der.5","m",7.7797199999999997E-2,"create audit logs"," of all changes to software and firmware, linking the updates to roles","audit"]
["der.5","m",0.877803,"protect audit logs"," from deletion of records unless a security authority is notified","audit"]
["der.5","m",0.80373399999999995,"configure for least functionality"," by disabling backdoor vendor/maintenance ports","secure design and implementation"]
["der.5","m",0.95474000000000003,"verify personnel"," with background checks on DER development personnel, implementers, and contract maintenance personnel with privileges to modify firmware or software,","verify"]
["der.5","m",0.43950800000000001,"use Role-Based Access Control"," to limit privileges to modify firmware or software after installation","control access"]
["der.5","m",0.66451300000000002,"restrict access"," at factory for modifying software and firmware","control access"]
["der.5","m",0.355568,"require authentication"," to modify firmware or software after installation","authenticate"]
["der.6","t",0.72423899999999997,"Compromised DER Sequence of Commands Causes Power Outage"]
["der.6","d",0.30318000000000001,"A utility-owned DER storage system is located in a substation to balance large feeder generation and load variations. A threat agent causes a sequence of commands, although valid individually, to arrive at the DER system in the wrong order (possibly through a replay attack), causing the DER system to create a greater imbalance and tripping off all customers served from that substation."]
["der.6","v",0.321633,"system permits potentially harmful command sequences"," in the application-to-application messaging scheme of the DER storage system,","Business Logic Vulnerability (6.3.1.8)"]
["der.6","v",1.4063900000000001E-2,"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"," in the communication protocol of the DER storage system.","Use of Insecure Protocols (6.3.1.21)"]
["der.6","i",0.639015,"Outages for all customers served by the substation"]
["der.6","i",0.91610400000000003,"Continued threat of outages until the cause of the improper DER system operation is determined and corrected"]
["der.6","i",0.90041000000000004,"Utilities need to curtail customer generation and/or loads until the problem is corrected"]
["der.6","m",0.62641899999999995,"check message integrity"," in communication protocols used to manage DER systems","check integrity"]
["der.6","m",0.62595800000000001,"protect against replay"," in communication protocols used to manage DER systems","check integrity"]
["der.6","m",0.82307300000000005,"create audit logs"," of out-of-sequence data","audit"]
["der.6","m",0.37323099999999998,"generate alarms"," for system owners when out-of-sequence data is detected","alert"]
["der.7","t",0.301012,"Incorrect Clock Causes Substation DER System Shut Down During Critical Peak"]
["der.7","d",0.97644200000000003,"A utility-owned DER system is located in a substation with the primary purpose of providing additional power during a critical peak. A threat agent changes the time clock in the DER system through a false time-synchronization message, so that either the DER system believes that the critical peak event is over or that all time-stamped messages to it are invalid, so it goes into default shut-down mode. "]
["der.7","v",0.53797399999999995,"system permits messages to be modified by unauthorized individuals"," in the time synchronization communication protocol,","Use of Insecure Protocols (6.3.1.21)"]
["der.7","v",0.90152699999999997,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in the time synchronization communication protocol,","Use of Insecure Protocols (6.3.1.21)"]
["der.7","v",0.36868299999999998,"system takes action before confirming changes with user"," in the DER management system.","Business Logic Vulnerability (6.3.1.8)"]
["der.7","i",0.55423599999999995,"The DER system performs an immediate shut down and causes damage to a transformer"]
["der.7","i",0.73489700000000002,"Customer outages occur during the critical peak"]
["der.7","i",0.102113,"Utilities need to curtail customer generation and/or loads until a new transformer is installed"]
["der.7","m",0.17333999999999999,"authenticate messages"," in the time synchronization communication protocol","authenticate"]
["der.7","m",3.8482299999999997E-2,"check message integrity"," in the time synchronization communication protocol","check integrity"]
["der.7","m",0.33826699999999998,"cross check"," operationally critical actions with the utility DER management system before acting","verify"]
["der.8","t",0.73446299999999998,"EV Charging Station Ignores Utility Command to Limit Fast-Charging"]
["der.8","d",0.59221999999999997,"A charging station employee (with system administrator authority) wants to increase the revenue of an electric vehicle (EV) charging station acting as a DER system. The employee modifies a utility command to \"curtail the fast-charging rate\" or to change the time-stamp when the fast-charging limit command was received. During a peak period, many EVs simultaneously start charging, causing the distribution transformer to fail."]
["der.8","v",0.78217300000000001,"system permits unauthorized changes"," to instructions received from the utility regarding permitted charging operations.","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.8","i",0.53089500000000001,"Transformer is damaged"]
["der.8","i",0.69738800000000001,"Lawsuits between the utility and the EV charging station over responsibility for the cost to replace the failed transformer"]
["der.8","m",0.37534899999999999,"require read-only access"," to timestamps for stored copies of commands received from utility","control access"]
["der.8","m",0.60009900000000005,"require non-repudiation"," for all critical commands between the utility and the customer system","verify"]
["der.9","t",0.484433,"Loss of DER Control Occurs due to Invalid or Missing Messages"]
["der.9","d",0.97760899999999995,"A malicious or non-malicious individual causes the loss of DER control due to invalid or missing messages. Since the DER system either tries to act on invalid messages or no longer has messages constraining its output, it causes a distribution transformer to overload, thus causing an outage for the site and for neighboring sites. The DER system also sustains damage due to invalid settings."]
["der.9","v",0.24304600000000001,"system permits messages to be modified by unauthorized individuals"," ","Use of Insecure Protocols (6.3.1.21)"]
["der.9","v",0.81601500000000005,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," ","Use of Insecure Protocols (6.3.1.21)"]
["der.9","i",0.249359,"A distribution transformer is damaged"]
["der.9","i",0.74876799999999999,"A local outage occurs that requires field crews to replace the damaged transformer"]
["der.9","i",0.73390299999999997,"The DER system may sustain damage due to trying to act on invalid messages or not being constrained by expected messages that did not arrive"]
["der.9","m",4.1690199999999997E-2,"authenticate messages"," in all communication protocols","authenticate"]
["der.9","m",0.87699099999999997,"validate data"," in DER systems messages as reasonable and within the DER intrinsic capabilities","verify"]
["der.9","m",0.71982900000000005,"generate alarms"," for messages that fail message authentication","alert"]
["der.9","m",0.74858899999999995,"create audit logs"," of messages that fail message authentication","audit"]
["der.9","m",0.98929500000000004,"require non-repudiation"," to validate receipt of messages","verify"]
["der.10","t",0.48461599999999999,"Threat Agent Modifies FDEMS Efficiency Settings"]
["der.10","d",0.73643999999999998,"A malicious individual accesses a FDEMS in a small- to medium-sized commercial or industrial site, and modifies the energy output, the volt-var curves, or other DER efficiency settings that were requested by the utility."]
["der.10","v",0.35416799999999998,"system permits unauthorized changes"," to critical settings in FDEMS,","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.10","v",0.99023399999999995,"unnecessary network access is permitted"," to the FDEMS network,","Unnecessary System Access (6.2.2.6)"]
["der.10","v",0.14071400000000001,"unnecessary access is permitted to the operating system"," hosting the FDEMS applications,","Unnecessary System Access (6.2.2.6)"]
["der.10","v",0.10582,"physical access may be obtained by unauthorized individuals"," to the FDEMS system.","Physical Access to the Device (6.5.1.6)"]
["der.10","v",0.44001699999999999,"system relies on credentials that are easy to obtain for access"," to the FDEMS network,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.10","v",0.166376,"system relies on credentials that are easy to obtain for access"," that allows modification of the FDEMS settings,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.10","i",0.31776700000000002,"The utility loses financially due to the need to purchase higher costing energy and/or to operate the power system less efficiently"]
["der.10","i",7.5900200000000001E-2,"The customer experiences higher costs due to not meeting the utility efficiency requests"]
["der.10","m",0.15631800000000001,"restrict application access"," for all FDEMS user interface interactions","control access"]
["der.10","m",0.37375799999999998,"authenticate users"," for all FDEMS user interface interactions","authenticate"]
["der.10","m",0.13383999999999999,"change default credentials"," for FDEMS after installation","secure operations"]
["der.10","m",0.13572000000000001,"use Role-Based Access Control"," in the FDEMS system","control access"]
["der.10","m",0.62297400000000003,"enforce least privilege"," to access the FDEMS operating system and physical host","control access"]
["der.10","m",0.871618,"enforce restrictive firewall rules"," for access to the FDEMS network","control access"]
["der.10","m",0.44997700000000002,"require multi-factor authentication"," for users requesting remote access to the FDEMS network","authenticate"]
["der.10","m",0.93731399999999998,"train personnel"," including the FDEMS owners and administrators, on secure networking requirements","train"]
["der.10","m",0.56098700000000001,"protect credentials"," that allow access to the FDEMS network,","secure design and implementation"]
["der.10","m",0.113104,"protect credentials"," for the FDEMS application or operating system that permit access to modify the FDEMS settings","secure design and implementation"]
["der.11","t",0.37368400000000002,"Threat Agent Shuts Down Commercial/Industrial FDEMS"]
["der.11","d",0.90694799999999998,"A threat agent gains access to a FDEMS in a small- to medium-sized commercial or industrial site, such as a shopping center, university campus, hospital complex, or manufacturing facility and installs malicious software. At a pre-planned time, the virus planted by the threat agent causes a synchronized shut down of all the DER systems on the site, either causing a complete or partial outage of the facility or forcing the facility to purchase additional power from the grid."]
["der.11","v",0.91349000000000002,"unnecessary network access is permitted"," to the FDEMS network,","Unnecessary System Access (6.2.2.6)"]
["der.11","v",4.2735099999999998E-2,"unnecessary access is permitted to the operating system"," hosting the FDEMS applications,","Unnecessary System Access (6.2.2.6)"]
["der.11","v",0.120532,"physical access may be obtained by unauthorized individuals"," to the FDEMS system,","Physical Access to the Device (6.5.1.6)"]
["der.11","v",0.99833499999999997,"system takes action before confirming changes with user"," to shutdown DER systems in the FDEMS,","Business Logic Vulnerability (6.3.1.8)"]
["der.11","v",0.13730400000000001,"system relies on credentials that are easy to obtain for access"," to the FDEMS network","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.11","v",0.54342199999999996,"system relies on credentials that are easy to obtain for access"," that allows modification of the FDEMS software","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.11","i",0.80206900000000003,"Depending upon the size of the facility, this unplanned loss of DER energy could cause power quality problems on the utility grid, including low voltage, harmonics, and a possible temporary feeder outage"]
["der.11","i",0.526308,"The utility pays more for energy than necessary"]
["der.11","i",0.829488,"The utility experiences loss of reputation"]
["der.11","i",0.15112,"The customer experiences higher costs due to not meeting the utility requests"]
["der.11","m",0.165184,"enforce least privilege"," to access the FDEMS operating system and physical host","control access"]
["der.11","m",0.80420000000000003,"enforce restrictive firewall rules"," for access to the FDEMS network","control access"]
["der.11","m",0.72030300000000003,"require multi-factor authentication"," for users requesting remote access to the FDEMS","authenticate"]
["der.11","m",0.62071299999999996,"require application whitelisting"," on the FDEMS","secure operations"]
["der.11","m",0.24713199999999999,"generate alerts"," upon shutdown of site DER systems","alert"]
["der.11","m",0.87309000000000003,"train personnel"," including FDEMS owners and administrators on secure networking requirements","train"]
["der.11","m",0.66824799999999995,"protect credentials"," that allow access to the FDEMS network","secure design and implementation"]
["der.11","m",0.65664900000000004,"protect credentials"," for the FDEMS operating system that permit access to modify the FDEMS software","secure design and implementation"]
["der.11","m",0.99654900000000002,"use Role-Based Access Control"," to limit the privilege to install software on the FDEMS host","control access"]
["der.12","t",0.69616299999999998,"Modified Management Settings for Substation FDEMS Impact Power Quality"]
["der.12","d",6.93941E-2,"A malicious individual accesses a utility FDEMS that manages DER generation and storage systems within a substation, and modifies the energy output, the volt-var curves, or other DER management settings. When the utility requests the FDEMS to control the DER systems to provide more vars, the FDEMS causes the DER systems to behave erratically and cause the substation to have power quality problems, including tripping of the transmission line breaker."]
["der.12","v",0.37040600000000001,"unnecessary access is permitted to critical functions"," that modify critical settings in the FDEMS,","Unnecessary System Access (6.2.2.6)"]
["der.12","v",0.34684799999999999,"unnecessary network access is permitted"," for the FDEMS network,","Unnecessary System Access (6.2.2.6)"]
["der.12","v",0.88482300000000003,"unnecessary access is permitted to the operating system"," hosting the FDEMS applications,","Unnecessary System Access (6.2.2.6)"]
["der.12","v",0.78634999999999999,"physical access may be obtained by unauthorized individuals"," to the FDEMS system,","Physical Access to the Device (6.5.1.6)"]
["der.12","v",0.79394399999999998,"system relies on credentials that are easy to obtain for access"," to the FDEMS network","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.12","v",0.86334599999999995,"system relies on credentials that are easy to obtain for access"," that allows modificatio of the FDEMS settings","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.12","i",0.155033,"Power system power quality problems, including erratic supply of vars to the transmission system"]
["der.12","i",0.70926900000000004,"An outage of all feeders in the substation"]
["der.12","m",0.44416600000000001,"restrict application access"," for all FDEMS user interface interactions","control access"]
["der.12","m",0.54627800000000004,"authenticate users"," for all FDEMS user interface interactions","authenticate"]
["der.12","m",0.71961900000000001,"enforce changing default passwords"," as a system enforced step during installation","secure design and implementation"]
["der.12","m",0.75810100000000002,"use Role-Based Access Control"," in the FDEMS system","control access"]
["der.12","m",9.6368099999999998E-2,"enforce least privilege"," for access to the FDEMS operating system and physical host","control access"]
["der.12","m",0.83083099999999999,"enforce restrictive firewall rules"," for access to the FDEMS network","control access"]
["der.12","m",0.42305100000000001,"require multi-factor authentication"," for users requesting remote access to the FDEMS","authenticate"]
["der.12","m",0.70166099999999998,"protect credentials"," that allow access to the FDEMS network","secure design and implementation"]
["der.12","m",0.28506500000000001,"protect credentials"," for the FDEMS application or operating system that permit access to modify the FDEMS settings","secure design and implementation"]
["der.13","t",0.20522399999999999,"Custom Malware Gives Threat Agent Control of FDEMS"]
["der.13","d",0.73611899999999997,"A threat agent compromises the operating system/operating environment platform of a FDEMS and installs malware. The malware leverages automated machine-to-machine authentication mechanisms and/or compromises stored cryptographic authentication keys to allow it to impersonate the authorized FDEMS software. This gives the threat agent complete control over all of the FDEMS resources and remote resources controlled or managed by the FDEMS."]
["der.13","v",0.43350699999999998,"physical access may be obtained by unauthorized individuals"," to embedded equipment in the supply chain, installation organization or maintenance organization,","Physical Access to the Device (6.5.1.6)"]
["der.13","v",0.80885600000000002,"network interfaces permit unnecessary traffic flows"," between the FDEMS and the Internet, allowing for Internet-based malware delivery mechanisms,","Inadequate Network Segregation (6.5.1.2)"]
["der.13","v",0.18868499999999999,"software patches are not checked regularly to ensure that they are current"," permitting compromise of the FDEMS platform,","Inadequate Patch Management Process (6.2.2.4)"]
["der.13","v",0.98347099999999998,"system relies on credentials that are easy to obtain for access"," to install software on the FDEMS platform","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.13","i",0.40895500000000001,"The FDEMS owner may experience loss of revenue as well as possible penalties for not responding as contracted"]
["der.13","i",0.89338799999999996,"Over a long period while avoiding detection, the threat agent can cause changes to the FDEMS commands to benefit a rival FDEMS installation"]
["der.13","i",0.87099700000000002,"Other unexpected impacts, since the threat agent has undetected control of the FDEMS"]
["der.13","m",0.11404300000000001,"require secure boot loader"," ","secure operations"]
["der.13","m",0.93005899999999997,"check software execution integrity"," , since software may be compromised when loaded for execution,","check integrity"]
["der.13","m",0.17941799999999999,"check software file integrity"," for software executables and images","check integrity"]
["der.13","m",0.92818599999999996,"check OS integrity"," (e.g., virtual machine monitoring, rootkit detection, etc.)","check integrity"]
["der.13","m",0.66208900000000004,"create audit logs"," to capture commands","audit"]
["der.13","m",0.42152600000000001,"protect credentials"," required for installing software on the FDEMS platform, in user and administrative processes,","secure design and implementation"]
["der.13","m",5.3548400000000003E-2,"maintain patches"," on the FDEMS system,","secure operations"]
["der.14","t",0.70377900000000004,"DER Systems Shut Down by Spoofed SCADA Control Command"]
["der.14","d",0.58077000000000001," threat agent spoofs DER SCADA control commands to perform emergency shutdowns of a large number of DER systems simultaneously."]
["der.14","v",0.30059900000000001,"system permits messages to be modified by unauthorized individuals"," in the DER SCADA communication protocols,","Use of Insecure Protocols (6.3.1.21)"]
["der.14","v",4.9188000000000003E-2,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in the DER SCADA communication protocols,","Use of Insecure Protocols (6.3.1.21)"]
["der.14","v",0.53380399999999995,"users lack visibility of threat activity"," specifically messages sent to DER systems but not originated by the SCADA system,","Inadequate Anomaly Tracking (6.4.4.1)"]
["der.14","v",0.27024300000000001,"unnecessary access is permitted to system functions"," for the DER SCADA system, permitting an adversary to gather information about how to spoof shutdown messages.","Unnecessary System Access (6.2.2.6)"]
["der.14","i",0.62441199999999997,"Power system instability, including outages and power quality problems"]
["der.14","i",0.61464600000000003,"Utility legal costs related to DER owner litigation for loss of revenue"]
["der.14","m",0.75536099999999995,"limit events"," specifically the number of shutdown events of DER systems within a specified time period","enforce limits"]
["der.14","m",0.86117999999999995,"use Role-Based Access Control"," in the DER SCADA","control access"]
["der.14","m",0.17894699999999999,"authenticate data source"," for the DER SCADA protocols","authenticate"]
["der.14","m",0.25484699999999999,"authenticate messages"," that convey DER SCADA control commands","authenticate"]
["der.14","m",0.411165,"validate inputs"," (as a consistency check) for the DER SCADA control commands","verify"]
["der.14","m",0.78492300000000004,"require intrusion detection and prevention"," as part of DER SCADA network management","detect"]
["der.15","t",0.918763,"Threat Agent Spoofs DER Data Monitored by DER SCADA Systems"]
["der.15","d",5.4482599999999999E-2,"A threat agent modifies the industrial and the larger commercial DER data being monitored by the utility distribution DER SCADA system in real-time, altering the load value so that it is much higher than the actual value. Although this modification does not affect the monthly revenue metering for these DER systems, it causes the utility to request and pay for additional ancillary services from a neighboring DER storage system."]
["der.15","v",0.67745699999999998,"system permits unauthorized changes"," to load value data in the DER SCADA communication protocols,","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.15","v",0.54907499999999998,"system assumes data inputs and resulting calculations are accurate"," between load value and meter values.","Business Logic Vulnerability (6.3.1.8)"]
["der.15","v",0.14524500000000001,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in the DER SCADA communication protocols","Use of Insecure Protocols (6.3.1.21)"]
["der.15","v",0.95003300000000002,"users lack visibility of threat activity"," specifically adversary presence on the network capable of intercepting and modifying messages.","Inadequate Anomaly Tracking (6.4.4.1)"]
["der.15","i",0.99905200000000005,"Increased utility costs for unnecessary ancillary services"]
["der.15","i",0.93636600000000003,"Utility legal costs for finding and litigating the threat agent"]
["der.15","m",0.31004999999999999,"use Role-Based Access Control"," for the DER SCADA","control access"]
["der.15","m",0.216998,"authenticate data source"," for the DER SCADA protocols","authenticate"]
["der.15","m",0.13048799999999999,"authenticate messages"," that convey the DER SCADA control commands","authenticate"]
["der.15","m",0.17322299999999999,"require intrusion detection and prevention"," as part of DER SCADA network management","detect"]
["der.16","t",0.29375499999999999,"DER SCADA System Issues Invalid Commands"]
["der.16","d",0.29209099999999999,"A threat agent breaches a DER SCADA system and causes the DER SCADA system to issue an invalid command to all DER systems. Since DER systems may react differently to invalid commands, the power system experiences immediate and rapid fluctuations as some DER systems shut down, while others go into default mode with no volt-var support, still others revert to full output, and a few become islanded microgrids. The distribution equipment tries to compensate automatically, but causes more problems as the voltage experiences severe surges and sags."]
["der.16","v",9.4159300000000001E-2,"system permits potentially harmful command sequences"," in particular issuance of commands with unknown impact on the DER systems,","Business Logic Vulnerability (6.3.1.8)"]
["der.16","v",0.85054700000000005,"system permits unauthorized changes"," to SCADA application data or software that allows the DER SCADA system to send invalid commands to DER systems,","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.16","v",0.29033500000000001,"system relies on credentials that are easy to obtain for access"," to the SCADA DER system,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.16","i",0.62046699999999999,"Power system rapid fluctuations that cause power quality problems for customers, including outages"]
["der.16","i",0.44995499999999999,"Equipment damage (that can lead to loss of life) due to power system surges and sags"]
["der.16","i",0.60107500000000003,"Transmission power quality problem"]
["der.16","m",0.76626000000000005,"authenticate users"," accessing the DER SCADA system","authenticate"]
["der.16","m",0.57045900000000005,"authenticate messages"," communicated in the DER SCADA network","authenticate"]
["der.16","m",0.29076200000000002,"use Role-Based Access Control"," in the utility's DER SCADA system,","control access"]
["der.16","m",0.91147599999999995,"validate inputs"," that the DER system receives from the DER SCADA system","verify"]
["der.16","m",0.62756299999999998,"protect credentials"," that allow access to the DER SCADA network","secure design and implementation"]
["der.16","m",0.96944699999999995,"protect credentials"," for DER SCADA application and operating system","secure design and implementation"]
["der.17","t",0.158607,"Utility DERMS Miscalculates DER Energy/Service Requests"]
["der.17","d",3.1697299999999998E-2,"A malicious individual modifies the utility DERMS system power flow analysis function (input, output, or power flow configuration) that determines what energy and ancillary services to request from the DER systems. Under these modifications, the results still remain \"reasonable,\" but lead to benefits to some DER systems and to the detriment of others."]
["der.17","v",0.72785999999999995,"system relies on credentials that are easy to obtain for access"," to the DERMS system,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.17","v",0.79725500000000005,"system assumes data inputs and resulting calculations are accurate"," in the software application and configuration data that provides DERMS power flow analysis functionality.","Business Logic Vulnerability (6.3.1.8)"]
["der.17","v",0.87648999999999999,"system permits unauthorized changes"," to the DERMS system power flow analysis function","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.17","i",0.167661,"Financial gain for certain DER systems at the expense of the utility and/or other DER owners"]
["der.17","i",0.51450899999999999,"Legal costs for litigation with adversely affected DER owners"]
["der.17","m",0.39933200000000002,"use Role-Based Access Control"," in the utility's DERMS system to limit those users authorized to change pricing signals","control access"]
["der.17","m",0.18568200000000001,"require multi-factor authentication"," for operationally critical modifications","authenticate"]
["der.17","m",0.34071400000000002,"require intrusion detection and prevention"," as part of the DERMS network and system management capabilities","detect"]
["der.17","m",4.9983E-2,"create audit logs"," for changes to DERMS power flow analysis configuration data","audit"]
["der.17","m",0.49414799999999998,"generate alerts"," if DERMS power flow analysis configuration data or DERMS software is changed, or is changed at an unexpected time or to an unexpected value (based on the logging information)","alert"]
["der.18","t",4.0426900000000002E-2,"Microgrid Disconnect Process Compromised via DERMS"]
["der.18","d",0.760046,"A threat agent gains access to the utility DERMS system and alters the conditions that determine when a utility has permission to disconnect a pre-established microgrid from the grid. This modification causes the microgrid either to disconnect at some random time in the future, or to prevent it from disconnecting even when it is supposed to disconnect (e.g., in the case of an outage)."]
["der.18","v",0.518146,"unnecessary access is permitted to system functions"," in the DERMS system,","Unnecessary System Access (6.2.2.6)"]
["der.18","v",0.61451500000000003,"system permits unauthorized changes"," to utility permissions for microgrid disconnect,","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.18","v",0.44534499999999999,"system permits messages to be modified by unauthorized individuals"," to convey a command to modify utility permission for microgrid disconnect,","Use of Insecure Protocols (6.3.1.21)"]
["der.18","v",0.86839599999999995,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," ","Use of Insecure Protocols (6.3.1.21)"]
["der.18","i",7.3620000000000005E-2,"Since the microgrid may not be prepared to disconnect from the grid or may be brought down during the grid outage, it will experience a complete outage"]
["der.18","i",0.80973899999999999,"Legal costs for litigation with the adversely affected customers"]
["der.18","m",0.24324599999999999,"use Role-Based Access Control"," to limit those users authorized to change microgrid establishment permissions in the utility's DERMS system","control access"]
["der.18","m",5.2102299999999997E-2,"require intrusion detection and prevention"," as part of DERMS network and system management capabilities","detect"]
["der.18","m",0.35444599999999998,"require multi-factor authentication"," for operationally critical functions, such as modifying configuration files","authenticate"]
["der.18","m",0.225443,"authenticate messages"," for administrative messages received by the utility DERMS,","authenticate"]
["der.18","m",0.33948600000000001,"check message integrity"," for administrative messages received by the utility DERMS.","check integrity"]
["der.19","t",0.26954400000000001,"Threat Agent Gains Access to Utility DERMS via FDEMS"]
["der.19","d",0.44896200000000003,"A threat agent uses a FDEMS to which they have full access, to access the utility's DERMS system. The threat agent is able to modify the DER commands, schedules, and requests sent to other DER systems, making these settings beneficial to their own DER systems, and consequently less beneficial to other DER systems."]
["der.19","v",0.37714900000000001,"system relies on credentials that are easy to obtain for access"," to modify the DERMS settings, when communicating using the FDEMS to DERMS protocol,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.19","v",3.9237300000000003E-2,"unnecessary access is permitted to system functions"," in the DERMS system that modify settings that impact individual DER systems,","Unnecessary System Access (6.2.2.6)"]
["der.19","v",0.74301600000000001,"system permits messages to be modified by unauthorized individuals"," so that a message to the DERMS using the FDEMS communications channel appears to come from an entity authorized to change DERMS settings, and contains a request for such changes,","Use of Insecure Protocols (6.3.1.21)"]
["der.19","v",0.32378600000000002,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in this case a change to the apparent source of the message as well as its contents,","Use of Insecure Protocols (6.3.1.21)"]
["der.19","v",0.62438499999999997,"users lack visibility that unauthorized changes were made"," to DERMS functions.","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.19","i",0.67357299999999998,"Inefficient or cost-ineffective power system operated by the utility"]
["der.19","i",0.20737700000000001,"Utility legal costs related to DER owner litigation for unfair practices"]
["der.19","m",0.47761999999999999,"use Role-Based Access Control"," in the utility's DERMS system to limit privilege to modify DERMS settings","control access"]
["der.19","m",0.71667800000000004,"validate inputs"," (for consistency) in the DERMS control commands.","verify"]
["der.19","m",0.47203899999999999,"authenticate messages"," received by the DERMS from FDEMS systems","authenticate"]
["der.19","m",0.33321899999999999,"check message integrity"," for messages received by the DERMS from an FDEMS","check integrity"]
["der.20","t",0.51216600000000001,"Compromised DERMS Weather Data Modifies DER Output Forecasts"]
["der.20","d",0.76701299999999994,"A threat agent accesses the DERMS system and modifies the weather data being used to forecast loads and DER generation/storage. Consequently, less than optimal requests are sent to DER systems, causing financial impacts to the utility."]
["der.20","v",0.96310099999999998,"system relies on credentials that are easy to obtain for access"," to the DERMS system,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.20","v",0.88186399999999998,"system permits messages to be modified by unauthorized individuals"," for the DERMS data access from remote locations,","Use of Insecure Protocols (6.3.1.21)"]
["der.20","v",0.93634600000000001,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," for the DERMS data access from remote locations,","Use of Insecure Protocols (6.3.1.21)"]
["der.20","v",0.61380299999999999,"users lack visibility that unauthorized changes were made"," to DERMS data.","Inadequate Change and Configuration Management (6.2.2.5)"]
["der.20","i",0.162878,"Inefficient or cost-ineffective power system operated by the utility"]
["der.20","i",0.16192999999999999,"Financial impact to the utility"]
["der.20","i",9.8295900000000005E-2,"Utility legal costs related to DER owner litigation for unfair practices"]
["der.20","m",0.40834599999999999,"use Role-Based Access Control"," in the utility's DERMS system to limit privilege to access weather data","control access"]
["der.20","m",0.62534400000000001,"authenticate messages"," in the DERMS communication protocols","authenticate"]
["der.20","m",0.75583199999999995,"check message integrity"," for DERMS control commands","check integrity"]
["der.20","m",0.92905499999999996,"validate inputs"," (for consistency) in the DERMS control commands","verify"]
["der.21","t",0.22281000000000001,"DER System Registration Information Stolen from DERMS"]
["der.21","d",0.51490100000000005,"A threat agent accesses the DERMS systems and steals the customer DER registration information, using it for industrial espionage or other purposes, causing confidentiality impacts to these utility customers. For example, if stolen, this information could allow other DER owners to manipulate the retail (or wholesale) energy markets, for instance by bidding in prices or energy products that make it less likely the DER system (whose data was stolen) would be willing/able to bid, or if they did bid, making it less cost-effective for them."]
["der.21","v",0.60906000000000005,"unnecessary access is permitted to system functions"," in the DERMS system,","Unnecessary System Access (6.2.2.6)"]
["der.21","v",0.22952700000000001,"system makes private data accessible to unauthorized individuals"," while at rest.","Sensitive Data Protection Vulnerability (6.3.1.15)"]
["der.21","v",0.85305200000000003,"system relies on credentials that are easy to obtain for access"," to customer DER registration information","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.21","i",0.67948200000000003,"Breach of utility confidential information"]
["der.21","i",0.28055799999999997,"Financial losses due to the security breach"]
["der.21","m",4.6817400000000002E-2,"use Role-Based Access Control"," in the utility's DERMS system","control access"]
["der.21","m",0.61727699999999996,"encrypt data at rest"," specifically DER registration data","encrypt"]
["der.21","m",0.90803900000000004,"require approved cryptographic algorithms"," for encrypting DER registration data","secure design and implementation"]
["der.21","m",0.81951499999999999,"require intrusion detection and prevention"," as part of the DERMS network and system management capabilities","detect"]
["der.21","m",0.97812200000000005,"create audit logs"," that records accesses to the registration data files","audit"]
["der.21","m",0.35366999999999998,"protect credentials"," that permit access to customer DER registration data","secure design and implementation"]
["der.22","t",9.8194000000000007E-3,"DELETED"]
["der.23","t",0.73768,"Utility Makes Incorrect Decisions Based on Invalid DER Information"]
["der.23","d",0.53493500000000005,"A threat agent obtains control of the DER management system of a Retail Energy Provider (REP) (who might be a department within a utility or could be a Third Party). The REP then provides invalid information to the utility grid operators on the future availability of large amounts of DER energy and ancillary services. This causes the grid operator to make less-than-optimal market decisions on purchasing energy and ancillary services."]
["der.23","v",0.70259499999999997,"system relies on credentials that are easy to obtain for access"," to the DER system","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.23","i",0.21710499999999999,"Potential financial losses (or gains) for the customers owning the DER systems"]
["der.23","i",0.61643700000000001,"Major financial and reputation losses for the REP"]
["der.23","m",0.802118,"protect credentials"," for modification of planning data to be provided to the utility from the REP","secure design and implementation"]
["der.23","m",0.14283199999999999,"use Role-Based Access Control"," to limit privilege to modify planning data to be provided to the utility from REP","control access"]
["der.23","m",0.19281499999999999,"create audit logs"," of interactions with the DERMS system that would have impact on the data ultimately sent to the utility","audit"]
["der.23","m",0.54718100000000003,"require strong passwords"," for modification of planning data to be provided to utility from the REP","secure operations"]
["der.23","m",0.64986299999999997,"require multi-factor authentication"," for modification of planning data to be provided to utility from the REP","authenticate"]
["der.23","m",0.12798200000000001,"require non-repudiation"," for data communicated to the utility from the REP","verify"]
["der.24","t",0.68696400000000002,"Retail Energy Provider Misuses Confidential/Private Information from DERMS"]
["der.24","d",0.72739100000000001,"A Retail Energy Provider (REP) that manages a group of DER systems normally receives commands from the DERMS on what energy levels and ancillary services that group of DER systems should provide. A threat agent accesses confidential or private information in the DERMS DER database on customers who own DER systems, and uses that information to \"market\" to those customers."]
["der.24","v",0.48743599999999998,"system makes private data accessible to unauthorized individuals"," while in storage,","Sensitive Data Protection Vulnerability (6.3.1.15)"]
["der.24","v",5.5828500000000003E-3,"system relies on credentials that are easy to obtain for access"," to read private DER data, when communicating using the REP to DERMS protocol","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.24","v",0.62009700000000001,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in the DERMS communication protocols used to access REP systems,","Use of Insecure Protocols (6.3.1.21)"]
["der.24","v",6.5442799999999995E-2,"unnecessary access is permitted to system functions"," in the DERMS.","Unnecessary System Access (6.2.2.6)"]
["der.24","i",0.93383899999999997,"Utility legal costs related to DER owner litigation for loss of confidential and private information"]
["der.24","m",7.4588700000000003E-3,"use Role-Based Access Control"," at the REP and in the utility's DERMS system","control access"]
["der.24","m",0.81719799999999998,"authenticate messages"," in the DERMS protocols","authenticate"]
["der.24","m",0.11254599999999999,"create audit logs"," of all accesses to confidential information in the DERMS system","audit"]
["der.24","m",0.573604,"generate alerts"," in the case of unauthorized access to confidential information for the DERMS and send them to the affected parties","alert"]
["der.24","m",0.26730500000000001,"isolate functions"," for retrieval of DER data required by an REP from the DERMS and for retrieval of private data associated with a DER","isolate"]
["der.25","t",0.92805000000000004,"Threat Agent Unexpectedly Reduces Retail Energy Provider Output"]
["der.25","d",0.15349199999999999,"A threat agent obtains control of the DER management system of a REP (who might be a department within a utility or could be a Third Party). The REP provides information to the utility grid operators that all DER systems will continue to function normally but then the compromised DER management system shuts down large amounts of DER energy and ancillary services."]
["der.25","v",0.49297800000000003,"system relies on credentials that are easy to obtain for access"," to the DER management system,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["der.25","v",0.76252299999999995,"system assumes data inputs and resulting calculations are accurate"," in the data from the REP.","Business Logic Vulnerability (6.3.1.8)"]
["der.25","i",0.21148500000000001,"Potential power outages for the grid operator"]
["der.25","i",0.58863299999999996,"Potential financial losses for customers owning the DER systems"]
["der.25","i",0.62787099999999996,"Potential major financial and reputation losses for the REP"]
["der.25","m",0.37088700000000002,"restrict application access"," to the DER management system","control access"]
["der.25","m",0.69467299999999998,"protect credentials"," for access to functions that determine the energy to be available from an REP","secure design and implementation"]
["der.25","m",0.31905800000000001,"cross check"," the DER data provided to the utility with the DER system performance.","verify"]
["der.25","m",0.29428199999999999,"require strong passwords"," for access to functions that determine the energy to be available from an REP","secure operations"]
["der.25","m",0.43103000000000002,"require multi-factor authentication"," for access to functions that determine the energy to be available from an REP","authenticate"]
["der.26","t",0.99263100000000004,"Spoofed Microgrid Status Messages Cause Disconnect from Grid"]
["der.26","d",0.20000799999999999,"A threat agent spoofs messages that appear to come from a microgrid to the utility. The messages indicate that the pre-established conditions have been met for the utility to disconnect from the microgrid. The utility disconnects from the microgrid, even though these conditions are not actually met."]
["der.26","v",0.67762900000000004,"system permits messages to be modified by unauthorized individuals"," (e.g., status messages from the microgrid).","Use of Insecure Protocols (6.3.1.21)"]
["der.26","v",0.77966100000000005,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," (e.g., status messages from the microgrid).","Use of Insecure Protocols (6.3.1.21)"]
["der.26","i",0.49633899999999997,"Since the microgrid may not be prepared to disconnect from the grid or may be brought down during the grid outage, it will experience a complete outage"]
["der.26","i",0.96837899999999999,"Legal costs for litigation with the adversely affected customers"]
["der.26","m",0.30159799999999998,"authenticate messages"," that communicate microgrid status to the utility, where that status communicates whether or not pre-established disconnect conditions have been met,","authenticate"]
["der.26","m",0.81376400000000004,"confirm action"," to disconnect microgrid with the microgrid operator, if microgrid status indicates that pre-established disconnect conditions have been met.","verify"]
["wampac.1","t",0.58077699999999999,"Denial of Service Attack Impairs PTP Service"]
["wampac.1","d",0.75895500000000005,"A set of Phasor Measurement Units (PMUs) receive their time via network communication from a Precision Time Protocol (PTP) server. A threat agent is able to perform a denial of service attack against PTP either by leveraging vulnerabilities in the PTP service itself or by flooding it with high volume of traffic or malformed packets targeting open ports that are not required by PTP. This leads to delays or lack of functionality of the PTP service, translating into the inability of the PMUs to correctly timestamp their measurements."]
["wampac.1","v",0.72205600000000003,"network interfaces permit unnecessary traffic flows"," for the network hosting the PTP server,","Inadequate Network Segregation (6.5.1.2)"]
["wampac.1","v",0.60391899999999998,"unnecessary system services are configured to run"," on the PTP server","Unneeded Services Running (6.4.3.2)"]
["wampac.1","v",0.54026600000000002,"system may become overwhelmed by traffic flooding or malformed traffic"," because of deficiencies in the network stack, PTP implementation or required auxiliary services,","Error Handling Vulnerability (6.3.1.6)"]
["wampac.1","v",0.15406800000000001,"unnecessary access is permitted to critical functions"," in the PTP service.","Unnecessary System Access (6.2.2.6)"]
["wampac.1","i",0.31694600000000001,"All impacts presented in Table 7, as potentially caused by loss of measurements due to lack of time synchronization"]
["wampac.1","m",0.47887600000000002,"restrict network service access"," to the PTP service","control access"]
["wampac.1","m",0.57717200000000002,"isolate functions"," between the PTP service and the auxiliary services running on the same server (e.g., resource prioritization)","isolate"]
["wampac.1","m",0.98551800000000001,"configure for least functionality"," the PTP server","secure design and implementation"]
["wampac.1","m",0.61086099999999999,"verify correct operation"," of the PTP server in order to remain operational when subjected to erroneous traffic and large amounts of traffic in the network stack, PTP and required auxiliary services","verify"]
["wampac.1","m",0.36669299999999999,"require intrusion detection and prevention"," ","detect"]
["wampac.1","m",0.29574800000000001,"test before installation"," to verify that the IDS/IPS solution does not compromise normal operation of the system","test"]
["wampac.1","m",0.51855799999999996,"restrict access"," to the GPS clock (locally or via the network).","control access"]
["wampac.1","m",0.71640400000000004,"restrict network access"," to the network hosting the PTP server","control access"]
["wampac.2","t",3.34582E-2,"Network Equipment used to Spoof WAMPAC Messages"]
["wampac.2","d",0.64251800000000003,"A threat agent leverages vulnerabilities to perform a spoofing attack and inject messages in WAMPAC network equipment (router, switch, etc.). The altered messages might be either measurements used as input to the WAMPAC algorithms, or commands to phasor measurement units (PMUs) or phasor data concentrators (PDCs)."]
["wampac.2","v",0.87204499999999996,"unnecessary access is permitted to networking components"," for WAMPAC networking devices,","Unnecessary System Access (6.2.2.6)"]
["wampac.2","v",0.55152800000000002,"system permits messages to be modified by unauthorized individuals"," in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),","Use of Insecure Protocols (6.3.1.21)"]
["wampac.2","v",0.83208599999999999,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),","Use of Insecure Protocols (6.3.1.21)"]
["wampac.2","v",0.87890299999999999,"commands or other messages may be inserted on the network by unauthorized individuals"," in the standard industry-wide WAMPAC protocols (such as IEEE C37.118 which has no built-in security capabilities),","Use of Insecure Protocols (6.3.1.21)"]
["wampac.2","v",0.49617899999999998,"system permits networking components to be accessed by unauthorized individuals"," (e.g., routers, switches, etc.),","Unnecessary System Access (6.2.2.6)"]
["wampac.2","v",0.40421800000000002,"software patches are not checked regularly to ensure that they are current"," on the network components (e.g., routers, switches, etc.).","Inadequate Patch Management Process (6.2.2.4)"]
["wampac.2","i",0.22373299999999999,"All impacts presented in Table 7, as potentially caused by altered measurements or loss of measurements"]
["wampac.2","m",0.20185500000000001,"encrypt link layer"," on the WAMPAC network","encrypt"]
["wampac.2","m",0.211675,"encrypt application layer"," on the WAMPAC network","encrypt"]
["wampac.2","m",0.94935400000000003,"check message integrity"," (digital signatures) of commands and data received by the WAMPAC components","check integrity"]
["wampac.2","m",0.48428900000000003,"restrict network access"," to the WAMPAC network","control access"]
["wampac.2","m",0.18688399999999999,"detect unauthorized devices"," in the WAMPAC network","detect"]
["wampac.2","m",0.40398899999999999,"detect unusual patterns"," in WAMPAC components traffic communications","detect"]
["wampac.2","m",5.4105300000000002E-2,"maintain patches"," on WAMPAC networking components","secure operations"]
["wampac.2","m",0.88653099999999996,"use Role-Based Access Control"," to limit privileges to access WAMPAC networking components","control access"]
["wampac.2","m",0.70285399999999998,"authenticate users"," of WAMPAC networking components","authenticate"]
["wampac.3","t",2.0425599999999999E-2,"Improper PDC Configuration Interferes with Transmission of Measurement Data"]
["wampac.3","d",0.82254400000000005,"An insider is able to gain access to the network to which a PDC is connected and to the PDC's credentials, assuming credentials are in place. This individual compromises (malicious intent) or misconfigures (accidentally) the PDC. Consequently, the PDC does not recognize certain PDCs/PMUs and sends incomplete measurement data up in the WAMPAC hierarchy."]
["wampac.3","v",0.96537600000000001,"network interfaces permit unnecessary traffic flows"," to the PDC,","Inadequate Network Segregation (6.5.1.2)"]
["wampac.3","v",0.158192,"design permits unnecessary privileges"," to the PDC,","Unnecessary System Access (6.2.2.6)"]
["wampac.3","v",0.84515600000000002,"users lack visibility that unauthorized changes were made"," to the PDC configuration,","Inadequate Change and Configuration Management (6.2.2.5)"]
["wampac.3","v",0.572546,"system relies on credentials that are easy to obtain for access"," to configuration and programming software on the PDC,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["wampac.3","v",5.9982800000000003E-2,"remote access may be obtained by unauthorized individuals"," to the PDC,","Unnecessary System Access (6.2.2.6)"]
["wampac.3","i",6.5565600000000002E-2,"All impacts presented in Table 7, as potentially caused by loss of measurements"]
["wampac.3","m",0.68566300000000002,"require redundancy"," in PDCs using vendor diversity","ensure availability"]
["wampac.3","m",0.75110600000000005,"restrict network service access"," at multiple layers to prevent unauthorized individuals from gaining access to the PDC","control access"]
["wampac.3","m",0.68494500000000003,"restrict remote access"," to the PDC","control access"]
["wampac.3","m",0.69240400000000002,"detect unauthorized connections"," captured in the communication patterns to and from the PDC","detect"]
["wampac.3","m",0.50960099999999997,"require approved cryptographic algorithms"," for authentication and message integrity on the WAMPAC network","secure design and implementation"]
["wampac.3","m",0.29155900000000001,"enforce restrictive firewall rules"," for access to the PDC host network","control access"]
["wampac.3","m",0.85132099999999999,"require multi-factor authentication"," for remote access to PDC configuration functions","authenticate"]
["wampac.3","m",8.2771700000000004E-2,"use Role-Based Access Control"," to limit privilege to modify the PDC configuration","control access"]
["wampac.4","t",0.57004500000000002,"Measurement Data Compromised due to PDC Authentication Compromise"]
["wampac.4","d",0.68259199999999998,"Although access control and connection authentication from a PMU into a PDC are in place, these are compromised. This may be due to a backdoor not subject to the usual controls, social engineering, network sniffing to gain credentials or an attack on the authentication database to modify or steal credential information. This allows inadvertent or malicious introduction of false measurement data."]
["wampac.4","v",0.25619599999999998,"unnecessary network access is permitted"," on the network  hosting the authentication database,","Unnecessary System Access (6.2.2.6)"]
["wampac.4","v",0.18424499999999999,"credentials are accessible in the clear"," while in transit or at rest,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["wampac.4","v",0.33773700000000001,"system permits bypass of access control mechanisms"," ","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["wampac.4","v",0.83071600000000001,"system permits unauthorized changes"," to the PDC/PMU configuration, which may include connection information","Inadequate Change and Configuration Management (6.2.2.5)"]
["wampac.4","i",0.59323800000000004,"All impacts presented in Table 7, as potentially caused by altered measurements."]
["wampac.4","m",0.80472299999999997,"authenticate devices"," to the PDC, including coverage of all possible paths for communication, including any \"back doors\" remaining from development","authenticate"]
["wampac.4","m",0.39335599999999998,"restrict network service access"," to all interfaces on the PDC,","control access"]
["wampac.4","m",2.1227099999999999E-2,"protect credentials"," used to authenticate the PMU to the PDC,","secure design and implementation"]
["wampac.4","m",0.39211400000000002,"change default credentials"," ","secure operations"]
["wampac.4","m",8.67869E-2,"encrypt data at rest"," specifically credentials","encrypt"]
["wampac.4","m",0.40584500000000001,"encrypt communication paths"," used to transmit credentials","encrypt"]
["wampac.4","m",0.398476,"require approved key management"," ","secure design and implementation"]
["wampac.4","m",0.59848500000000004,"restrict remote access"," to the network hosting authentication database","control access"]
["wampac.4","m",0.27611400000000003,"require intrusion detection and prevention"," for the network hosting authentication database","detect"]
["wampac.4","m",5.5774600000000001E-2,"authenticate users"," to the network hosting authentication database","authenticate"]
["wampac.4","m",0.55211399999999999,"detect unauthorized access"," to the network hosting authentication database","detect"]
["wampac.4","m",0.52049299999999998,"protect security configuration"," that lists the systems permitted to connect to the PDC","secure design and implementation"]
["wampac.5","t",0.82208999999999999,"Improper Phasor Gateway Configuration Obscures Cascading Failures"]
["wampac.5","d",0.63585400000000003,"An authorized or unauthorized insider (e.g., social-engineered by a threat agent or accidentally) is able to gain access and misconfigures a phasor gateway, allowing less synchrophasor measurement data to be shared with other phasor gateways or altering the tagging of PMU ID associated with the shared data. This action results in a delay in other utilities' visibility to a cascading failure across utilities."]
["wampac.5","v",0.21663099999999999,"system relies on credentials that are easy to obtain for access"," to configuration and programming software on the phase gateway,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["wampac.5","v",0.97558599999999995,"configuration changes are not verified for correctness"," ","Inadequate Change and Configuration Management (6.2.2.5)"]
["wampac.5","v",0.69764099999999996,"remote access may be obtained by unauthorized individuals"," to the phasor gateway,","Unnecessary System Access (6.2.2.6)"]
["wampac.5","v",0.30156100000000002,"critical components exhibit single point of failure"," such as phasor gateways.","Insufficient Redundancy (6.5.1.5)"]
["wampac.5","i",0.84182599999999996,"All impacts presented in Table 7, as potentially caused by altered data or loss of data, for Special Protection applications"]
["wampac.5","m",0.99589499999999997,"require reconfiguration in test mode"," for gateways","test"]
["wampac.5","m",0.31284099999999998,"require two-person rule"," of test results that must be verified and approved by personnel/entities other than those that carried out the reconfiguration","verify"]
["wampac.5","m",0.791717,"require redundancy"," of phasor gateways (vendor diversity)","ensure availability"]
["wampac.5","m",0.36888900000000002,"detect unauthorized configuration"," at the gateway level","detect"]
["wampac.5","m",0.61096799999999996,"require multi-factor authentication"," for remote access to phasor gateway configuration functions","authenticate"]
["wampac.5","m",0.10666100000000001,"use Role-Based Access Control"," to limit privilege to modify the phasor gateway configuration","control access"]
["wampac.6","t",0.35440700000000003,"Compromised Communications between PMUs and Control Center"]
["wampac.6","d",0.96526800000000001,"WAMPAC communications are slowed down or stopped by manipulating the communications link between the PMUs and the control center. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack."]
["wampac.6","v",0.33196100000000001,"unnecessary network access is permitted"," to network components","Unnecessary System Access (6.2.2.6)"]
["wampac.6","v",0.62770800000000004,"users lack visibility of threat activity"," specifically unexpected access to network components or unusual traffic on the network","Inadequate Anomaly Tracking (6.4.4.1)"]
["wampac.6","v",0.14626600000000001,"system relies on credentials that are easy to obtain for access"," to the WAMPAC network.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["wampac.6","i",0.17972399999999999,"All impacts presented in Table 7, as potentially caused by loss of measurements"]
["wampac.6","m",0.69428800000000002,"detect unauthorized access"," in network traffic on the PMU/PDC communication links","detect"]
["wampac.6","m",0.24581500000000001,"restrict network access"," on the PMU/PDC communication links","control access"]
["wampac.6","m",7.7900999999999998E-2,"restrict network access"," through traffic throttling mechanisms such as router access control lists (ACLs) and firewalls","control access"]
["wampac.6","m",0.95680399999999999,"require redundancy"," for the stability analysis using SCADA data (using independent communication networks)","ensure availability"]
["wampac.6","m",0.45298300000000002,"require intrusion detection and prevention"," ","detect"]
["wampac.6","m",0.85720200000000002,"test before installation"," of an IDS/IPS solution to verify that it does not compromise normal operation of the system","test"]
["wampac.7","t",8.0934900000000004E-2,"Compromised WAMPAC Historical Data Impacts Grid Stability"]
["wampac.7","d",0.28278999999999999,"An insider is able to gain unauthorized access to the network to which a WAMPAC historian is connected and to the historian host/database software's credentials, assuming credentials are in place. The insider corrupts or deletes the measurement data from the database."]
["wampac.7","v",0.49446499999999999,"network interfaces permit unnecessary traffic flows"," to the historian,","Inadequate Network Segregation (6.5.1.2)"]
["wampac.7","v",0.44381900000000002,"unnecessary network access is permitted"," allowing access to the historian,","Unnecessary System Access (6.2.2.6)"]
["wampac.7","v",0.92810800000000004,"users lack visibility of unapproved access"," on the WAMPAC network,","Inadequate Anomaly Tracking (6.4.4.1)"]
["wampac.7","v",0.114992,"users lack visibility that unauthorized changes were made"," to the WAMPAC historian database,","Inadequate Change and Configuration Management (6.2.2.5)"]
["wampac.7","v",0.51898100000000003,"system relies on credentials that are easy to obtain for access"," to configuration and programming software on the historian,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["wampac.7","v",0.53940699999999997,"remote access may be obtained by unauthorized individuals"," to the historian from remote networks.","Unnecessary System Access (6.2.2.6)"]
["wampac.7","i",0.36194999999999999,"All impacts presented in Table 7, as potentially caused by loss of data, for Monitoring and Control applications"]
["wampac.7","m",0.32732699999999998,"restrict remote access"," to the historian","control access"]
["wampac.7","m",0.48551800000000001,"restrict application access"," to prevent unauthorized individuals from gaining access to the historian","control access"]
["wampac.7","m",0.33067400000000002,"require read-only access"," to historian data","control access"]
["wampac.7","m",0.90322000000000002,"detect unauthorized connections"," in communications to and from the historian","detect"]
["wampac.7","m",0.96320300000000003,"detect abnormal behavior"," on the measurement database","detect"]
["wampac.7","m",2.8768599999999998E-2,"generate alerts"," for unexpected activity on the measurement database","alert"]
["wampac.7","m",0.71443199999999996,"check message integrity"," (use cryptography) on the WAMPAC network","check integrity"]
["wampac.7","m",0.27427600000000002,"enforce restrictive firewall rules"," for access to the historian","control access"]
["wampac.7","m",0.13696900000000001,"require multi-factor authentication"," for remote access to modify data managed by the historian","authenticate"]
["wampac.7","m",0.43182199999999998,"use Role-Based Access Control"," to limit privilege to modify data managed by the historian","control access"]
["wampac.8","t",0.46553699999999998,"Malware in PMU/PDC Firmware Compromises Data Collection"]
["wampac.8","d",0.150482,"A threat agent inserts firmware into PMU/PDC that alters measurements while they are collected. The altering mechanism can be triggered at all times, randomly or by certain events (e.g., time of day, certain date, etc.) that are assumed to inflict significant damage."]
["wampac.8","v",0.84288600000000002,"system permits unauthorized changes"," at the manufacturer.","Inadequate Change and Configuration Management (6.2.2.5)"]
["wampac.8","v",0.35248699999999999,"users lack visibility that unauthorized firmware has been installed"," before running it","Inadequate Change and Configuration Management (6.2.2.5)"]
["wampac.8","v",0.92253300000000005,"system permits unauthorized installation of software or firmware"," ","Inadequate Change and Configuration Management (6.2.2.5)"]
["wampac.8","i",0.60512500000000002,"All impacts presented in Table 7, as potentially caused by altered measurements"]
["wampac.8","i",0.86131999999999997,"Significant effort/cost invested in troubleshooting the systems given the lack of measurement consistency, followed by equipment replacement"]
["wampac.8","m",4.5565599999999998E-2,"implement configuration management"," for controlling modifications to firmware to ensure that a PMU/PDC is protected against inadequate or improper modifications before, during, and after firmware manufacturing","track"]
["wampac.8","m",0.383303,"check software execution integrity"," in firmware, since software may be compromised when loaded for execution","check integrity"]
["wampac.8","m",0.21401899999999999,"require redundancy"," in PMUs/PDCs using vendor diversity","ensure availability"]
["wampac.8","m",0.807257,"restrict system access"," for firmware install/updates","control access"]
["wampac.9","t",0.61197999999999997,"DELETED"]
["wampac.10","t",5.33623E-3,"Compromised PMU/PDC/Phasor Gateway Metadata"]
["wampac.10","d",2.6563300000000001E-2,"A threat agent is able to gain unauthorized access to the credentials of the PMU/PDC/Phasor Gateway metadata that describes the data structure, assuming credentials are in place, and corrupts or deletes the associated metadata from the database."]
["wampac.10","v",0.41867700000000002,"users lack visibility of unapproved access"," on the WAMPAC backend,","Inadequate Anomaly Tracking (6.4.4.1)"]
["wampac.10","v",0.91130900000000004,"unnecessary network access is permitted"," to the WAMPAC backend network hosting the gateway metadata database,","Unnecessary System Access (6.2.2.6)"]
["wampac.10","v",0.30978600000000001,"system relies on credentials that are easy to obtain for access"," to the gateway metadata database.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["wampac.10","i",0.90827000000000002,"All impacts presented in Table 7, as potentially caused by altered measurements"]
["wampac.10","i",0.18438399999999999,"Significant effort/cost invested in troubleshooting the systems given the inconsistencies in PMU data attribution"]
["wampac.10","m",0.24015900000000001,"detect unauthorized configuration"," in the configuration databases","detect"]
["wampac.10","m",0.79227300000000001,"restrict database access"," to applications that require access","control access"]
["wampac.10","m",0.31276500000000002,"require multi-factor authentication"," for local administrators that require access","authenticate"]
["wampac.10","m",0.134856,"encrypt data at rest"," for database contents related to the PMU configurations","encrypt"]
["wampac.10","m",0.32464900000000002,"restrict network access"," to the WAMPAC backend network","control access"]
["wampac.11","t",0.77071000000000001,"Compromised Communications between Substations"]
["wampac.11","d",0.98734100000000002,"An insider delays local measurement data exchange between substations by compromising the integrity of the WAMPAC communication link between substations. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack. Note: The impact of the failure scenario presented below is assessed under the assumption that WAMPAC is used as part of a special protection scheme (SPS)."]
["wampac.11","v",0.96292699999999998,"unnecessary network access is permitted"," to network components,","Unnecessary System Access (6.2.2.6)"]
["wampac.11","v",0.66056800000000004,"users lack visibility of threat activity"," specifically unexpected access to network components or unusual traffic on the network,","Inadequate Anomaly Tracking (6.4.4.1)"]
["wampac.11","v",0.96212900000000001,"system relies on credentials that are easy to obtain for access"," to the WAMPAC network.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["wampac.11","i",0.80395499999999998,"All impacts presented in Table 7, as potentially caused by altered measurements or loss of data, for Special Protection and Control applications"]
["wampac.11","m",0.79984999999999995,"restrict network access"," to administrative functions of network components,","control access"]
["wampac.11","m",0.112691,"verify correct operation"," by using redundant measurements (redundant PDCs) at each substation end transmitted through an independent communication network to double-check the transmitted measurements","verify"]
["wampac.11","m",0.90440799999999999,"detect unauthorized access"," on the substation communication links","detect"]
["wampac.11","m",0.27329700000000001,"restrict network access"," on the substation communication links","control access"]
["wampac.11","m",0.62770400000000004,"restrict network access"," to throttle network traffic, using solutions such as router access control lists (ACLs) and firewalls","control access"]
["wampac.11","m",0.59297200000000005,"require intrusion detection and prevention"," ","detect"]
["wampac.11","m",0.92493300000000001,"test before installation"," of IDS/IPS solution to verify that it does not compromise normal operation of the system","test"]
["wampac.11","m",0.53358000000000005,"require strong passwords"," for access to the WAMPAC network","secure operations"]
["wampac.11","m",0.74367799999999995,"require multi-factor authentication"," for access to the WAMPAC network","authenticate"]
["wampac.11","m",0.41682799999999998,"protect credentials"," used to access the WAMPAC network in both user and administrative processes","secure design and implementation"]
["wampac.12","t",0.55264100000000005,"GPS Time Signal Compromise"]
["wampac.12","d",0.69890699999999994,"An attacker blocks or alters the GPS time signal that is associated with the synchrophasor measurements. The attacker can perform either a GPS spoofing or GPS jamming attack, where the GPS receiver is deceived by a more powerful signal resulting in the GPS signal being intentionally blocked or altered."]
["wampac.12","v",0.87863199999999997,"spoofed signal is either difficult or infeasible to distinguish from a legitimate signal"," that provides GPS-based time synchronization.","Use of Insecure Protocols (6.3.1.21)"]
["wampac.12","i",0.700874,"All impacts presented in Table 7, as potentially caused by altered measurements (in the case of GPS spoofing) or loss of measurements (in the case of GPS jamming)"]
["wampac.12","i",0.39516200000000001,"Significant effort/cost invested in troubleshooting the systems given the lack of time signal consistency"]
["wampac.12","m",0.64097700000000002,"design for trust"," in the synchronization mechanism for the synchrophasor signals (e.g., use internal clocks rather than GPS for the time signal)","secure design and implementation"]
["wampac.12","m",0.71887800000000002,"validate signal"," by using a redundant GPS signal transmitted through a communication network to detect the time signal drift in the GPS time signal (e.g., use NTP or PTP)","verify"]
["wampac.12","m",0.675682,"require fail-over"," for the local GPS signal to either a GPS signal brought from another part of the grid through a communication network or internal clocks for when an intrusion is detected","ensure availability"]
["et.1","t",0.128665,"Custom Malware causes EV Overcharge and Explosion"]
["et.1","d",0.98586700000000005,"A threat agent directly accesses and compromises the Electric Vehicle (EV) firmware or inserts a Trojan horse to always indicate the EV is undercharged. Consequently, the battery becomes overcharged and may eventually explode."]
["et.1","v",6.6802E-2,"design, implementation, or maintenance permits system to enter a hazardous state"," by overcharging or draining the battery beyond limits,","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.1","v",0.34959200000000001,"system permits unauthorized changes"," to EV firmware using easily accessible interfaces,","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.1","v",0.84405699999999995,"system permits unauthorized changes"," to EV firmware.","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.1","i",0.28787600000000002,"Possible loss of life and property damage"]
["et.1","i",0.21598300000000001,"A tragic accident can lead to a loss of public confidence"]
["et.1","m",0.33097599999999999,"protect from overcharge"," by using a fail-safe battery hardware, providing a physical prevention of such an attack,","enforce limits"]
["et.1","m",0.84995699999999996,"check software execution integrity"," in EV firmware, since software may be compromised when loaded for execution,","check integrity"]
["et.1","m",0.38936399999999999,"authenticate users"," that modify firmware","authenticate"]
["et.2","t",0.75131400000000004,"Simultaneous Fast Charges cause Transformer Overload"]
["et.2","d",7.86409E-2,"A threat agent is able to compromise a fast-charging station management system. When a large number of electric vehicles are connected to charging stations, the threat agent modifies the charge-staggering algorithm such that fast-charging begins concurrently for all the EVs, thus overloading the distribution transformer, causing a local outage, and preventing the EVs from being charged."]
["et.2","v",0.56415899999999997,"system permits unauthorized changes"," to the fast-charging station management system software and configuration,","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.2","v",0.89483299999999999,"design, implementation, or maintenance permits system to enter a hazardous state"," by letting circuits become overloaded in the distribution transformer.","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.2","i",0.79805300000000001,"Power outage to EVs and the charging station"]
["et.2","i",0.76125600000000004,"Damage to the distribution transformer"]
["et.2","m",0.79002399999999995,"authenticate users"," for access to configuration and software files for the fast-charging station management system","authenticate"]
["et.2","m",0.50445600000000002,"check software file integrity"," of fast-charging station management software and configuration files","check integrity"]
["et.2","m",0.96999299999999999,"generate alarms"," on changes to settings such as the number of EVs allowed to charge simultaneously in the design of the management system","alert"]
["et.2","m",0.120476,"require circuit breaker"," to avoid overloading of distribution transformer","enforce limits"]
["et.3","t",0.96336200000000005,"Virus Propagated between EVs and EV Service Equipment (EVSE)"]
["et.3","d",0.31584899999999999,"A threat agent such as a disgruntled employee or an employee subjected to social engineering could inject a virus into the computer system of an EV at an EV maintenance center or at a factory. Although not present today, future wireless communication technologies for Vehicle-to-Infrastructure (V2I) could enable a vehicle to establish additional data communications channels through which the virus infects public charging stations. A public charging station may in turn infect other EVs. The virus could harm other key functions for car safety in the EV as well as charging functions in the EV and EVSE (Electric Vehicle Service Equipment)."]
["et.3","v",0.23838200000000001,"system permits installation of malware"," in an EV, at the EV factory and maintenance center,","Inadequate Malware Protection (6.4.2.3)"]
["et.3","v",0.84350599999999998,"system permits installation of malware"," in the public charging station system,","Inadequate Malware Protection (6.4.2.3)"]
["et.3","v",0.70482699999999998,"critical communication paths are not isolated from communication paths that require fewer protections to operate"," specifically, EV charging and conventional data transmission during charging,","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.3","v",0.75039199999999995,"system permits installation of malware"," in the public charging station system or EV being charged, during charging,","Inadequate Malware Protection (6.4.2.3)"]
["et.3","v",0.34771400000000002,"critical functions are not isolated from those that require fewer protections to operate"," specifically car safety functions in the EV are not isolated from the more vulnerable battery related functions.","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.3","i",0.154971,"For affected EVs, range from minor nuisances to major safety problems which could cause loss of life"]
["et.3","i",0.76695000000000002,"For affected EVSE's, potential for arbitrary malfunctions and revenue loss due to shutting down charging stations for troubleshooting"]
["et.3","i",0.77228699999999995,"Negative publicity concerning EVs"]
["et.3","i",0.79884999999999995,"Litigation for owner of charging station"]
["et.3","m",0.217527,"implement configuration management"," of all code changes for EV software at the factory and maintenance center","track"]
["et.3","m",0.72299100000000005,"verify personnel"," at the factory and maintenance center","verify"]
["et.3","m",0.63429999999999997,"conduct code review"," of EV software at the factory and maintenance center","test"]
["et.3","m",0.94408599999999998,"vulnerability scan before install"," of EV software at the factory and maintenance center","test"]
["et.3","m",0.852356,"create audit logs"," of all code changes to EV software at the factory and maintenance center","audit"]
["et.3","m",3.6740299999999997E-2,"maintain anti-virus"," to check the public charging station system for any new, unauthorized software already present or detected in communications with the electric vehicles","secure operations"]
["et.3","m",0.27689900000000001,"isolate networks"," within the vehicle to separate the charging signals from other signals","isolate"]
["et.3","m",6.9171800000000006E-2,"isolate functions"," specifically charging functions from safety-related functions within electric vehicles","isolate"]
["et.3","m",0.38193700000000003,"check software execution integrity"," of EV software, since software may be compromised when loaded for execution","check integrity"]
["et.3","m",0.51679299999999995,"detect abnormal functionality"," (e.g., brake malfunctioning)","detect"]
["et.3","m",0.28750300000000001,"analyze anomalous events"," to determine if any anomalous behavior is caused by malicious code of EVs","analyze"]
["et.3","m",0.80461099999999997,"detect unusual patterns"," of data transfer during charging","detect"]
["et.4","t",0.27484399999999998,"EV Charging Locations Disclosed via Utility Database"]
["et.4","d",0.23777100000000001,"A threat agent cracks through an enterprise firewall and exploits a weak operating system password. Because of a poor database server security configuration, the threat agent is able to obtain confidential utility records regarding charging locations for specific vehicles from the database."]
["et.4","v",0.898339,"unnecessary access is permitted to the database"," in the firewall protecting the EV database server","Unnecessary System Access (6.2.2.6)"]
["et.4","v",0.86046800000000001,"system relies on credentials that are easy to obtain for access"," to the EV database server","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["et.4","v",0.66442299999999999,"unnecessary access is permitted to the database"," in the database server,","Unnecessary System Access (6.2.2.6)"]
["et.4","i",0.57696400000000003,"Privacy violation for customers"]
["et.4","i",0.48137200000000002,"Potential cost to the utility because of privacy lawsuits by customers"]
["et.4","i",0.75466900000000003,"Potential legal action by government or regulatory agencies against the utility if applicable privacy laws are violated"]
["et.4","i",0.38237300000000002,"Decrease in usage of utility charging stations and public relations issue for the utility"]
["et.4","m",0.97534600000000005,"detect abnormal behavior"," in enterprise perimeter protections","detect"]
["et.4","m",0.90027900000000005,"require password rule enforcement"," ","secure operations"]
["et.4","m",0.45291999999999999,"encrypt data at rest"," for database contents containing charging locations","encrypt"]
["et.4","m",0.15182799999999999,"restrict database access"," to applications that require them","control access"]
["et.4","m",3.0459199999999999E-2,"restrict database access"," to local administrators that use strong authentication","control access"]
["et.5","t",0.73133300000000001,"Compromised Protocol Translation Module Enables Control of EVs"]
["et.5","d",0.126495,"A threat agent is able to hack a protocol translation module that translates demand response messages to an electric vehicle, from the Open Automated Demand Response protocol (OpenADR) as used by the utility, to Smart Energy Profile (SEP) 2.0 as used by the vehicle.  Consequently, the agent is able to send any desired command to a vehicle or possibly to a large number of vehicles."]
["et.5","v",0.76747200000000004,"system permits unauthorized changes"," to code in the protocol translation module.","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.5","i",0.48635,"Potential for turning charging on or off for a large number of vehicles within a short time period"]
["et.5","i",0.16203200000000001,"Inconvenience to customers"]
["et.5","i",0.29069699999999998,"Cost of customer service situations"]
["et.5","i",0.27656399999999998,"Potential to overpower and damage transformer in a neighborhood"]
["et.5","m",0.343366,"restrict occurrence"," of charging stations in a neighborhood based upon transformer capabilities","secure design and implementation"]
["et.5","m",0.69295799999999996,"check software file integrity"," of translation modules","check integrity"]
["et.6","t",0.53701500000000002,"EVSE Connects Wirelessly to Wrong Meter and Compromises Billing"]
["et.6","d",0.82489100000000004,"Although this is not currently done, an EVSE in the future may connect wirelessly to a meter for identifying the meter to be responsible for the charge. The EVSE attaches to the incorrect meter. This causes the wrong entity to be billed for any vehicle using the misconfigured EVSE."]
["et.6","v",4.0873899999999998E-2,"inadequate binding of meter with energy users authorized to charge to that meter"," ","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["et.6","v",0.37185000000000001,"users lack visibility that unauthorized changes were made"," in the association between an EVSE and its smart meter.","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.6","i",0.221807,"Cost of billing disputes that could be raised by any customer"]
["et.6","i",0.61116999999999999,"Delay or loss of payment to the utility"]
["et.6","i",0.362485,"Likely cost to upgrade or replace the smart meter and/or EVSE"]
["et.6","m",0.44112600000000002,"authenticate devices"," between the EVSE and the smart meter","authenticate"]
["et.6","m",5.2845899999999996E-3,"require physical connection"," specifically a wired connection between the EVSE and smart meter","secure design and implementation"]
["et.6","m",0.69816999999999996,"prevent modification"," of the EVSE so that the definition of an associated meter is can only be changed by the customer that owns the meter.","control access"]
["et.7","t",0.459426,"Private Information Disclosed in Transit between EV and EVSE"]
["et.7","d",0.24945000000000001,"Private information exchanged between an EV and an EVSE is captured by a threat agent. For example, this might be information related to the EV owner's payment method, current location or home location. Such data exchanges are not currently done but are anticipated in the future."]
["et.7","v",0.75390599999999997,"system makes private data accessible to unauthorized individuals"," in the EV/EVSE communications channel.","Sensitive Data Protection Vulnerability (6.3.1.15)"]
["et.7","i",0.72389999999999999,"Loss of customer privacy"]
["et.7","i",0.84437600000000002,"Decreased acceptance of electric vehicles"]
["et.7","m",0.80773700000000004,"encrypt communication paths"," between an electric vehicle and the EVSE","encrypt"]
["et.8","t",0.123586,"Customer Misuses their EV Registration ID to Obtain Preferential Rate"]
["et.8","d",0.36196800000000001,"In a utility service territory where EVs are given preferential or special rates for electricity, a customer may misuse their EV registration identifier to power other electrical devices from the EVSE, thus getting that preferential rate for non-EV uses. In the case of Society of Automotive Engineers (SAE) J1772, the EV responds to the EVSE by clamping a 12V pulse width modulation (PWM) signal to either 3, 6, or 9 volts, depending on its status. A threat agent could plug a non-EV load into the EVSE and mimic the signal by using off-the-shelf resistors and diodes."]
["et.8","v",0.20547399999999999,"system permits device identifier to be misused"," to charge non-EV items when charging takes place based upon an EV registration identifier.","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.8","i",0.9103,"Loss of revenue to a utility"]
["et.8","i",0.66069299999999997,"The non-EV load may draw too much current and blow the fuse of the EVSE or trip the local circuit breaker"]
["et.8","m",0.79438799999999998,"authenticate devices"," with charging protocol that uses not easily forgeable data sent by the EV that allows the utility to determine it is an EV, Currrently, an EV does not exchange any data with the EVSE during charging. Future EV systems are expected to have additional communications channels for data exchange with the EVSE usable for this purpose.","authenticate"]
["et.8","m",0.14210100000000001,"detect unusual patterns"," specifically power usage patterns at preferential rates from units that do not appear to be an EV. Potential monitoring methods could use Revenue Protection schemes that identify charging beyond the charging limit of the EV, or note that the real EV is charging at the same time but at a different location from the fake EV,","detect"]
["et.9","t",0.297072,"EV Registration ID Stolen or Purchased to Obtain Preferential Rate"]
["et.9","d",6.4022300000000004E-2,"EV registration identities are stolen and used directly by the thief, or bought and sold in the black market so that they can be used to obtain preferential rates. This is of concern to a utility when the ID is used to identify the customer's payment method and/or the ID is used to charge a non-EV."]
["et.9","v",0.83630899999999997,"system permits device identifier to be misused"," to masquerade as valid customer whose EV is being charged when charging takes place based upon the identifier.","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.9","i",0.63515900000000003,"Illegitimate charges billed to legitimate owner of the EV registration ID"]
["et.9","i",0.85268600000000006,"Cost of associated customer service situation for this owner"]
["et.9","i",0.57567699999999999,"Likely loss of revenue by the utility"]
["et.9","m",0.209977,"require PIN"," (or verification code) with use of registration identity","authenticate"]
["et.9","m",0.15406300000000001,"require lockout"," for multiple failed retries","secure operations"]
["et.9","m",6.4190799999999998E-3,"authenticate devices"," with charging protocol that authenticates specific vehicles associated with a registration identity. This would require significant administration by the utility,","authenticate"]
["et.9","m",4.3159400000000001E-2,"verify EV owner"," association with the EV ID (e.g., user ID or license ID)","verify"]
["et.9","m",0.32005800000000001,"create audit logs"," for all uses of the EV ID","audit"]
["et.9","m",0.38923000000000002,"detect unauthorized use"," of the EV ID","detect"]
["et.9","m",0.77116700000000005,"learn from others"," such as credit card companies and ATMs when designing processes for EVs: (a) Cancellation of ID and reissuance of a new one, (b) Refunds to customers for fraudulent charges,","learn"]
["et.9","m",0.28796100000000002,"isolate functions"," specifically EV registration identity from payment method","isolate"]
["et.10","t",0.57546399999999998,"High Priority EV Registration Identity Misused to Obtain Faster Charging"]
["et.10","d",0.85030799999999995,"The registration identity of a high priority EV (such as a fire truck, ambulance, or police car) is copied and used by a normal priority vehicle to get high priority (faster) charging at a charging station."]
["et.10","v",8.8078299999999998E-2,"system permits device identifier to be misused"," to masquerade as a high priority EV that is being charged.","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.10","i",0.98641699999999999,"Possibility for slower charging of high priority or other normal priority vehicles"]
["et.10","m",0.84688399999999997,"require PIN"," or verification code (VIN number) with use of the EV registration identity","authenticate"]
["et.10","m",0.51130699999999996,"require lockout"," for multiple failed retries","secure operations"]
["et.10","m",0.97558,"authenticate devices"," with charging protocol that uses not easily forgeable data sent by the EV that allows the utility to determine that a high priority EV is being charged. Such vehicles could have a PKI certificate, for example. This may be feasible for public EVs although difficult for all EVs,","authenticate"]
["et.11","t",0.55254400000000004,"All EV Registration IDs Stolen from Utility"]
["et.11","d",3.3916599999999998E-2,"A utility has all its EV registration identities stolen and must therefore re-issue new registration identities to all EVs."]
["et.11","v",0.78858600000000001,"unnecessary network access is permitted"," for utility networks or databases that store or transmit registration identities,","Unnecessary System Access (6.2.2.6)"]
["et.11","v",0.170959,"unnecessary access is permitted to the database"," that stores registration identities,","Unnecessary System Access (6.2.2.6)"]
["et.11","v",0.14630499999999999,"system makes private data accessible to unauthorized individuals"," in the storage of registration identities,","Sensitive Data Protection Vulnerability (6.3.1.15)"]
["et.11","v",4.65835E-2,"system permits device identifier to be misused"," to masquerade as a trustworthy transaction. The ID could be misused by another person if the user's identity is not verified at the point of use. It can be misused for another EV if the EV is not authenticated when charging takes place.","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.11","i",0.499504,"Cost of reissuing identities and verifying receipt of new identities so that stolen ones can be cancelled"]
["et.11","i",0.65133099999999999,"Loss of revenue while any stolen identities remain valid"]
["et.11","i",0.68179000000000001,"Inconvenience to customers"]
["et.11","i",0.41312300000000002,"Cost of handling customer service situations"]
["et.11","m",0.53961800000000004,"require PIN"," or verification code with use of registration identity","authenticate"]
["et.11","m",0.30708999999999997,"require lockout"," for multiple failed attempts","secure operations"]
["et.11","m",0.79344000000000003,"require authentication"," using a charging protocol that authenticates the specific EV being charged and that the EV is associated with the registration identity","authenticate"]
["et.11","m",0.95547199999999999,"enforce least privilege"," by defining the set of insiders authorized to access registration identities","control access"]
["et.11","m",0.24617,"create audit logs"," of the individual viewing registration identities","audit"]
["et.11","m",0.52273400000000003,"restrict remote access"," to the database","control access"]
["et.11","m",0.86610100000000001,"restrict file access"," to database files from the host operating system","control access"]
["et.11","m",0.55905899999999997,"restrict network access"," to the network hosting the database","control access"]
["et.11","m",9.6074300000000001E-2,"encrypt data at rest"," for database files containing EV registration identities","encrypt"]
["et.11","m",0.92096500000000003,"encrypt communication paths"," of network traffic containing EV registration identities","encrypt"]
["et.12","t",0.961839,"Unavailable Communication Blocks Customer Use of EV Preferential Rate"]
["et.12","d",0.33368799999999998,"An EV owner belongs to utility A and uses the \"utility smart card\" to charge his EV at a utility B's charging station. If the two utilities have a business contract so that the owner must receive a special rate, the communications between the two utilities must be protected. A threat agent could compromise the communication paths or involved systems, so that utility B is unable to obtain information from utility A regarding the EV owner's rate. As a result, the customer may not receive the preferential rate."]
["et.12","v",0.55549499999999996,"critical components exhibit single point of failure"," such as communication paths or databases used to verify registration identities between utilities.","Insufficient Redundancy (6.5.1.5)"]
["et.12","i",0.16666500000000001,"Customer inconvenience"]
["et.12","i",0.52915000000000001,"Cost of customer service situation handling complaints and coordinating refunds with servicing utility. It is assumed that customers will still be able to charge their EVs by using standard credit cards so they are not denied service."]
["et.12","m",0.97027600000000003,"require resiliency"," in communication paths for verifying registration identities","ensure availability"]
["et.12","m",0.97555999999999998,"learn from others"," such as credit card company concepts like using a central verification service that provides redundancy and resiliency","learn"]
["et.12","m",0.87567700000000004,"choose own rate"," at individual charging stations, regardless of the customers' utility membership (like existing gas stations)","user decision"]
["et.13","t",0.57384800000000002,"Invalidated EV Registration ID Blocks Customer use of Preferential Rate"]
["et.13","d",3.3273799999999999E-2,"A threat agent (possibly a disgruntled employee) accesses the utility's EV registration database and invalidates selected EV registration identities. This would prevent those EVs from charging at the preferential rate if they were allowed to charge."]
["et.13","v",0.28272399999999998,"unnecessary network access is permitted"," to utility networks or databases that store registration identities,","Unnecessary System Access (6.2.2.6)"]
["et.13","v",3.6630500000000003E-2,"unnecessary access is permitted to the database"," that stores registration identities,","Unnecessary System Access (6.2.2.6)"]
["et.13","v",0.76053000000000004,"users lack visibility that unauthorized changes were made"," via transactions that impact the EV registration ID database.","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.13","i",0.60490600000000005,"Serious inconvenience and embarrassment to customers in any situation where credit cards or other billing methods using the regular electricity rate are not available. One example is a visitor to any non-retail location where the party responsible for the electricity account for the facility visited is not expected to pay the visitor's bills (such as a contractor travelling to a job site or a professor's visit to a colleague)"]
["et.13","i",0.41264299999999998,"Cost of customer service situations to handle complaints and to coordinate refunds with other utilities. This assumes that in a retail situation the customer will still be able to charge their EV by using standard credit cards so they are not denied service. Also assumed is that when at home, the customer would be billed at the standard rate if their registration identify was invalid"]
["et.13","m",0.53622899999999996,"create audit logs"," of administrative activity that invalidates a registration identity using the customary user interface","audit"]
["et.13","m",0.89819700000000002,"generate alarms"," for administrative activity that invalidates a registration identity using the customary user interface","alert"]
["et.13","m",0.103671,"enforce least privilege"," for individuals authorized to use this customary user interface","control access"]
["et.13","m",1.39715E-2,"create audit logs"," of all methods of access to view the databases","audit"]
["et.13","m",0.67466400000000004,"restrict remote access"," to the database","control access"]
["et.13","m",0.46905200000000002,"restrict file access"," to applicable database files via the host operating system","control access"]
["et.13","m",0.88505699999999998,"restrict network access"," to the network hosting the EV registration ID database","control access"]
["et.14","t",0.61115299999999995,"EV Charging Process Slowed by Validation Delay of EV Registration ID"]
["et.14","d",0.90822499999999995,"A threat agent (possibly a disgruntled employee who wants to embarrass the utility) modifies the verification software that accesses the utility's EV registration database, and introduces random delays in validating EV identities when the vehicles are trying to charge. This would slow down, but not necessarily prevent charging."]
["et.14","v",0.97224699999999997,"system permits unauthorized changes"," to software,","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.14","i",0.44371500000000003,"Inconvenience to customers"]
["et.14","i",0.29640100000000003,"Cost of handling customer complaints"]
["et.14","i",0.87207800000000002,"Cost of troubleshooting problem"]
["et.14","i",8.2054699999999994E-2,"Embarrassment to the utility"]
["et.14","i",0.23611799999999999,"Creates poor perception of the usability of EVs"]
["et.14","m",0.242537,"create audit logs"," of who has made software additions or modifications","audit"]
["et.14","m",0.28569600000000001,"check software execution integrity"," of all live executables, since software may be compromised when loaded for execution","check integrity"]
["et.14","m",0.60575400000000001,"require redundancy"," for ways to verify the EV without directly accessing the EV registration system","ensure availability"]
["et.14","m",0.99498399999999998,"isolate functions"," of the vehicle charging process from the validation of EVs (such as a driver pumps gas in a gas station)","isolate"]
["et.15","t",0.76615200000000006,"Malware Causes Discharge of EV to the Grid"]
["et.15","d",5.4112399999999998E-2,"A threat agent compromises the Vehicle-to-Grid (V2G) protocol that allows bi-directional flows of electricity. The threat agent may hack a protocol translation module directly or insert malware in the charging station management system. The malware could cause vehicles to discharge partially or completely without the owner's consent."]
["et.15","v",0.62957600000000002,"system permits unauthorized changes"," to code in the charging station management system and protocol translation module,","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.15","v",0.47988399999999998,"design, implementation, or maintenance permits system to enter a hazardous state"," by overloading of the distribution transformer if many EVs are discharged,","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.15","v",0.56796199999999997,"system takes action before confirming changes with user"," causing EVs to be discharged without owner's consent.","Business Logic Vulnerability (6.3.1.8)"]
["et.15","i",0.55437899999999996,"Critical damage to electric vehicles"]
["et.15","i",0.40126299999999998,"Inconvenience to customers"]
["et.15","i",0.91257100000000002,"Cost of customer service situations"]
["et.15","i",0.88815100000000002,"Violation of customer contracts and loss of customer confidence"]
["et.15","i",0.440695,"A sudden, large amount of electricity from EVs could damage a transformer in a neighborhood"]
["et.15","m",0.47461199999999998,"enforce hardware limits"," for circuit in EVs that stops discharging below a user-defined threshold","enforce limits"]
["et.15","m",0.26319799999999999,"generate alarms"," for utility on detection of abnormal discharging behaviors in the charging station","alert"]
["et.15","m",0.43415700000000002,"require circuit breaker"," to avoid reverse-directional overpower to the distribution transformer","enforce limits"]
["et.15","m",0.58046200000000003,"authenticate users"," seeking access to software files for charging station management system","authenticate"]
["et.15","m",0.62704599999999999,"restrict file access"," to software files for charging station management system","control access"]
["et.15","m",0.12654899999999999,"check software file integrity"," of charging station management and protocol translation module software files","check integrity"]
["et.15","m",0.92603599999999997,"confirm action"," to discharge the EV with the EV owner","verify"]
["et.16","t",0.77788000000000002,"An EV is Exploited to Threaten Transformer or Substation"]
["et.16","d",0.459671,"A threat agent exploits an in-vehicle system at an EV to inject malware to an EVSE in a charging station. In the near future, such systems will be connected both to the battery via a vehicle data bus (e.g., CAN bus) and to the EVSE via wireless channels (e.g., ZigBee). Once compromised, an EVSE may infect other EVSEs, creating a botnet. The compromised EVSEs could simultaneously charge or discharge all the plugged EVs, thus overloading the distribution transformer. Alternatively, they may launch an attack directly to a charging station management system or to a distribution operator system that controls the transformer and the substation."]
["et.16","v",0.87279399999999996,"system permits installation of malware"," in the EVSE during charging between the EV and the EVSE (ET.3),","Inadequate Malware Protection (6.4.2.3)"]
["et.16","v",0.412412,"system permits installation of malware"," due to the malware spreading between EVSEs on the network hosting the EVSEs for the charging station,","Inadequate Malware Protection (6.4.2.3)"]
["et.16","v",0.719503,"system permits unauthorized changes"," to the in-vehicle system,","Inadequate Change and Configuration Management (6.2.2.5)"]
["et.16","v",0.51294300000000004,"system permits installation of malware"," in public charging station systems,","Inadequate Malware Protection (6.4.2.3)"]
["et.16","v",0.468416,"shared credentials are used for access"," to nearby EVSEs,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["et.16","v",0.71458500000000003,"design, implementation, or maintenance permits system to enter a hazardous state"," by allowing overloading of the distribution transformer.","Use of Inadequate Security Architectures and Designs (6.4.1.1)"]
["et.16","i",0.23732,"Potential to overpower and damage transformer in a neighborhood"]
["et.16","i",0.103421,"Temporarily loss of capability for charging station to service customers"]
["et.16","i",0.66247999999999996,"Potential damage to electric vehicles"]
["et.16","i",0.75855399999999995,"Revenue loss of the owner of the charging stations due to their damage"]
["et.16","i",0.67951899999999998,"Violation of customer contracts and loss of customer confidence"]
["et.16","m",0.64135799999999998,"restrict application access"," to the charging station management system","control access"]
["et.16","m",0.97504599999999997,"check software execution integrity"," of the charging station management system, since software may be compromised when loaded for execution","check integrity"]
["et.16","m",0.53054100000000004,"detect abnormal output"," containing messages from EVs (ET.3) and EVSEs","detect"]
["et.16","m",0.69720599999999999,"analyze anomalous events"," in EVs to detect malicious code","analyze"]
["et.16","m",0.226356,"maintain patches"," in the charging station system","secure operations"]
["et.16","m",0.196632,"maintain anti-virus"," in the charging station system","secure operations"]
["et.16","m",0.17219200000000001,"require unique keys"," in the EVSE","isolate"]
["et.16","m",4.7869599999999998E-2,"require circuit breaker"," to avoid overloading the distribution transformer","enforce limits"]
["et.16","m",0.67718500000000004,"detect unusual patterns"," of data transfer during charging between the EVSE and the EV.","detect"]
["et.16","m",0.69513800000000003,"detect unusual patterns"," of data transfer between EVSEs and between the EVSE and the charging station management system,","detect"]
["et.16","m",0.69912600000000003,"check software execution integrity"," of the in-vehicle system,","check integrity"]
["dr.1","t",0.62171699999999996,"Blocked DR Messages Result in Increased Prices or Outages"]
["dr.1","d",0.65499099999999999,"A threat agent blocks communications between a demand response automation server (DRAS) and a customer system (smart meters or customer devices). This could be accomplished by flooding the communications channel with other messages, or by tampering with the communications channel. These actions could prevent legitimate DR messages from being received and transmitted. This can occur at the wired or the wireless portion of the communications channel."]
["dr.1","v",0.93771499999999997,"physical access may be obtained by unauthorized individuals"," to communications channel components,","Physical Access to the Device (6.5.1.6)"]
["dr.1","v",0.97434600000000005,"unnecessary access is permitted to the communications channel"," ","Unnecessary System Access (6.2.2.6)"]
["dr.1","v",0.73487599999999997,"publicly accessible and/or third party controlled links used"," in DRAS/customer communication channels,","Inadequate Network Segregation (6.5.1.2)"]
["dr.1","v",0.33978199999999997,"system relies on communications that are easy to jam"," in wireless DRAS/customer communications channels,","Use of Insecure Protocols (6.3.1.21)"]
["dr.1","v",0.75242600000000004,"system permits unauthorized changes"," to the messaging interface components of the DRAS,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dr.1","v",0.28865499999999999,"system permits unauthorized changes"," to the messaging components of the customer systems.","Inadequate Change and Configuration Management (6.2.2.5)"]
["dr.1","v",0.80716699999999997,"users lack visibility of threat activity"," specifically unusual traffic load on the communications channel from the DRAS to customer systems or interactions with channel components not originated by the DRAS","Inadequate Anomaly Tracking (6.4.4.1)"]
["dr.1","i",0.18685199999999999,"The effects would be correlated to the extent of blockage"]
["dr.1","i",0.29052299999999998,"If the blockage is local, the impact may be limited to increased energy charges to consumers"]
["dr.1","i",0.30449399999999999,"Blockage of DR messages on a larger scale, particularly messages to large industrial customers, may cause outages at a local or regional level if demand is too great and increased energy costs to customers over a larger area"]
["dr.1","i",0.979159,"In sell-back or brokerage scenarios, the blockage of DR signals may result in increased prices for electricity for the utility company and be instrumented for considerable financial gain for parties selling electricity back to the utility company"]
["dr.1","m",0.44821,"require safe mode"," in the energy management settings if expected DR messages are not received within the appropriate time window","secure operations"]
["dr.1","m",5.93635E-2,"require acknowledgment"," of link status including information on the health of the communications link","verify"]
["dr.1","m",0.96758900000000003,"restrict remote access"," ","control access"]
["dr.1","m",0.939836,"restrict network access"," ","control access"]
["dr.1","m",0.74839299999999997,"require intrusion detection and prevention"," where feasible along the communications channel","detect"]
["dr.1","m",0.192108,"detect unauthorized access"," ","detect"]
["dr.1","m",0.48850900000000003,"restrict physical access"," to communications channel components","control access"]
["dr.1","m",0.36058600000000002,"authenticate users"," seeking access to modify DRAS software","authenticate"]
["dr.1","m",0.44264100000000001,"authenticate users"," seeking remote access to modify customer DR software","authenticate"]
["dr.1","m",0.678759,"require acknowledgment"," from devices indicating what commands they received","verify"]
["dr.1","m",0.92129499999999998,"detect abnormal output"," in the results of DR commands to validate reasonability of load/generation results by non-DRAS (maybe supervisory control and data acquisition (SCADA)) systems","detect"]
["dr.1","m",5.0963899999999999E-2,"use Role-Based Access Control"," to limit privilege to modify the DRAS and customer end messaging interface components of the DRAS communication channel,","control access"]
["dr.1","m",0.51179799999999998,"check software file integrity"," for DRAS and customer end messaging interface components of the DRAS communication channel","check integrity"]
["dr.1","m",0.82649899999999998,"require redundancy"," for wireless connections as part of the communications strategy for critical DR customers","ensure availability"]
["dr.1","m",0.65022999999999997,"detect abnormal output"," in the results of DR commands to validate reasonability of load/generation results by non-DRAS (such as e.g., SCADA) systems.","detect"]
["dr.2","t",0.20699100000000001,"Private Information is Publicly Disclosed on DRAS Communications Channel"]
["dr.2","d",0.81274599999999997,"A threat agent eavesdrops on traffic on the network between a DRAS and a customer system. This could leak private information to the threat agent. This might be the easiest attack that the agent can launch while not being detected by utilities."]
["dr.2","v",0.80772999999999995,"physical access may be obtained by unauthorized individuals"," to communications channel components,","Physical Access to the Device (6.5.1.6)"]
["dr.2","v",0.573882,"unnecessary access is permitted to the communications channel"," ","Unnecessary System Access (6.2.2.6)"]
["dr.2","v",0.62799400000000005,"publicly accessible and/or third party controlled links used"," in DRAS/customer communications channels,","Inadequate Network Segregation (6.5.1.2)"]
["dr.2","v",0.73745400000000005,"encryption keys are shared"," by multiple computers on the DRAS network,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["dr.2","v",0.30541600000000002,"system makes messages accessible to unauthorized individuals"," (easy to tap) in wired/wireless communications channels in the DRAS network.","Use of Insecure Protocols (6.3.1.21)"]
["dr.2","v",0.413248,"users lack visibility of threat activity"," specifically the presence of unknown entities creating traffic on the DRAS/customer communication channel","Inadequate Anomaly Tracking (6.4.4.1)"]
["dr.2","i",0.85979499999999998,"Malicious eavesdropping can reveal private information that may be made public. This violates customer privacy"]
["dr.2","i",0.26105899999999999,"Potential for lawsuits and fines against the utility"]
["dr.2","i",0.17362900000000001,"Loss of public confidence in the utility and the DR program, resulting in resistance to both"]
["dr.2","m",6.1780399999999999E-2,"restrict remote access"," to DRAS/customer communications channels","control access"]
["dr.2","m",0.50247600000000003,"restrict network access"," where feasible along the DRAS/customer communications channel","control access"]
["dr.2","m",0.97708799999999996,"require intrusion detection and prevention"," where feasible along the communications channel","detect"]
["dr.2","m",0.240285,"detect unauthorized access"," ","detect"]
["dr.2","m",0.67444300000000001,"restrict physical access"," to communications channel components","control access"]
["dr.2","m",0.25490499999999999,"require unique keys"," per meter for messages being transferred","isolate"]
["dr.2","m",0.88195100000000004,"require approved cryptographic algorithms"," to protect the confidentiality of communications","secure design and implementation"]
["dr.3","t",8.5001499999999997E-3,"Messages are Modified or Spoofed on DRAS Communications Channel"]
["dr.3","d",0.786381,"A threat agent obtains access to the communications channel between the DRAS and the customer DR system, modifies on-going traffic or communications, inserts false messages, or launches a replay attack. The DRAS and the customer system could receive an unauthorized message or a corrupted message. Such a message may cause unintentional (often unfavorable) behaviors of these systems. (Note: Spoofed last gasp messages as in AMI.11 is an important special case of this failure scenario.)"]
["dr.3","v",0.24605099999999999,"system permits messages to be modified by unauthorized individuals"," between the DRAS and customer DR component,","Use of Insecure Protocols (6.3.1.21)"]
["dr.3","v",0.11884500000000001,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," between the DRAS and customer DR component,","Use of Insecure Protocols (6.3.1.21)"]
["dr.3","v",0.53125800000000001,"physical access may be obtained by unauthorized individuals"," to communications channel components,","Physical Access to the Device (6.5.1.6)"]
["dr.3","v",0.25075999999999998,"unnecessary access is permitted to the communications channel"," ","Unnecessary System Access (6.2.2.6)"]
["dr.3","v",0.76370300000000002,"publicly accessible and/or third party controlled links used"," ","Inadequate Network Segregation (6.5.1.2)"]
["dr.3","v",0.36798900000000001,"users lack visibility of threat activity"," specifically the presence of unknown entities with access to the DRAS/customer communication channel","Inadequate Anomaly Tracking (6.4.4.1)"]
["dr.3","i",0.23211899999999999,"A false message may request the DRAS to reduce power supply or to trigger an inappropriate DR event"]
["dr.3","i",0.94670399999999999,"A false message may deliver information indicating cheaper prices to consumers, which encourages them to increase power consumption during on-peak periods"]
["dr.3","i",0.18402399999999999,"Possible service impacts on various (possibly quite large) scales"]
["dr.3","i",0.28744399999999998,"Potential power loss"]
["dr.3","i",0.94992399999999999,"The utility may have financial impacts"]
["dr.3","m",0.70847899999999997,"check message integrity"," (digital signatures or message authentication codes) to verify the authenticity and integrity of DR messages in customer equipment","check integrity"]
["dr.3","m",0.38799800000000001,"authenticate messages"," from customer DR systems","authenticate"]
["dr.3","m",2.9355300000000001E-2,"protect against replay"," in DR messages using timestamps, sequence numbers, or cryptographic nonces","check integrity"]
["dr.3","m",4.4014199999999996E-3,"validate data"," to ensure the DR data is reasonable","verify"]
["dr.3","m",0.53494299999999995,"restrict network access"," to the network hosting the DRAS system and the network on the customer side and elsewhere along the communications channel","control access"]
["dr.3","m",0.23214899999999999,"require intrusion detection and prevention"," where feasible along the communications channel","detect"]
["dr.3","m",0.458505,"detect unauthorized access"," ","detect"]
["dr.3","m",0.65513699999999997,"detect unusual patterns"," and include a human in the decision loop when unexpected patterns or inputs are recognized on DRA","detect"]
["dr.3","m",0.82732899999999998,"restrict physical access"," to communications channel components","control access"]
["dr.3","m",0.87519899999999995,"detect abnormal output"," in the results of DR commands to validate reasonability of load/generation results by non-DRAS systems (such as SCADA)","detect"]
["dr.4","t",0.49691600000000002,"Improper DRAS Configuration Causes Inappropriate DR Messages"]
["dr.4","d",0.15190699999999999,"A threat agent maliciously modifies the DRAS configuration to send (or not send) DR messages at incorrect times and to incorrect devices. This could deliver a wrong, but seemingly legitimate set of messages to the customer system."]
["dr.4","v",8.9622499999999994E-2,"system permits unauthorized changes"," to DRAS configuration,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dr.4","v",6.3968200000000003E-2,"users lack visibility that unauthorized changes were made"," in the DRAS configuration,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dr.4","v",0.798844,"unnecessary network access is permitted"," to the network on which the DRAS resides.","Unnecessary System Access (6.2.2.6)"]
["dr.4","v",0.80749599999999999,"system relies on credentials that are easy to obtain for access"," to the DRAS configuration","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["dr.4","i",0.138627,"A false message may deliver information indicating lower prices to consumers, which encourages them to increase power consumption during on-peak periods"]
["dr.4","i",0.89105199999999996,"Damage to the smart grid infrastructure with possible service impacts from small to large scale"]
["dr.4","i",0.17970700000000001,"Potential power loss"]
["dr.4","i",0.36655900000000002,"The utility may have financial impacts"]
["dr.4","i",0.65708200000000005,"In sell-back or brokerage scenarios, withholding of DR signals at the source DRAS may result in increased prices for electricity to the utility and be instrumented for considerable financial gain for parties selling electricity back to the utility company"]
["dr.4","i",0.96157599999999999,"Loss of public confidence in utility and DR program"]
["dr.4","i",0.94073499999999999,"The customer, receiving an unintended DR message, may reduce power consumption without seeing any benefit applied in their bill"]
["dr.4","m",0.38894499999999999,"restrict remote access"," specifically to only those systems that are allowed remote access to the DRAS systems","control access"]
["dr.4","m",0.44830900000000001,"restrict remote access"," to DRAS configuration functions","control access"]
["dr.4","m",0.41589700000000002,"restrict network access"," to the network hosting the DRAS","control access"]
["dr.4","m",0.35573399999999999,"use Role-Based Access Control"," to limit access to the DRAS configuration","control access"]
["dr.4","m",0.104126,"require two-person rule"," on manual overrides or configuration changes in the DRAS","verify"]
["dr.4","m",0.296234,"generate alerts"," on changes to the DRAS configuration","alert"]
["dr.4","m",0.78474200000000005,"detect abnormal output"," in the results of DR commands to validate reasonability of load/generation results by a non-DRAS (maybe SCADA) system","detect"]
["dr.5","t",0.14532900000000001,"Non-specific Malware Compromises DRAS or Customer DR System"]
["dr.5","d",0.58796999999999999,"The DRAS or customer DR system is infected by non-specific common malware. This malware may consume system resources, thus slowing other system processes or may attempt to compromise typical components such as databases. This could cause the DRAS to fail to send DR messages when needed or to disclose customer information in its database. It could cause the customer system not to execute the contractual terms of the DR service although it receives legitimate DR messages."]
["dr.5","v",0.26672800000000002,"software patches are not checked regularly to ensure that they are current"," ","Inadequate Patch Management Process (6.2.2.4)"]
["dr.5","v",0.188023,"the list of signatures used for detection of attacks is no longer current"," ","Inadequate Malware Protection (6.4.2.3)"]
["dr.5","v",0.39501399999999998,"unnecessary system services are configured to run"," on un-blocked or unnecessary opened ports,","Unneeded Services Running (6.4.3.2)"]
["dr.5","v",0.20776,"remote access may be obtained by unauthorized individuals"," to the customer system from remote networks,","Unnecessary System Access (6.2.2.6)"]
["dr.5","v",1.5490200000000001E-2,"physical access may be obtained by unauthorized individuals"," to the DRAS (e.g., to use a Universal Serial Bus (USB) device).","Physical Access to the Device (6.5.1.6)"]
["dr.5","i",0.58937200000000001,"Unstable power balance at the utility due to failure to communicate or execute reduction of power demand during on-peak periods, possibly resulting in loss of power for some customers"]
["dr.5","i",0.217366,"Potential revenue loss due to failure to communicate or execute a return to non-peak conditions in which customers may increase usage"]
["dr.5","i",0.474937,"Capture and exfiltration of sensitive DR information would violate customer privacy"]
["dr.5","i",0.212391,"Loss of public confidence in the utility and DR program"]
["dr.5","m",0.51780700000000002,"maintain patches"," in the DRAS and customer DR systems","secure operations"]
["dr.5","m",0.37760300000000002,"maintain anti-virus"," in the DRAS and customer DR systems","secure operations"]
["dr.5","m",0.63866100000000003,"configure for least functionality"," by limiting open ports and installed functions in the DRAS and DR customer systems","secure design and implementation"]
["dr.5","m",0.81229099999999999,"restrict physical access"," to DRAS or its input interfaces (e.g., Universal Serial Bus (USB), compact disk - read only memory (CD-ROM))","control access"]
["dr.5","m",0.87407100000000004,"authenticate users"," for remote access to a customer DR system","authenticate"]
["dr.6","t",0.37654700000000002,"Custom Malware Compromises DRAS"]
["dr.6","d",0.353634,"A threat agent injects purpose-built malware into the DRAS. This malware places the server under remote command of this agent. The agent might use this capability to send out DR messages appropriate for non-peak times at peak times, and vice versa."]
["dr.6","v",0.59392,"system permits unauthorized changes"," to software in the DRAS,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dr.6","v",0.26836300000000002,"users lack visibility that unauthorized changes were made"," to the DRAS software,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dr.6","v",0.52326799999999996,"unnecessary system services are configured to run"," on un-blocked or unnecessary open ports,","Unneeded Services Running (6.4.3.2)"]
["dr.6","v",0.405219,"unnecessary network access is permitted"," to the network on which the DRAS resides.","Unnecessary System Access (6.2.2.6)"]
["dr.6","i",0.413719,"Addition of extra load at peak times and reduction of load at non-peak times could result in power outages and physical power system damage"]
["dr.6","i",0.200099,"Loss of public confidence in the utility and DR program"]
["dr.6","m",0.44614999999999999,"restrict remote access"," to the DRAS systems","control access"]
["dr.6","m",0.56499600000000005,"restrict remote access"," to the networks hosting the DRAS systems","control access"]
["dr.6","m",9.6253199999999997E-2,"restrict network access"," to the networks hosting the DRAS systems","control access"]
["dr.6","m",0.34701300000000002,"use Role-Based Access Control"," to limit access to the DRAS software files","control access"]
["dr.6","m",0.110717,"configure for least functionality"," by making unavailable any unnecessary functions and ports on the DRAS systems","secure design and implementation"]
["dr.6","m",0.47200900000000001,"check software file integrity"," for the DRAS software","check integrity"]
["dr.6","m",0.82757800000000004,"require application whitelisting"," on the DRAS","secure operations"]
["dr.7","t",0.34283599999999997,"Custom Malware Compromises Customer DR System"]
["dr.7","d",0.28954000000000002,"A threat agent injects a malware into a customer DR system that runs an OpenADR client program at the gateway of the customer domain. The malware might be controlled remotely by the agent or could directly change the behaviors of the customer DR system without any remote connection. As a consequence, the compromised DR system sends incorrect DR messages back to the DRAS. For instance, it sends a false DR registration message to the DRAS, when registering the customer's capability of energy reduction - the false message informs the DRAS that the customer is able to reduce 500kW, although he cannot. Alternatively, the compromised DR system sends a false DR report message to the DRAS, after the DR event finishes - the false message informs the DRAS that the customer reduced 500kW, although the customer actually reduced 100kW."]
["dr.7","v",0.47356399999999998,"software patches are not checked regularly to ensure that they are current"," resulting in vulnerabilities that support the injection of custom malware","Inadequate Patch Management Process (6.2.2.4)"]
["dr.7","v",0.76100800000000002,"the list of signatures used for detection of attacks is no longer current"," resulting in vulnerabilities that support the injection of custom malware","Inadequate Malware Protection (6.4.2.3)"]
["dr.7","v",0.71093300000000004,"unnecessary system services are configured to run"," on un-blocked or unnecessary open ports,","Unneeded Services Running (6.4.3.2)"]
["dr.7","v",0.41941099999999998,"unnecessary access is permitted to system functions"," in the customer DR program,","Unnecessary System Access (6.2.2.6)"]
["dr.7","v",0.80740900000000004,"system assumes data inputs and resulting calculations are accurate"," in customer energy usage.","Business Logic Vulnerability (6.3.1.8)"]
["dr.7","v",0.26759500000000003,"system permits unauthorized changes"," to software in the customer DR system","Inadequate Change and Configuration Management (6.2.2.5)"]
["dr.7","v",0.433971,"users lack visibility that unauthorized changes were made"," to the customer DR software","Inadequate Change and Configuration Management (6.2.2.5)"]
["dr.7","i",0.83676399999999995,"Incorrect estimation of the total energy reduction before/during/after the DR event period, which can lead to the failure of the DR program"]
["dr.7","i",0.84116500000000005,"Potential power outages for the grid operator"]
["dr.7","i",0.376108,"The utility may have financial impacts - it computes customer incentives based on customer energy usage information"]
["dr.7","i",0.60825700000000005,"Loss of public confidence in the utility and DR program"]
["dr.7","m",6.6762000000000002E-2,"maintain patches"," on the customer DR system","secure operations"]
["dr.7","m",0.72189899999999996,"maintain anti-virus"," on the customer DR system","secure operations"]
["dr.7","m",0.54922899999999997,"authenticate users"," seeking remote access to a customer DR system","authenticate"]
["dr.7","m",0.42442800000000003,"enforce least privilege"," for access to the customer DR program","control access"]
["dr.7","m",0.92134400000000005,"restrict remote access"," to the customer network","control access"]
["dr.7","m",7.3251300000000005E-2,"require message verification"," for customer messages","verify"]
["dr.7","m",0.99495900000000004,"cross check"," customer DR performance with messages received from the customer DR system","verify"]
["dr.7","m",0.10806200000000001,"configure for least functionality"," by making unavailable any unnecessary functions and ports on the customer DR system","secure design and implementation"]
["dgm.1","t",0.16287399999999999,"Wireless Signals are Jammed to Disrupt Monitoring and Control"]
["dgm.1","d",0.22684199999999999,"A threat agent uses a wireless signal jammer to disrupt wireless communications channels used to monitor and control distribution systems and substations. Examples are wireless local area network (LAN) communications for inter-substation differential protection, wireless communications between a distribution management system (DMS) and static VAR compensators (SVC), and communications to wireless monitoring equipment."]
["dgm.1","v",2.5686299999999999E-2,"system relies on communications that are easy to jam"," in physical radio frequency (RF) communications. Physical radio frequency (RF) communications are subject to deliberate jamming since few radio systems outside of the military have anti-jamming capability. Sustained jamming is less effective than intermittent jamming with the latter potentially causing the system to execute inappropriate or out of order commands.","Use of Insecure Protocols (6.3.1.21)"]
["dgm.1","v",0.16431299999999999,"system makes messages accessible to unauthorized individuals"," in wireless radio signals.","Use of Insecure Protocols (6.3.1.21)"]
["dgm.1","i",5.53651E-2,"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations"]
["dgm.1","i",0.235072,"The uncoordinated capacitor banks due to loss of communications could conflict with substation load tap changer (LTC) actions, causing \"hunting\" or other inefficient actions that increase utility power losses and premature transformer failures"]
["dgm.1","i",0.60163100000000003,"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment"]
["dgm.1","i",0.25871300000000003,"isruption in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions"]
["dgm.1","m",0.22028900000000001,"require spread-spectrum radio"," with channel-hopping and switching to alternate communication paths. Examples include: (a) Switching from licensed band(s) to unlicensed band(s), (b) Switching from unlicensed band(s) to licensed band(s), (c) Transition from RF to fiber or copper land-lines, (d) Transition from RF to dialup (possibly with degraded performance)","ensure availability"]
["dgm.1","m",0.161024,"require redundancy"," in communications channels when the wireless channel is no longer available","ensure availability"]
["dgm.1","m",0.54996900000000004,"require safe mode"," in feeder devices such as capacitor banks and voltage regulators by having default states that rely on local electrical conditions if communications are lost","secure operations"]
["dgm.1","m",0.998278,"require redundancy"," via selected AMI meters or alternative devices that provide redundant monitoring information that is out-of-band of compromised communications","ensure availability"]
["dgm.2","t",0.41417599999999999,"Shared Communications Leveraged to Disrupt DMS Communications"]
["dgm.2","d",0.76990899999999995,"Some utilities depend upon communication providers for long-haul and wide area network (WAN) communications for monitoring and control of their distribution system. Furthermore, utilities that provide their own communication network for critical functions often resell unused bandwidth to offset costs while others have spun off their communication network as a separate communications company. There is also a general trend toward economizing communications costs by sharing them. A threat agent could take advantage of these paradigms by compromising computer systems using the same network as the Distribution Management System (DMS) to facilitate a distributed denial of service attack through the infected computer system by means of a botnet centered on IP spoofing and Internet Control Message Protocol (ICMP) flooding. With the network overburdened, monitoring and control functions could become unavailable for optimization or protection."]
["dgm.2","v",0.87403500000000001,"communication channels are shared between different system owners"," that may reduce availability and reliability of entities or functions that rely on those channels. Attackers have demonstrated flooding attacks against communications paths up to optical carrier (OC) 48. These optical fiber connections carry 2400+ megabits per second and are typically used in regional Internet Service Provider networks.","Inadequate Network Segregation (6.5.1.2)"]
["dgm.2","v",0.170269,"network services are shared between different system owners"," that increase the attack surface for the systems sharing the service. This requires a utility to put a certain level of trust in the systems sharing the communications channel and the entity that manages it.","Inadequate Network Segregation (6.5.1.2)"]
["dgm.2","i",0.95501100000000005,"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations"]
["dgm.2","i",0.10034,"The uncoordinated capacitor banks due to loss of communications could conflict with substation load tap changer (LTC) actions, causing \"hunting\" or other inefficient actions that increase utility power losses and premature transformer failures"]
["dgm.2","i",0.68830899999999995,"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment"]
["dgm.2","i",0.95503800000000005,"Disruption in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions"]
["dgm.2","m",0.14306099999999999,"verify personnel"," (service providers) to ensure their services are secure and reliable","verify"]
["dgm.2","m",0.53807499999999997,"verify personnel"," (customers) sharing the network to ensure they are reputable, security conscious and using network resources appropriately","verify"]
["dgm.2","m",0.74583500000000003,"require safe mode"," in feeder devices such as capacitor banks and voltage regulators by having default states that rely on local electrical conditions if communications are lost","secure operations"]
["dgm.2","m",0.76132599999999995,"require redundancy"," via selected AMI meters or alternative devices that provide redundant monitoring information that is out-of-band of compromised communications","ensure availability"]
["dgm.3","t",0.35069800000000001,"Malicious Code Injected into Substation Equipment via Physical Access"]
["dgm.3","d",0.56806400000000001,"A threat agent injects malicious code into substation equipment through physical access of engineering serial ports or by memory update devices such as USB memory sticks, Secure Digital (SD) cards or Compact Flash (CF) cards. Examples of target equipment include communications concentrators, remote terminal units (RTUs), and protection relays. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration."]
["dgm.3","v",4.3000999999999998E-2,"unnecessary access is permitted to system functions"," via engineering and console ports of substation equipment,","Unnecessary System Access (6.2.2.6)"]
["dgm.3","v",0.25539200000000001,"system permits unauthorized changes"," to software and information,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.3","v",0.77319899999999997,"physical access may be obtained by unauthorized individuals"," ","Physical Access to the Device (6.5.1.6)"]
["dgm.3","v",0.15080199999999999,"enabled but unused ports"," (unused engineering and console ports).","Physical Access to the Device (6.5.1.6)"]
["dgm.3","i",0.78946300000000003,"Substation components could be modified to fail detection and clearing of bus and feeder faults (although these can be managed by reclosers which are not necessarily in the substation). These faults could lead to destruction of electrical grid equipment"]
["dgm.3","i",0.60175400000000001,"Substation components could be reprogrammed to disallow feeder sectionalizing or service restoration via SCADA. However, these are frequently done manually"]
["dgm.3","i",0.475825,"Modification of devices controlling VOLT/VAR equipment, including load tap changers, SVCs, automatic voltage regulators, and synchronous condensers, could prevent direct voltage control leading to potential customer equipment damage, over/under voltage trips, or additional power losses"]
["dgm.3","i",0.85237200000000002,"Equipment firmware changes may create the need for equipment servicing that can be costly and time consuming"]
["dgm.3","i",0.20600599999999999,"Possible lack of monitoring capabilities reduces situational awareness, inhibits a utility's ability to react proactively, and could increase the number and duration of failures."]
["dgm.3","m",0.79992600000000003,"restrict device access"," (both physical and logical) of protective relays and other critical devices","control access"]
["dgm.3","m",6.8289100000000005E-2,"check software execution integrity"," of software and information, since software may be compromised when loaded for execution","check integrity"]
["dgm.3","m",0.591557,"configure for least functionality"," by disabling unused console and engineering ports on intelligent electronic devices (IEDs)","secure design and implementation"]
["dgm.3","m",0.99677499999999997,"create audit logs"," of substation actions","audit"]
["dgm.3","m",0.41049400000000003,"generate alarms"," for any serious anomalies, such as connection changes and device configuration changes in substations","alert"]
["dgm.3","m",0.61059300000000005,"restrict physical access"," using, for example, card swipes, PIN codes","control access"]
["dgm.3","m",5.67439E-2,"require video surveillance"," of the human interfaces to the DGM equipment","secure operations"]
["dgm.3","m",0.62173999999999996,"restrict access"," to engineering functions","control access"]
["dgm.3","m",0.71799299999999999,"maintain latest firmware"," for substation equipment","secure operations"]
["dgm.3","m",6.5006300000000003E-2,"maintain patches"," for substation equipment","secure operations"]
["dgm.3","m",0.17572299999999999,"restrict port access"," of device ports on substation equipment","control access"]
["dgm.3","m",0.245367,"use Role-Based Access Control"," to limit privileges for functions using engineering and console ports of substation equipment,","control access"]
["dgm.3","m",0.78878899999999996,"authenticate users"," for access to engineering and console ports where feasible","authenticate"]
["dgm.4","t",0.51855899999999999,"Malicious Code Injected into Substation Equipment via Remote Access"]
["dgm.4","d",0.80809799999999998,"A threat agent uploads malicious code into substation equipment via remote engineering access, either through an IP network WAN or dialup to a line-sharing switch (LSS). Examples of target equipment include communication concentrators, RTUs, and protection relays. Connections with peers are another avenue of attack. Some distribution substations, particularly in urban environments, use Bluetooth or ZigBee for access to reduce the need for crews to install underground cables. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration."]
["dgm.4","v",0.28166200000000002,"unnecessary access is permitted to the communications channel"," for remote substation WAN communications,","Unnecessary System Access (6.2.2.6)"]
["dgm.4","v",0.75360300000000002,"software patches are not checked regularly to ensure that they are current"," ","Inadequate Patch Management Process (6.2.2.4)"]
["dgm.4","v",0.173014,"system permits bypass of physical access controls"," via dialup LSS or wireless access.","Unnecessary System Access (6.2.2.6)"]
["dgm.4","i",0.98042300000000004,"Substation components could be modified to fail detection and clearing of bus and feeder faults (although these can be managed by reclosers which are not necessarily in the substation). These faults could lead to destruction of electrical grid equipment"]
["dgm.4","i",0.81718599999999997,"Substation components could be reprogrammed to disallow feeder sectionalizing or service restoration via SCADA. However, these are frequently done manually"]
["dgm.4","i",0.65835200000000005,"Equipment firmware changes may create the need for equipment servicing that can be costly and time consuming"]
["dgm.4","i",3.4459499999999997E-2,"Possible lack of monitoring capabilities reduces situational awareness, inhibits a utility's ability to react proactively, and could increase the number and duration of failures"]
["dgm.4","m",0.64271599999999995,"restrict remote access"," to protective relays and other critical devices","control access"]
["dgm.4","m",0.70947800000000005,"create audit logs"," of substation actions","audit"]
["dgm.4","m",0.43137799999999998,"generate alarms"," for any serious anomalies, such as connection changes and device configuration changes","alert"]
["dgm.4","m",0.98060599999999998,"maintain patches"," for all substation communication equipment","secure operations"]
["dgm.4","m",0.40503400000000001,"maintain anti-virus"," on substation equipment","secure operations"]
["dgm.4","m",0.326378,"require application whitelisting"," on substation equipment","secure operations"]
["dgm.4","m",0.39962900000000001,"authenticate users"," in the substation network (possibly two factor authentication)","authenticate"]
["dgm.4","m",0.56250299999999998,"require VPNs"," in the substation network","encrypt"]
["dgm.5","t",0.78934499999999996,"Remote Access Used to Compromise DMS"]
["dgm.5","d",0.81503099999999995,"A threat agent compromises distribution management system (DMS) functionality through remote access modification of executable programs and libraries, rendering the DMS inoperable."]
["dgm.5","v",0.97934399999999999,"system permits unauthorized changes"," to software files,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.5","v",3.4709400000000001E-2,"software patches are not checked regularly to ensure that they are current"," ","Inadequate Patch Management Process (6.2.2.4)"]
["dgm.5","v",0.26978200000000002,"remote access may be obtained by unauthorized individuals"," to DMS systems,","Unnecessary System Access (6.2.2.6)"]
["dgm.5","v",0.87141299999999999,"system relies on credentials that are easy to obtain for access"," to systems.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["dgm.5","i",0.13012599999999999,"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies"]
["dgm.5","i",0.35041499999999998,"Possible increase in outage durations"]
["dgm.5","i",0.51143899999999998,"Decrease in operational efficiency and increase in utility power losses"]
["dgm.5","i",6.1408400000000002E-2,"Decrease in service reliability"]
["dgm.5","i",5.9686500000000003E-2,"Decrease in customer satisfaction"]
["dgm.5","m",0.47386200000000001,"maintain patches"," ","secure operations"]
["dgm.5","m",0.24377099999999999,"create audit logs"," of all program changes and updates","audit"]
["dgm.5","m",0.117807,"detect abnormal behavior"," of voltage on feeders via selected AMI meters or alternative devices that provide redundant information","detect"]
["dgm.5","m",0.288076,"check software file integrity"," (digital signatures) for driver installation","check integrity"]
["dgm.5","m",0.243087,"require intrusion detection and prevention"," on DMS hosts","detect"]
["dgm.5","m",0.34342699999999998,"implement configuration management"," for all software updates including patches and firmware updates","track"]
["dgm.5","m",3.1736599999999997E-2,"maintain anti-virus"," on DMS hosts","secure operations"]
["dgm.5","m",0.98677400000000004,"require application whitelisting"," on DMS hosts","secure operations"]
["dgm.5","m",0.12983500000000001,"require backup"," when primary DMS is inoperable","ensure availability"]
["dgm.5","m",0.45703700000000003,"require multi-factor authentication"," for remote access","authenticate"]
["dgm.5","m",0.113686,"use Role-Based Access Control"," to limit privileges to modify software files","control access"]
["dgm.6","t",0.66791,"Spoofed Substation Field Devices Influence Automated Responses"]
["dgm.6","d",0.413746,"Threat agent spoofs data inputs from field devices at substations and below to cause the DMS to report a false system state. This could cause operator or automated responses that are inappropriate."]
["dgm.6","v",0.175071,"system permits messages to be modified by unauthorized individuals"," in the communications between field devices and the DMS,","Use of Insecure Protocols (6.3.1.21)"]
["dgm.6","v",0.52576900000000004,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in the communications between field devices and the DMS,","Use of Insecure Protocols (6.3.1.21)"]
["dgm.6","v",9.3832899999999997E-2,"system makes messages accessible to unauthorized individuals"," ","Use of Insecure Protocols (6.3.1.21)"]
["dgm.6","i",0.13683400000000001,"Inappropriate fault-clearing actions, feeder sectionalization, and overuse of remedial capabilities leading to loss of power to customers"]
["dgm.6","i",0.39222600000000002,"Volt/VAR controls are wrongly applied or adjusted based on erroneous data, possibly triggering over/under voltage trips"]
["dgm.6","i",0.16542499999999999,"Collected meter data is incorrect or inaccurate, leading to possible loss in revenue"]
["dgm.6","m",0.31622699999999998,"authenticate messages"," in communication from the field to control centers","authenticate"]
["dgm.6","m",0.10569099999999999,"detect unusual patterns"," of inputs that could indicate they are not trustworthy, by comparing inputs to each other and previous inputs","detect"]
["dgm.6","m",0.70744499999999999,"restrict communication access"," ","control access"]
["dgm.6","m",0.18326999999999999,"encrypt communication paths"," ","encrypt"]
["dgm.7","t",3.5641600000000002E-2,"QoS Spoofed to Create Denial of Service for DGM Communications"]
["dgm.7","d",0.241648,"Assuming the same communications system serves DGM, DR, AMI, and many other services at the distribution level, a Quality of Service (QoS) allocation of bandwidth is necessary. QoS can be spoofed and if end device classifications are trusted, a threat agent can escalate the priority of malevolent data streams. If denial of service is the goal, the threat agent could spoof the QoS of flooded ICMP packets to prevent the transmission and reception of monitoring and control packets."]
["dgm.7","v",4.1574399999999997E-2,"system assumes data inputs and resulting calculations are accurate"," for QoS mechanisms that rely on devices to report their own classification,","Business Logic Vulnerability (6.3.1.8)"]
["dgm.7","v",0.109863,"network interfaces permit unnecessary traffic flows"," to communication networks.","Inadequate Network Segregation (6.5.1.2)"]
["dgm.7","i",0.70142000000000004,"An end device could cause a denial of service to critical applications such as control of feeder sectionalizers and capacitor banks. In combination with a volatile electrical grid situation, this could lead to power failures"]
["dgm.7","i",0.69819600000000004,"Reduced situational awareness and impaired ability to react to fluctuations in load and apply controlled remedies such as switching capacitor banks and triggering voltage regulators. This could cause voltage adjustment inefficiencies resulting in voltage sags and swells that can trigger unwanted over and under voltage trips on feeders or in substations"]
["dgm.7","i",0.10868999999999999,"Extreme or long-duration voltage and frequency instability can damage customer or utility equipment"]
["dgm.7","i",0.71928300000000001,"Denial of service in wireless communications between pilot protection relays can impede differential protection schemes, possibly leading to equipment damage in substations or feeders during fault conditions"]
["dgm.7","m",0.77602700000000002,"profile equipment"," (end devices) based on their profile of ports and traffic","profile"]
["dgm.7","m",0.39776699999999998,"design for trust"," by analysis of equipment profiles","secure design and implementation"]
["dgm.7","m",0.11576,"restrict network access"," to the control system network","control access"]
["dgm.7","m",0.18076600000000001,"encrypt communication paths"," to prevent spoofing","encrypt"]
["dgm.7","m",0.356489,"authenticate users"," to prevent spoofing","authenticate"]
["dgm.8","t",0.87504800000000005,"Supply Chain Vulnerabilities Used to Compromise DGM Equipment"]
["dgm.8","d",0.68314600000000003,"Lifecycle attacks against equipment during development, production, shipping, and maintenance can introduce deliberate errors that will result in failure under special conditions. For example, a threat agent might upload modified firmware in a relay during production that introduces a back door for changing relay settings and set points. This could render the relay inoperable or cause it to operate unexpectedly."]
["dgm.8","v",0.964808,"system permits unauthorized changes"," during software/firmware development,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.8","v",7.4787400000000002E-3,"system permits unauthorized changes"," to software/firmware at suppliers of equipment, maintenance, and transportation,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.8","v",0.76108200000000004,"system permits unauthorized changes"," to software/firmware by utility employees with access to modify field equipment.","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.8","i",0.93409600000000004,"Any ill effect, including the most severe, is possible using this mechanism"]
["dgm.8","m",0.91451800000000005,"require spares"," for critical components","ensure availability"]
["dgm.8","m",0.73170500000000005,"implement configuration management"," for developers of equipment","track"]
["dgm.8","m",0.39005600000000001,"verify personnel"," including developers of equipment, utility employees and contract maintenance personnel through thorough employee background checks","verify"]
["dgm.8","m",0.424516,"conduct code review"," on DMS systems","test"]
["dgm.8","m",6.7232200000000006E-2,"vulnerability scan before install"," of the code base","test"]
["dgm.8","m",0.77671000000000001,"create audit logs"," of all code changes","audit"]
["dgm.8","m",0.208088,"design for trust"," by introducing the concept of devices of varying degrees of trust along with associated certifications for their associated supply chains","secure design and implementation"]
["dgm.8","m",0.110236,"restrict access"," to software/firmware during development","control access"]
["dgm.8","m",0.90417899999999995,"confirm action"," taken by contract maintenance personnel that modifies equipment","verify"]
["dgm.8","m",0.76752500000000001,"enforce least privilege"," for utility employees for access to modify field equipment","control access"]
["dgm.9","t",0.188694,"Weakened Security during Disaster enables DGM Compromise"]
["dgm.9","d",0.59372899999999995,"A threat agent could take advantage of the confusion, lack of security, and hasty reconstitution of the distribution grid after a disaster. For example, a threat agent could delay the recovery effort by leveraging temporary communications with low security to access DMS to switch breakers. Likewise this objective could be achieved by subverting weak physical security at substations (due to damage or communication outages) to access engineering or console ports or relays to change settings and render them inoperable. Further, the interception of temporary communications with low security might support reconnaissance of high priority vulnerabilities to aid in future attacks."]
["dgm.9","v",0.92010700000000001,"emergency response policy, procedures, or execution intentionally disregards security controls to speed recovery"," ","Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"]
["dgm.9","v",0.31973600000000002,"emergency response procedures unintentionally omit security controls"," either in the procedures themselves or during their execution","Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"]
["dgm.9","i",0.882239,"Delay, damage, disruption, or denial of the recovery effort"]
["dgm.9","i",0.67158399999999996,"Damage, disruption, or destruction of a system or components long after the disaster recovery"]
["dgm.9","i",0.48661500000000002,"Theft of historian, configuration, or customer information that could support future attacks"]
["dgm.9","m",0.46595900000000001,"implement configuration management"," in the DGM before and after disasters","track"]
["dgm.9","m",0.50066900000000003,"define policy"," for emergency response that ensures security during a recovery effort","plan"]
["dgm.9","m",0.77044999999999997,"prioritize recovery activities"," for physical security including personnel authentication and access control during the recovery effort","plan"]
["dgm.9","m",0.64186299999999996,"review recovery response"," after the disaster to verify repairs, configurations, and changes are correct","analyze"]
["dgm.9","m",0.77198800000000001,"verify correct operation"," on the DGM systems before deployment","verify"]
["dgm.10","t",0.122403,"Switched Capacitor Banks are Manipulated to Degrade Power Quality"]
["dgm.10","d",0.63384200000000002,"Switched capacitor banks can create large switching transients when connected to a utility feeder, generating voltage spikes up to twice the rated voltage and can be exacerbated when two are switched on back-to-back. A threat agent social engineers DMS Human Machine Interface (HMI) passwords to gain control of switched capacitor bank relays to repeatedly switch capacitor banks on and off, generating cascading voltage spikes and instability to trip protection devices."]
["dgm.10","v",0.69525099999999995,"workforce may be unaware of recommended precautions"," to block social engineering attacks, such as impersonating persons of authority, phishing and rogue USB devices,","Insufficiently Trained Personnel (6.2.1.1)"]
["dgm.10","v",0.75493699999999997,"physical access may be obtained by unauthorized individuals"," to DMS,","Physical Access to the Device (6.5.1.6)"]
["dgm.10","v",0.228799,"users and hardware/software entities are given access unnecessary for their roles"," to critical DMS functions,","Unnecessary System Access (6.2.2.6)"]
["dgm.10","v",0.47257100000000002,"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data"," in the DMS system.","Insufficient Identity Validation or Background Checks (6.2.2.1)"]
["dgm.10","i",0.59037700000000004,"Repeated voltage spikes may damage customer or utility equipment"]
["dgm.10","i",0.87845300000000004,"Possible loss of customer power due to false operation of protective devices"]
["dgm.10","m",0.12154,"train personnel"," on the threat of social engineering attacks and perform social engineering exercises (such as company generated phishing emails or rogue USB drives) to engage employees","train"]
["dgm.10","m",0.46496700000000002,"require synchronous functions"," for closing control, surge arrestors, or pre-insertion resistors to minimize capacitor bank switching transients","ensure availability"]
["dgm.10","m",0.49670399999999998,"restrict physical access"," to engineering consoles and HMIs","control access"]
["dgm.10","m",0.48347800000000002,"require single sign-on"," practices","authenticate"]
["dgm.10","m",0.46918599999999999,"enforce least privilege"," for access to critical DMS functions","control access"]
["dgm.10","m",0.754251,"verify personnel"," that have access to critical DMS functions","verify"]
["dgm.11","t",0.613313,"Threat Agent Triggers Blackout via Remote Access to Distribution System"]
["dgm.11","d",0.281223,"A threat agent performs reconnaissance of utility communications, electrical infrastructure, and ancillary systems to identify critical feeders and electrical equipment. Threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent manufactures an artificial cascade through sequential tripping of select critical feeders and components, causing automated tripping of generation sources due to power and voltage fluctuations. A blackout of varying degree and potential equipment damage ensues. The remote connections might be established using a variety of methods or combination of methods. These include, but are not limited to, using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly."]
["dgm.11","v",0.69496800000000003,"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"," specifically linemen and maintenance personnel company laptops used for remote connections,","Physical Access to the Device (6.5.1.6)"]
["dgm.11","v",0.87003900000000001,"system relies on credentials that are easy to obtain for access"," to company computers,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["dgm.11","v",0.48964099999999999,"physical access may be obtained by unauthorized individuals"," to proprietary utility documents and information,","Physical Access to the Device (6.5.1.6)"]
["dgm.11","v",0.626475,"configuration changes are not verified for correctness"," to prevent and detect human error in data center configuration (e.g., Ethernet cable plugged into wrong port),","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.11","v",1.8701099999999998E-2,"system permits unauthorized changes"," by allowing remote access for vendors to do application maintenance and troubleshooting,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.11","v",0.18412700000000001,"system makes messages accessible to unauthorized individuals"," in the distribution control communication channel,","Use of Insecure Protocols (6.3.1.21)"]
["dgm.11","v",0.50035399999999997,"system design limits opportunity for system recovery using reconfiguration"," such as distribution networks that are more radial in nature than meshed, making network reconfiguration to restore power more difficult.","Business Logic Vulnerability (6.3.1.8)"]
["dgm.11","i",0.60604499999999994,"Loss of customer power"]
["dgm.11","i",0.31348900000000002,"Disclosure of proprietary utility documents or information"]
["dgm.11","i",0.49675900000000001,"Possible customer and utility equipment damage"]
["dgm.11","m",0.53239999999999998,"require strong passwords"," for company devices and systems","secure operations"]
["dgm.11","m",0.77404799999999996,"train personnel"," to protect company information and documents from unauthorized disclosure","train"]
["dgm.11","m",0.81562299999999999,"define policy"," on handling sensitive information. This includes substation one-line diagrams, equipment information, communication architectures, protection schemes, load profiles, etc.","plan"]
["dgm.11","m",0.92548600000000003,"train personnel"," (operations and maintenance employees) to handle and protect company computing devices securely, incorporating two-factor authentication, requirements on storing devices, and reporting instructions in cases of loss or theft","train"]
["dgm.11","m",0.62690699999999999,"create audit logs"," of all changes in HMI control actions","audit"]
["dgm.11","m",0.325102,"generate alerts"," for all changes in HMI control actions","alert"]
["dgm.11","m",0.43379200000000001,"restrict remote access"," of remote vendor connections (e.g., physically disconnect remote connections when not in use)","control access"]
["dgm.11","m",0.15307599999999999,"encrypt communication paths"," for distribution control communications","encrypt"]
["dgm.11","m",0.92910300000000001,"require two-person rule"," for correct DMS configuration","verify"]
["dgm.11","m",0.32686999999999999,"implement configuration management"," for configuration documents","track"]
["dgm.11","m",0.44263000000000002,"isolate networks"," (distribution control networks) by segmenting the distribution control network itself","isolate"]
["dgm.11","m",0.942936,"confirm action"," to modify data center physical configuration","verify"]
["dgm.12","t",0.62339599999999995,"Hijacked Substation Wireless Damages Substation Equipment"]
["dgm.12","d",0.97988600000000003,"A threat agent carries out a man in the middle attack, hijacking the wireless communications channel to a substation transformer. The threat agent uses this capability to disable transformer cooling fans and overheat the device. Depending on the transformer and its controller, this could be done through a direct command or by drastically increasing oil temperature setpoints. Many transformers are also custom built and have long lead times for replacement or repair."]
["dgm.12","v",0.85493300000000005,"system relies on credentials that are easy to obtain for access"," between the transformer and the substation controller,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["dgm.12","v",0.53808,"system makes messages accessible to unauthorized individuals"," in the wireless communication channel,","Use of Insecure Protocols (6.3.1.21)"]
["dgm.12","v",0.502888,"emergency situations may not have the appropriate replacement equipment, some of which require long lead times for repair or replacement"," (custom built transformers).","Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"]
["dgm.12","i",0.51036700000000002,"Loss of customer power"]
["dgm.12","i",0.27144800000000002,"Damage to critical substation equipment"]
["dgm.12","i",0.205544,"Monetary loss"]
["dgm.12","m",0.120062,"authenticate users"," of wireless communications","authenticate"]
["dgm.12","m",0.85176700000000005,"encrypt communication paths"," for wireless communications","encrypt"]
["dgm.12","m",0.24182400000000001,"design for trust"," by replacing wireless communications with wired ones","secure design and implementation"]
["dgm.12","m",0.66634000000000004,"create audit logs"," of all changes in control functions and set points","audit"]
["dgm.12","m",0.733572,"generate alerts"," for unusual changes in control functions and set points","alert"]
["dgm.13","t",0.51028200000000001,"Poor Account Management Compromises DMS and Causes Power Loss"]
["dgm.13","d",0.71836999999999995,"After a maintenance employee retires, computer services personnel forgot to deactivate the employees account on the DMS network. A week later, a threat agent uses the employee's credentials to access the DMS network. The threat agent alters DMS switching schedules so that automated and manual switching actions trip the wrong lines after a fault or before maintenance to cause power interruptions for critical loads, such as hospitals or prisons."]
["dgm.13","v",0.90706500000000001,"workforce not trained in proper procedures"," to check for human error in account management","Insufficiently Trained Personnel (6.2.1.1)"]
["dgm.13","v",0.50079300000000004,"adherence to policies and procedures degrades over time"," introducing human error in account management","Inadequate Periodic Security Audits (6.2.3.1)"]
["dgm.13","v",0.4209,"human error in adherence to policies and procedures"," to check for human error in account management","Inadequate Periodic Security Audits (6.2.3.1)"]
["dgm.13","i",0.74063599999999996,"Loss of critical customer power"]
["dgm.13","i",0.62287400000000004,"Possible loss of human lives"]
["dgm.13","i",0.294458,"Negative publicity"]
["dgm.13","m",0.78107300000000002,"require credential revocation"," in a timely manner for passwords of former employees","control access"]
["dgm.13","m",0.247033,"generate alarms"," for loss of power to ensure timely restoration of power","alert"]
["dgm.13","m",0.92640699999999998,"perform audit"," of live accounts periodically to verify and encourage adherence to procedures","audit"]
["dgm.14","t",0.74770099999999995,"Power loss due to lack of serial communication authentication"]
["dgm.14","d",0.51815199999999995,"Serial communications to substations over phone lines often lack authentication of field devices, such as RTUs.┬áThis might allow a threat agent to directly dial into modems attached to RTU equipment by war dialing city phone numbers or company phone extensions. Such techniques could allow a threat agent to send breaker trip commands to substation relays and disconnect feeders."]
["dgm.14","v",0.16001499999999999,"physical access to a serial port may enable logical access by unauthorized entities"," to communications at substations,","Physical Access to the Device (6.5.1.6)"]
["dgm.14","v",0.93200300000000003,"system relies on credentials that are easy to obtain for access"," to substation relays and RTU (e.g., no passwords or default passwords),","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["dgm.14","v",5.4406099999999999E-2,"publicly accessible and/or third party controlled links used"," ","Inadequate Network Segregation (6.5.1.2)"]
["dgm.14","v",0.68824799999999997,"system makes messages accessible to unauthorized individuals"," using public communications channels without encryption.","Use of Insecure Protocols (6.3.1.21)"]
["dgm.14","i",0.38349899999999998,"Loss of customer power"]
["dgm.14","i",0.138436,"Monetary loss"]
["dgm.14","i",0.36723499999999998,"Negative publicity"]
["dgm.14","m",0.83980600000000005,"authenticate users"," of serial communications using strong passwords","authenticate"]
["dgm.14","m",0.43018299999999998,"encrypt communication paths"," for serial communications using low latency encryption devices","encrypt"]
["dgm.14","m",0.30863600000000002,"design for trust"," and migrate serial communications to field devices from public phone lines to private communication channels","secure design and implementation"]
["dgm.15","t",0.430176,"Threat Agent Causes Worker Electrocution via Remote Access to Distribution System"]
["dgm.15","d",0.89514300000000002,"A threat agent performs reconnaissance of utility maintenance operations to identify current or scheduled maintenance on distribution lines and equipment performed by utility linemen. The threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent energizes distribution lines or equipment that are under maintenance by linemen to elicit injury or death by electrocution. The remote connections might be established using a variety of methods or combination of methods. These include but are not limited to: using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly."]
["dgm.15","v",0.391847,"critical operations are not locked out during maintenance"," (automation system actions),","Business Logic Vulnerability (6.3.1.8)"]
["dgm.15","v",0.87532500000000002,"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"," for linemen and maintenance personnel company laptops used for remote connections,","Physical Access to the Device (6.5.1.6)"]
["dgm.15","v",0.48863800000000002,"system relies on credentials that are easy to obtain for access"," to company computers,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["dgm.15","v",0.46482899999999999,"physical access may be obtained by unauthorized individuals"," to proprietary utility documents and information,","Physical Access to the Device (6.5.1.6)"]
["dgm.15","v",0.334868,"configuration changes are not verified for correctness"," to prevent and detect human error in data center configuration (e.g., Ethernet cable plugged into wrong port),","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.15","v",0.73067700000000002,"system permits unauthorized changes"," by allowing remote access for vendors to do application maintenance and troubleshooting,","Inadequate Change and Configuration Management (6.2.2.5)"]
["dgm.15","v",0.22031800000000001,"system makes messages accessible to unauthorized individuals"," in distribution control communications,","Use of Insecure Protocols (6.3.1.21)"]
["dgm.15","v",0.84679300000000002,"system design limits opportunity for system recovery using reconfiguration"," such as distribution networks that are more radial in nature than meshed, making network reconfiguration to restore power more difficult.","Business Logic Vulnerability (6.3.1.8)"]
["dgm.15","i",0.86549399999999999,"Maintenance personnel injury or death"]
["dgm.15","i",4.9620600000000001E-2,"Damage to company reputation"]
["dgm.15","i",0.54997499999999999,"Financial loss"]
["dgm.15","i",0.15601899999999999,"Possible customer and utility equipment damage"]
["dgm.15","m",0.46950799999999998,"define procedures"," that will disallow remote DMS control actions on lines and equipment that are under maintenance","plan"]
["dgm.15","m",0.96626699999999999,"require strong passwords"," with complexity requirements on company devices and systems","secure operations"]
["dgm.15","m",0.498668,"train personnel"," to protect company information and documents from unauthorized disclosure","train"]
["dgm.15","m",0.27271600000000001,"define policy"," on handling sensitive information. This includes one-lines, equipment information, communication architectures, protection schemes, load profiles, etc.","plan"]
["dgm.15","m",8.8338899999999998E-2,"train personnel"," (operations and maintenance employees) to handle and protect company computing devices securely, incorporating two-factor authentication, requirements on storing devices, and reporting instructions in cases of loss or theft","train"]
["dgm.15","m",1.38253E-2,"create audit logs"," of all changes in HMI control actions","audit"]
["dgm.15","m",0.64073199999999997,"generate alerts"," for all changes in HMI control actions","alert"]
["dgm.15","m",0.96583399999999997,"restrict remote access"," of remote vendor connections (e.g., physically disconnect remote connections when not in use)","control access"]
["dgm.15","m",0.39962700000000001,"encrypt communication paths"," for distribution control communications","encrypt"]
["dgm.15","m",0.55270300000000006,"require two-person rule"," to verify DMS configuration","verify"]
["dgm.15","m",0.48180600000000001,"implement configuration management"," of DMS configuration documents","track"]
["dgm.15","m",0.80867699999999998,"isolate networks"," (distribution control networks) by segmenting the distribution control network itself","isolate"]
["dgm.15","m",0.34793400000000002,"confirm action"," to modify the data center physical configuration","verify"]
["dgm.16","t",0.251307,"Threat agent compromises serial control link to substation"]
["dgm.16","d",0.87470300000000001,"The Telco/Commercial Service Provider (CSP) provides communications capability between the utility's substation and headend/control center. Both wired and wireless based interfaces may be involved depending on the particular utility standards and site-specific constraints. Wired-based communication links can be analog or digital leased lines, while wireless interfaces are typically radio, cellular or even satellite based. To establish the Telco/CSP end-to-end communications, a point of demarcation (Demarc) is provided where the local utility owned communications infrastructure interfaces the telco owned network infrastructure (Figure 3). A knowledgeable threat agent can compromise the serial communications at the Demarc by intercepting and selectively modifying communicated data to masquerade as a user (man-in-the-middle) or replay attack, in which the threat agent captures control messages and subsequent retransmission with the intent of producing an unauthorized effect. This can potentially compromise both real-time (sometimes referred to as operational) traffic as well as non-real-time (sometimes referred to as non-operational) traffic. In the context of real-time data exchanges, the substation gateway or RTU in the substation or the SCADA Front End Processor (FEP) at the headend can be affected by manipulating command and control messages in the direction of the substation or information messages in the direction of the head end. In the case of non-operational data exchanges, IED settings can be potentially manipulated."]
["dgm.16","v",0.85458900000000004,"physical access may be obtained by unauthorized individuals"," to the utility or Telco/ISP,","Physical Access to the Device (6.5.1.6)"]
["dgm.16","v",0.70952199999999999,"unnecessary network access is permitted"," allowing access of threat agent to the demarc or within the service providers network CSU/DSU,","Unnecessary System Access (6.2.2.6)"]
["dgm.16","v",0.24760199999999999,"system relies on credentials that are easy to obtain for access"," to substation gateway/RTU or SCADA FEP,","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["dgm.16","v",0.75048999999999999,"users lack visibility of unapproved access"," to the demarc,","Inadequate Anomaly Tracking (6.4.4.1)"]
["dgm.16","v",0.26085700000000001,"commands or other messages may be inserted on the network by unauthorized individuals"," in the communication protocol,","Use of Insecure Protocols (6.3.1.21)"]
["dgm.16","v",0.53230500000000003,"system makes messages accessible to unauthorized individuals"," over the serial link.","Use of Insecure Protocols (6.3.1.21)"]
["dgm.16","v",0.40148200000000001,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"," in the communication protocol","Use of Insecure Protocols (6.3.1.21)"]
["dgm.16","v",0.54672699999999996,"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"," over the serial link","Use of Insecure Protocols (6.3.1.21)"]
["dgm.16","i",0.73784899999999998,"Loss of customer power, possibly to critical customers (e.g., hospital)"]
["dgm.16","i",0.85791099999999998,"Potential customer and utility equipment damage"]
["dgm.16","i",0.70967800000000003,"Financial loss associated with any equipment damage or restoration to normal operations"]
["dgm.16","i",0.95150199999999996,"Increase in public safety concerns (e.g., loss of heating or cooling on extremely cold or hot days)"]
["dgm.16","i",0.61784099999999997,"Negative impact on customer service due to increase in calls and complaints"]
["dgm.16","i",0.35141299999999998,"Damage to goodwill toward utility"]
["dgm.16","m",0.86169499999999999,"require approved cryptographic algorithms"," to protect the confidentiality of communications and the cryptographic keys,","secure design and implementation"]
["dgm.16","m",0.58006599999999997,"require approved key management"," to protect the cryptographic keys,","secure design and implementation"]
["dgm.16","m",0.48713000000000001,"detect unusual patterns"," of energy usage on Generation Automation (all utilities have some type of revenue protection scheme, but these may not be adequate),","detect"]
["dgm.16","m",0.98792400000000002,"detect unauthorized access"," in network traffic between substation and headend,","detect"]
["dgm.16","m",0.40882299999999999,"require authentication"," on all data exchanges","authenticate"]
["dgm.16","m",0.14945900000000001,"encrypt communication paths"," for serial messaging by using bump-in-the-wire solution,","encrypt"]
["dgm.16","m",0.77233300000000005,"require multi-factor authentication"," by Telco/ISP to the device containing CSU/DSU units through service level agreement (SLA),","authenticate"]
["dgm.16","m",6.6791699999999996E-2,"require tamper detection and response"," by Telco/ISP for the Demarc through SLA,","secure operations"]
["dgm.16","m",0.84786499999999998,"restrict physical access"," by implementing personnel security control procedures.","control access"]
["generic.1","t",9.4897800000000004E-2,"Malicious and Non-malicious Insiders Pose Range of Threats"]
["generic.1","d",0.84259899999999999,"Authorized personnel - who may be operators, engineering staff or administrators, become active threat agents with legitimate access to IT, field systems, and/or control networks."]
["generic.1","v",0.36075099999999999,"users and hardware/software entities are given access unnecessary for their roles"," to perform duties that should be separated,","Unnecessary System Access (6.2.2.6)"]
["generic.1","v",0.52076599999999995,"system permits unauthorized changes"," ","Inadequate Change and Configuration Management (6.2.2.5)"]
["generic.1","v",0.452768,"users lack visibility of unapproved access"," when privileges are elevated for access to security-relevant or operationally critical functions,","Inadequate Anomaly Tracking (6.4.4.1)"]
["generic.1","v",0.50717500000000004,"speed of incident response process is not appropriate for incident"," ","Inadequate Incident Response Process (6.2.3.5)"]
["generic.1","i",0.19542300000000001,"Authorized personnel with legitimate access can inflict significant damage on a system either intentionally or by mistake. The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration."]
["generic.1","m",0.57892200000000005,"require separation of duty"," ","isolate"]
["generic.1","m",0.71735800000000005,"use Role-Based Access Control"," to limit access","control access"]
["generic.1","m",8.4593000000000002E-2,"detect abnormal behavior"," including out-of-policy behavior by authorized users in control networks through protection mechanisms and situational awareness (SIEM, IDS, firewalls, logging, and monitoring)","detect"]
["generic.1","m",0.92439899999999997,"define procedures"," concerning access to security-relevant and operationally critical functionality","plan"]
["generic.1","m",0.49675999999999998,"define procedures"," for processing suspected or confirmed security incidents involving an insider","plan"]
["generic.2","t",0.35458200000000001,"Inadequate Network Segregation Enables Access for Threat Agents"]
["generic.2","d",0.66321699999999995,"A threat agent compromises an asset that has access to the Internet via the \"business\" network. The asset on the business network also has access to a control system asset or network. The compromise of the business network asset provides a pivot point for the threat agent to gain control of a control system asset or network."]
["generic.2","v",9.3393500000000004E-2,"network interconnections provide users and hardware/software entities with access unnecessary for their roles"," such as using virtual local area networks (VLANs) for security or using the same networks for business operations and control systems,","Inadequate Network Segregation (6.5.1.2)"]
["generic.2","v",0.988537,"users lack visibility of unapproved access"," to show remote command and control of a business asset has been obtained,","Inadequate Anomaly Tracking (6.4.4.1)"]
["generic.2","v",0.380384,"users lack visibility of threat activity"," between the business operations network and the Internet to notice when an incident is occurring,","Inadequate Anomaly Tracking (6.4.4.1)"]
["generic.2","v",0.25570900000000002,"network is connected to untrusted networks"," that are viewed as trusted, specifically the control systems network is connected to the business network and views the business network as trusted.","Inadequate Network Segregation (6.5.1.2)"]
["generic.2","i",0.74434699999999998,"The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration"]
["generic.2","m",0.51420699999999997,"isolate networks"," that host business systems from those that host control systems","isolate"]
["generic.2","m",0.97903600000000002,"generate alerts"," using a SEIM and monitor alerts according to the associated risks. This includes alerts generated by firewalls, anti-virus, and specific systems,","alert"]
["generic.2","m",0.31390499999999999,"isolate networks"," with a defensible, defense in depth, network architecture that includes a demilitarized zone (DMZ)","isolate"]
["generic.2","m",4.45814E-2,"enforce restrictive firewall rules"," to achieve network isolation","control access"]
["generic.2","m",0.264899,"require intrusion detection and prevention"," ","detect"]
["generic.2","m",0.111692,"train personnel"," to monitor traffic to and from the Internet to recognize when an incident is occurring","train"]
["generic.2","m",0.977186,"define incident response plan"," to reduce response time when incidents do occur","plan"]
["generic.2","m",2.6806699999999999E-2,"define contingency plan"," as part of the incident response plan to maintain adequate resiliency in high-priority control systems","plan"]
["generic.3","t",0.57678099999999999,"Portable Media Enables Access Despite Network Controls"]
["generic.3","d",0.73280000000000001,"A threat agent introduces counterfeit firmware or software, a virus, or malware via removable media to obtain partial or total control of a device or networked system."]
["generic.3","v",0.20230899999999999,"physical access may be obtained by unauthorized individuals"," to interfaces such as USB, Firewire, or serial ports that allows the unrestricted ability to load software or firmware to devices.","Physical Access to the Device (6.5.1.6)"]
["generic.3","i",0.168576,"The impact for this scenario could range from a minor system being offline to a widespread outage of unknown duration."]
["generic.3","m",0.66724300000000003,"configure for least functionality"," by permanently physically disabling unnecessary interfaces with epoxy or other methods or physically removing them","secure design and implementation"]
["generic.3","m",0.93995899999999999,"configure for least functionality"," by using software controls or other non-physical methods to disable unnecessary interfaces on equipment","secure design and implementation"]
["generic.3","m",2.8298199999999999E-2,"verify settings"," on equipment before the equipment is installed in the field","verify"]
["generic.3","m",4.2123399999999998E-2,"test before installation"," of equipment in the field","test"]
["generic.3","m",0.68285499999999999,"vulnerability scan before install"," of equipment in the field","test"]
["generic.3","m",0.64868999999999999,"require periodic walk-downs"," of equipment to help ensure there are not any new unauthorized devices connected","verify"]
["generic.3","m",4.83168E-2,"define policy"," outlining acceptable and unacceptable use of portable computing devices in a business/corporate local area network (LAN) environment and a control LAN environment","plan"]
["generic.3","m",0.60102,"train personnel"," under a user awareness training program that includes portable media guidelines","train"]
["generic.4","t",8.2825999999999997E-2,"Supply Chain Attacks Weaken Trust in Equipment"]
["generic.4","d",0.89150300000000005,"An adversary replaces a legitimate device with a maliciously altered device and introduces the device into the supply chain without directly compromising a manufacturing entity. This can be done by buying a legitimate device, buying or creating a malicious device and returning the malicious device in place of the legitimate device as an exchange. Alteration may be a modification or deletion of existing functions or addition of unexpected functions."]
["generic.4","v",0.14280999999999999,"sensitive data remains on disposed equipment"," and allows a threat agent to acquire and reverse engineer equipment,","Inadequate Change and Configuration Management (6.2.2.5)"]
["generic.4","v",1.7512900000000001E-2,"system permits unauthorized changes"," in the supply chain.","Inadequate Change and Configuration Management (6.2.2.5)"]
["generic.4","i",0.87210200000000004,"Depending on the level of sophistication of the threat agent, this scenario can result in the complete loss of confidentiality, integrity, and availability of systems using equipment from an infiltrated supply chain."]
["generic.4","m",0.58162400000000003,"define SLA"," for procurement which verifies the manufacture and origin of equipment from a known good and reputable source","plan"]
["generic.4","m",0.82922600000000002,"define policy"," addressing disposal which prevents the acquisition of sensitive parts from excessed or disposed devices","plan"]
["generic.4","m",0.57971600000000001,"require approved cryptographic algorithms"," to prevent a threat agent from reverse engineering devices which are acquired outside of the legitimate supply chain","secure design and implementation"]
["generic.4","m",0.84057199999999999,"perform audit"," of the supply chain periodically to ensure adequate quality control","audit"]
["generic.4","m",0.37287700000000001,"detect abnormal behavior"," that may indicate supply chain issues, such as unauthorized communications or behavior by deployed devices in the system network","detect"]
["generic.4","m",0.110726,"test before installation"," to detect unwanted functionality before putting devices into production. The objective is to validate functionality and usability","test"]
["gen.1","t",0.18282699999999999,"Threat agent adds spurious trip parameters on remotely located plant support equipment and trips unit offline."]
["gen.1","d",0.89150300000000005,"A threat agent gains physical access to a river water pump house, connects a laptop to the local controls network, and adds a time-delay trip to the circulating water pumps triggered off of a normal value. This causes loss of cooling water flow resulting in the loss of condenser vacuum tripping the turbine and causing the plant to be tripped off line."]
["gen.1","v",0.14280999999999999,"Physical access may be obtained by unauthorized individuals as many sites have pump houses","well outside of the security perimeter of the plant.","Physical Access to the Device (6.5.1.6)"]
["gen.1","v",1.7513000000000001E-2,"System relies on credentials that are easy to obtain for access to make configuration changes to","the equipment controls.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["gen.1","v",1.75131E-2,"System permits unauthorized changes to the"," configuration.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.1","v",1.7512900000000001E-2,"Commands or other messages may be inserted on the network by unauthorized individuals"," resulting in unauthenticated changes to sensitive parameters.","Use of Insecure Protocols (6.3.1.21)"]
["gen.1","i",0.87210200000000004,"Inadequate cooling water to the condenser will lead to a loss of vacuum that will trip the turbine."]
["gen.1","i",0.87210299999999996,"Improper cooling water levels could damage the condenser and turbine."]
["gen.1","i",0.87210399999999999,"Lost generation."]
["gen.1","i",0.87210500000000002,"Time and expense to diagnose the problem."]
["gen.1","i",0.872116,"Plant thermal cycle gives greater opportunity for boiler tube leak."]
["gen.1","m",0.58162400000000003,"Restrict physical access to the pump house using, for example, card swipes, pin codes,"," etc.","control access"]
["gen.1","m",0.82922700000000005,"Define procedures to evaluate the credibility of high intake level readings from a pump house.","For a spurious reading, other plant indications related to open loop cooling system would not be consistent.","verify"]
["gen.1","m",0.57971799999999996,"Require periodic physical surveillance of intake structures and equipment,"," (new common mitigation).","secure operations"]
["gen.1","m",0.58162499999999995,"Restrict physical access by implementing personnel security control"," procedures.","control access"]
["gen.1","m",0.82922300000000004,"Restrict configuration access to limit who has access and can make configuration"," changes.","control access"]
["gen.1","m",0.57971899999999998,"Require video surveillance of the human interfaces to the pump house"," equipment.","secure operations"]
["gen.1","m",0.84057300000000001,"Authenticate users for all user interface"," interactions.","authenticate"]
["gen.1","m",0.37287399999999998,"Authenticate users so that physical access to the system(s) does not","automatically grant logical access.","authenticate"]
["gen.1","m",0.11075,"Generate alarms on remote equipment when there is evidence of tampering of","controls and instrumentation.","alert"]
["gen.2","t",0.18282799999999999,"Fuel handling system inoperable after incorrect programmable logic controller motor start parameters are loaded from corrupted reference configuration"]
["gen.2","d",0.89150399999999996,"An employee that has access to a laptop with the configuration files for the fuel handling programmable logic controllers makes accidental changes to parameters that affect the logic for disabling the main conveyor on plugged fuel chutes at a key transfer point. These changes will go unnoticed until the next time the laptop is used to load the configuration into the networked programmable logic controllers. Once the altered parameters are loaded û the conveyor continues to run even when the chute is plugged. This will continue until the control logic can be reconfigured and verified. When the chute is plugged, coal will begin to pile up quickly and spill."]
["gen.2","v",0.14282,"Configuration changes are not verified for correctness as an individual user is able to modify the referenced"," configuration.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.2","i",0.87211300000000003,"Resources required to diagnose and repair the control logic."]
["gen.2","i",0.87211399999999994,"Coal falling from high elevation can damage equipment and endanger personnel."]
["gen.2","i",0.87211499999999997,"If the logic is not repaired in time, the plant's generation would be compromised."]
["gen.2","m",0.58163399999999998,"Create audit log of all changes to programmable logic"," controllers.","audit"]
["gen.2","m",0.829237,"Implement configuration management to reduce the likelihood that a threat agent can compromise"," an entire system. (Note: Storing the master copy of the programmable logic controller configuration for the system on a laptop allows for untracked changes to the master configuration.","track"]
["gen.2","m",0.57972800000000002,"Restrict configuration access to limit who has access and can make configuration"," changes.","control access"]
["gen.2","m",0.58163500000000001,"Require two-person rule for configuration"," changes.","verify"]
["gen.2","m",0.829233,"Validate data to ensure correctness of"," changes.","verify"]
["gen.2","m",0.57972900000000005,"Check software file integrity (digital signatures or keyed hashes) to validate software or firmware updates before installation and/or during"," operation.","check integrity"]
["gen.3","t",0.28282800000000002,"Threat actor causes chemical spill using vendor remote access"]
["gen.3","d",0.99150400000000005,"A representative of a vendor contracted to manage inventory and chemistry within the generation plant has remote, logical access through an insecure cellular connection. Remote access grants configuration control to the storage tank level instrumentation signals, day tank levels, and pump settings. A threat agent utilizes the cellular connection to access the system and modify the level indication causing the tanks to be overfilled with hazardous chemicals"]
["gen.3","v",0.91428200000000004,"System relies on credentials that are easy to obtain for access to potentially damaging"," controls.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["gen.3","v",0.91428299999999996,"Users lack visibility of unapproved access to the configuration"," controls.","Inadequate Anomaly Tracking (6.4.4.1)"]
["gen.3","v",0.91428399999999999,"Remote access may be obtained by unauthorized"," individual.","Unnecessary System Access (6.2.2.6)"]
["gen.3","v",0.91428500000000001,"Users lack visibility that unauthorized changes were made to the configuration"," parameters.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.3","i",0.972113,"Hazardous chemical spills of any size are reportable to environmental authorities."]
["gen.3","i",0.97211400000000003,"Personnel and equipment are endangered by the uncontrolled hazardous chemical release."]
["gen.3","i",0.97211499999999995,"Impact may continue even after the laptop is retrieved if a copy of the laptop's operating system and/or applications can be exfiltrated or recreated by the threat agent."]
["gen.3","m",0.98163400000000001,"Generate alerts when changes are made to the control"," system.","alert"]
["gen.3","m",0.92923699999999998,"Create audit logs to track who has made system configuration"," modifications.","audit"]
["gen.3","m",0.679728,"Restrict configuration access to limit who has access and can make configuration"," changes.","control access"]
["gen.3","m",0.68163499999999999,"Require approval of all changes through the configuration management"," process.","verify"]
["gen.3","m",0.62923300000000004,"Require two-person rule for configuration changes to include a local"," resource.","verify"]
["gen.3","m",0.67972900000000003,"Design for security in the generation plant"," system.","secure design and implementation"]
["gen.4","t",0.12828290000000001,"Protective disconnect relays disabled on switchgear damaging generator"]
["gen.4","d",0.19915040000000001,"A technician installing replacement relays in a switchyard encounters an error on a generator protection relay that has remote access enabled. The technician û unfamiliar with this error - engages a public Internet message board to get diagnostic information for the relay. A threat agent - posing as an expert on the message board û targets the technician with a spear phishing attack to gain credentials necessary for remote access. The threat agent then acquires access to the generator protection relay and changes the configuration causing it to not open when appropriate. The failure of the protective relay to disconnect keeps the generator tied to the grid during a plant shutdown. This ômotorsö the generator and significantly damages the generator and keeps the plant off-line until the generator can be repaired off-site."]
["gen.4","v",0.1914283,"System relies on credentials that are easy to obtain for access to the network interface"," device.","Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"]
["gen.4","v",0.1914284,"System permits potentially harmful command sequences by allowing for disabling the disconnect capability to be modified"," remotely.","Business Logic Vulnerability (6.3.1.8)"]
["gen.4","v",0.1914285,"Remote access may be obtained by unauthorized"," individuals.","Unnecessary System Access (6.2.2.6)"]
["gen.4","v",0.1914286,"Workforce may be unaware of recommended precautions to block social engineering attacks, such as spear"," phishing.","Insufficiently Trained Personnel (6.2.1.1)"]
["gen.4","v",0.19142870000000001,"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing"," techniques.","Insufficiently Trained Personnel (6.2.1.1)"]
["gen.4","i",0.19721130000000001,"Damage to the generator."]
["gen.4","i",0.19721140000000001,"Loss of revenue affected generating units until generator can be repaired which is usually performed off-site."]
["gen.4","i",0.19721150000000001,"Depending on generating contracts, cost of replacement power while unit is out."]
["gen.4","m",0.19816339999999999,"Authenticate users that modify configuration"," settings.","authenticate"]
["gen.4","m",0.1929237,"Require multi-factor authentication for remote connection to the"," substation.","authenticate"]
["gen.4","m",0.16797280000000001,"Restrict configuration access to limit who has access and can make configuration"," changes.","control access"]
["gen.4","m",0.16816349999999999,"Train personnel regarding"," spear-phishing.","train"]
["gen.4","m",0.16292329999999999,"Create audit logs of configuration"," changes.","audit"]
["gen.5","t",0.22828280000000001,"Main transformer is out-of-service after being damaged through deluge system being remotely activated"]
["gen.5","d",0.29915039999999998,"A malicious technician within the company contracted to monitor and service the fire protection system on the plants substations installs a leave behind wireless network device during periodic maintenance. Using remote access and control of the system, the technician then alters the system settings, specifically, blocking the logic that generates fire alarms on the fire panel in the Main Control Rooms so no alarms are received in the control room. The technician then provides a false fire detection signal to the system. The fire signal activates the deluge system on the main turbine. This causes damage to the main turbine. The plant trips offline and the main turbine is disabled. [Note: For systems which only operate during emergencies, but which could damage or incapacitate equipment if caused to operate spuriously, it would seem prudent to periodically verify setpoints and control configurations.]"]
["gen.5","v",0.29142820000000003,"Unnecessary access is permitted to critical functions such as commands to activate the deluge system and to make changes to the alerting"," logic.","Unnecessary System Access (6.2.2.6)"]
["gen.5","v",0.29142829999999997,"System permits unauthorized changes to the system"," settings.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.5","v",0.29142839999999998,"Configuration changes are not verified for correctness to prevent and detect unauthorized setting"," changes.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.5","i",0.29721130000000001,"Units served by the fire protection system will trip offline resulting in associated costs to restart the unit and to purchase replacement power and challenges grid stability at the moment that the plant is taken offline."]
["gen.5","i",0.29721140000000001,"Any unexpected plant trip stresses the major plant components (generator, turbine and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts."]
["gen.5","i",0.29721150000000002,"Long term down time of plant if damage to transformer is severe because of long lead time of new equipment."]
["gen.5","m",0.29816340000000002,"Prevent remote modification of critical control"," logic.","control access"]
["gen.5","m",0.29292370000000001,"Require physical connection to perform changes to critical control logic and to activate fire protection"," system.","secure design and implementation"]
["gen.5","m",0.26797280000000001,"Implement configuration management to reduce the likelihood that one person can implement changes that impact the"," system.","track"]
["gen.5","m",0.2681635,"Restrict configuration access to limit who has access and can make configuration"," changes.","control access"]
["gen.5","m",0.26292330000000003,"Detect unauthorized devices û in this case, rouge wireless"," devices.","detect"]
["gen.5","m",0.26797290000000001,"Configure for least functionality by removing unnecessary interfaces from production"," devices.","secure design and implementation"]
["gen.6","t",0.32828279999999999,"Precipitator HMI interface disabled through malware introduced through update."]
["gen.6","d",0.39915040000000002,"A vendor is onsite and updating an HMI for the precipitator and installs software using a USB drive that is infected with malware. The malware disables the HMI for the precipitator, consequently disabling the local control capabilities for the precipitator. The loss of control can result in an environmental violation and will require the system to be restored. Restoration of the system may require that the precipitator be taken off line."]
["gen.6","v",0.3914282,"Workforce not trained in proper procedures through allowing a USB drive with malware to be connected to a network"," resource.","Insufficiently Trained Personnel (6.2.1.1)"]
["gen.6","v",0.39142830000000001,"System permits installation of"," malware.","Inadequate Malware Protection (6.4.2.3)"]
["gen.6","i",0.39721129999999999,"Cost in diagnosis and system reconfiguration and testing."]
["gen.6","i",0.39721139999999999,"Potential environmental violation."]
["gen.6","i",0.3972115,"Potential for propagation to other system."]
["gen.6","m",0.3981634,"Train personnel regarding use of USB drives and proper anti-malware techniques  (e.g., scanning drives, alternate installation protocols, etc."," ).","train"]
["gen.6","m",0.39292369999999999,"Require two-person rule for configuration"," changes.","verify"]
["gen.6","m",0.36797279999999999,"Test for malware before updating the"," software.","test"]
["gen.6","m",0.36816349999999998,"Create audit logs of configuration"," changes.","audit"]
["gen.7","t",0.42828280000000002,"Hijacked Selective Catalytic Reduction System (SCR) is disabled leading to shutdown of power plant"]
["gen.7","d",0.49915039999999999,"A vendor technician performs maintenance on the Programmable Logic Controller that controls the Ammonia Distribution system for the Selective Catalytic Reduction System (SCR).áThe technician installs malware-corrupted firmware û either inadvertently or maliciously - into the programmable logic controller when making the repairs. The malware executes when the unit is at full power and shuts the ammonia injection down. This causes the NOx discharge to continue to trend up above the permitted limit.áOperations takes action to reduce power to limit the NOx discharge.áA forced derate is put in place, but NOx continues to rise.áFinally, the decision is made to remove the unit from service to troubleshoot the problem."]
["gen.7","v",0.49142819999999998,"System permits installation of malware onto the firmware of the programmable logic"," controller.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.7","i",0.49142829999999998,"Fines from unexpected emission exceedance leading to violation of environmental","  license."]
["gen.7","i",0.49721130000000002,"Stricter emissions parameters by environmental regulator"]
["gen.7","i",0.49721140000000003,"Unit derate resulting in loss of revenue until the utility can satisfy regulatory requirements related to incident"]
["gen.7","i",0.49721149999999997,"The abrupt shutdown of the SCR system stresses the components of the system and increases the likelihood of equipment damage"]
["gen.7","m",0.49816339999999998,"Test for malware before maintenance by performing a check on the installation"," media.","test"]
["gen.7","m",0.49292370000000002,"Check software file integrity (using digital signature or keyed hash) to validate firmware updates before"," installation.","check integrity"]
["gen.7","m",0.46816350000000001,"Test for malware after maintenance by scanning any serviced components for"," malware.","test"]
["gen.8","t",0.52828280000000005,"Plant tripped off-line through access gained through improperly configured diagnostic device on vendor maintained equipment"]
["gen.8","d",0.59915039999999997,"A technician leaves their laptop û previously infected by a virus û connected to the DCS network to run a diagnostic on smart valves. The laptop is connected to both the centralized remote monitoring system and the plant controls system, because the laptop remains connected to the corporate wireless network. The virus propagates to other computers on the system and starts polling networked assets sending commands that cause a flood of traffic in the DCS network and the centralized remote monitoring system. The commands overwhelm the processing ability of the network causing a logical failure and triggering a shutdown of the plant."]
["gen.8","v",0.59142819999999996,"System may become overwhelmed by traffic flooding or malformed traffic through the DCS"," network.","Error Handling Vulnerability (6.3.1.6)"]
["gen.8","v",0.59142819999999996,"System permits wireless access by unauthorized parties to the DCS"," network.","Unnecessary System Access (6.2.2.6)"]
["gen.8","v",0.59142819999999996,"Unnecessary access is permitted to networking components by putting a diagnostic component on the DCS network with unnecessary visibility to other"," components.","Unnecessary System Access (6.2.2.6)"]
["gen.8","v",0.59142819999999996,"Network interfaces permit unnecessary traffic flows through the ôdual-homedö"," laptop.","Inadequate Network Segregation (6.5.1.2)"]
["gen.8","i",0.59142830000000002,"Infected assets will have to be cleaned and verified to be virus-free and - in some cases - reconfigured and verified operational.","  license."]
["gen.8","i",0.5972113,"Any unexpected plant trip stresses the major plant components (generator, turbine, and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts."]
["gen.8","m",0.59721139999999995,"Require safe mode for the DCS in a transient network traffic"," situation.","secure operations"]
["gen.8","m",0.59721150000000001,"Detect unusual patterns as the DCS traffic flows are routine: network components can be configured to not generate rapid and random"," communications.","detect"]
["gen.8","m",0.59816340000000001,"Train personnel in proper configuration requirements for assets connected to the DCS"," system.","train"]
["gen.8","m",0.59292370000000005,"Authenticate devices connecting to the DCS"," network.","authenticate"]
["gen.8","m",0.56816350000000004,"Enforce least privilege for access to the"," DCS.","control access"]
["gen.9","t",0.62828280000000003,"Failure of continuous emission monitoring systems (CEMS) leads to violation"]
["gen.9","d",0.69915039999999995,"The Continuous Emissions Monitoring System (CEMS) is configured for a connection to the plant control system and a remote connection to allow remote monitoring by the vendor. A threat agent launches a spear-phishing attack that is successful with one connected user. The threat agent uses the acquired credentials to access the CEMS to modify the control signal to provide false information to both the remote monitoring center and the control room. The false control signal shows a lower emission point giving the plant indication to cut back on emissions control. The lower control increases the actual emissions above the allowable rates set in the air permit. The situation persists long enough to lead to a violation of the plant emissions permit."]
["gen.9","v",0.69142820000000005,"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing"," techniques.","Insufficiently Trained Personnel (6.2.1.1)"]
["gen.9","v",0.69142820000000005,"Workforce may be unaware of recommended precautions to block social engineering attacks, such as","  spear-phishing.","Insufficiently Trained Personnel (6.2.1.1)"]
["gen.9","v",0.69142820000000005,"Remote access may be obtained by unauthorized"," individuals.","Unnecessary System Access (6.2.2.6)"]
["gen.9","v",0.69142820000000005,"System permits unauthorized changes through remote configuration"," capabilities.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.9","i",0.6914283,"Unexpected exceedance on the plants environmental emissions leads to violation of environmental license with the regulator and subsequent fines.","  license."]
["gen.9","i",0.69721129999999998,"Stricter emissions parameters are specified by the environmental department."]
["gen.9","i",0.69721140000000004,"Bad press for the utility because environmental incidents are public record."]
["gen.9","m",0.69721149999999998,"Train personnel regarding social engineering"," techniques.","train"]
["gen.9","m",0.69816339999999999,"Require read-only access for remote monitoring"," capabilities.","verify"]
["gen.9","m",0.69292370000000003,"Require two-person rule for major"," changes.","verify"]
["gen.10","t",0.72828280000000001,"Threat agent causes grid instability through control of dedicated data and voice lines between system operating center and plant"]
["gen.10","d",0.79915040000000004,"Combined voice and data communication lines between the system operating center (also known as ôdispatchö or generation controls center) that regulates the plant output are maintained by the phone company. The lines are clearly marked as being dedicated for this purpose to ensure that phone repair technicians take special care around these lines. The utility uses the existing system and does not encrypt the data. A threat agent gains physical access to these lines and connects them to their own networking components to allow for remote access û setting up a man-in-the-middle attack. The threat agent sends erroneous signals to the plant to rapidly cut back on power output during a period of high load on the grid. Insufficient power and high load leads to grid instability."]
["gen.10","v",0.79142820000000003,"Physical access may be obtained by unauthorized individuals to communications channel"," components.","Physical Access to the Device (6.5.1.6)"]
["gen.10","v",0.79142820000000003,"Unnecessary access is permitted to the communications channel in that the lines are unnecessarily marked by the phone"," company.","Unnecessary System Access (6.2.2.6)"]
["gen.10","v",0.79142820000000003,"System permits unauthorized changes to"," commands.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.10","v",0.79142820000000003,"Publicly accessible and/or third party controlled links used in plant/system operating center communication"," channels.","Inadequate Network Segregation (6.5.1.2)"]
["gen.10","i",0.79142829999999997,"The magnitude depends on grid conditions at the time (e.g., brownout, rolling blackout, etc.)."]
["gen.10","m",0.79721129999999996,"Restrict physical access to communications channel"," components.","control access"]
["gen.10","m",0.79721140000000001,"Restrict remote access to not allow direct file transfer as a default"," access.","control access"]
["gen.10","m",0.79721149999999996,"Encrypt communication paths to prevent man-in-the-middle"," attacks.","encrypt"]
["gen.10","m",0.79816339999999997,"Restrict network"," access.","control access"]
["gen.10","m",0.79292370000000001,"Require acknowledgment from devices indicating what commands they"," received.","verify"]
["gen.10","m",0.79292370000000001,"Require redundancy in communications methods","  (e.g., back-up phone lines or cellular for voice communications).","ensure availability"]
["gen.11","t",0.82828279999999999,"Outage extended due to DCS HMI being disabled from malware exploiting a known, unpatched vulnerability"]
["gen.11","d",0.89915040000000002,"A stable build of the DCS software was released. Several months later, the Distributed Control System (DCS) software is upgraded during a planned outage as suggested by the vendor. The upgrade process is lengthy and a number of security-related patches for the operating system were available to be installed. The decision is made to install older patches but delay installing the most recent patches to get the DCS operational and get the plant on-line. During the update process for the older patches, a technician uses an infected USB/laptop device on a computer in the DCS network. The malware exploits a vulnerability that was addressed in a recent patch that was not installed. The malware then spreads to the HMI stations interrupting communications through excessive network traffic impacting the control system processors. This delays the startup until the malware can be removed, the system can be patched, and the DCS reconfigured."]
["gen.11","v",0.8914282,"System permits installation of malware on the HMI"," machines.","Inadequate Malware Protection (6.4.2.3)"]
["gen.11","v",0.8914282,"Workforce may be unaware of recommended precautions regarding USB/laptop"," usage.","Insufficiently Trained Personnel (6.2.1.1)"]
["gen.11","v",0.8914282,"System may become overwhelmed by traffic flooding or malformed traffic because of an exploited"," vulnerability.","Error Handling Vulnerability (6.3.1.6)"]
["gen.11","v",0.89142829999999995,"Software patches are not checked regularly to ensure that they are current on the DCS operating"," system.","Inadequate Patch Management Process (6.2.2.4)"]
["gen.11","i",0.89721130000000004,"Outage extended past the original plan leading to lost generation revenue."]
["gen.11","m",0.89721139999999999,"Check software execution integrity, since software may be compromised when loaded for"," execution.","check integrity"]
["gen.11","m",0.89721150000000005,"Train personnel under a user awareness training program that includes portable media"," guidelines.","train"]
["gen.11","m",0.89816339999999995,"Maintain patches and fully evaluate the risk of delaying patches against the potential impact of the"," patch.","secure operations"]
["gen.11","m",0.89292369999999999,"Detect abnormal output","  (unexpected communications).","detect"]
["gen.12","t",0.92828279999999996,"Chemical inventory process control system not properly patched leading to compromised inventory controls of hazardous chemicals"]
["gen.12","d",0.99915039999999999,"A threat agent is able to gain access to the corporate chemical inventory process control system by exploiting a known vulnerability that has not yet been patched. Once the threat agent is able to access the chemical inventory process control system, the threat agent is able to adjust the inventory levels preventing needed chemicals from being ordered."]
["gen.12","v",0.99142819999999998,"Software patches are not checked regularly to ensure that they are current in the corporate chemical inventory process control"," system.","Inadequate Patch Management Process (6.2.2.4)"]
["gen.12","v",0.99142830000000004,"Unnecessary access is permitted to critical"," functions.","Unnecessary System Access (6.2.2.6)"]
["gen.12","i",0.99721130000000002,"Potential impact on production depending on the chemicals that are missing when needed."]
["gen.12","m",0.99721139999999997,"Maintain patches on corporate chemical inventory process control"," system.","secure operations"]
["gen.12","m",0.99721150000000003,"Restrict access to the corporate chemical inventory process control"," system.","control access"]
["gen.12","m",0.99816340000000003,"Require authentication to critical"," data.","authenticate"]
["gen.13","t",0.93828279999999997,"Utility competitor gains advantage using Monitoring & Diagnostic (M&D) center to gain sensitive information on upcoming generation availability"]
["gen.13","d",0.98915039999999999,"A threat agent is able to gain access to the corporate An authorized user with the appropriate credentials is bribed or coerced by a threat agent to expose operational data on a dozen generation facilities through the M&D Center. The user collects information on the previous dayÆs operation, critical equipment status, and operational plans û including outage schedule - for the upcoming week. The authorized user sends the data to the threat agent via e-mail. The threat agent then uses the information to inform competitors bidding into the power market. inventory process control system by exploiting a known vulnerability that has not yet been patched. Once the threat agent is able to access the chemical inventory process control system, the threat agent is able to adjust the inventory levels preventing needed chemicals from being ordered."]
["gen.13","v",0.98142819999999997,"Users and hardware/software entities are given access unnecessary for their roles. The M&D center has access to both plant operational and information informing strategic power market decision which may not be necessary for the core function of the M&D"," center.","Unnecessary System Access (6.2.2.6)"]
["gen.13","v",0.98142830000000003,"Network interfaces permit unnecessary traffic flows to the"," Internet.","Inadequate Network Segregation (6.5.1.2)"]
["gen.13","i",0.98721130000000001,"Utility loss of revenue due to disadvantage in bidding into power marketsmpact on production depending on the chemicals that are missing when needed."]
["gen.13","m",0.98721150000000002,"Enforce least privilege for access to the various databases and"," plans.","control access"]
["gen.13","m",0.98816340000000003,"Detect abnormal output (unexpected data or destinations) in operations network"," traffic.","detect"]
["gen.14","t",0.94828279999999998,"Generation assets taken off line by disrupted microwave communications"]
["gen.14","d",0.97915039999999998,"A criminal threat agent is able to gain access to the Microwave Communication used for the long-distance communication among the plant switchyard assets, transformer telemetry, and the system operator constituting a Wide Area Network (WAN) of system interconnects. The threat agent has acquired the equipment needed to receive and transmit microwave communications. By establishing a line-of-sight position with the plant communication tower the agent is able to intercept information from over-the-air communications. These communications include substation telemetry and plant status information and can be used to control system response to interconnects. The threat agent determines the location needed to access the system to monitor critical communications of plant and switchyard status. Though a man-in-the-middle attack, the threat agent is able to send erroneous messages that generate a transformer fault. This, in turn, prompts automatic protective actions to open breakers isolating the main transformer. This disconnects the plant from the grid taking the unit offline and making the generation asset unavailable to the wider system."]
["gen.14","v",0.97142819999999996,"System permits potentially harmful command sequences to be transmitted by a threat"," agent.","Business Logic Vulnerability (6.3.1.8)"]
["gen.14","v",0.97142830000000002,"Commands or other messages may be inserted on the network by unauthorized"," individuals.","Use of Insecure Protocols (6.3.1.21)"]
["gen.14","v",0.96142830000000001,"Spoofed signal is either difficult or infeasible to distinguish from a legitimate"," signal.","Use of Insecure Protocols (6.3.1.21)"]
["gen.14","i",0.96722229999999998,"Loss of Generation by separating the plant from system."]
["gen.14","i",0.9672113,"System reliability is challenged by the unauthorized disconnection."]
["gen.14","m",0.9672115,"Authenticate messages communicated among assets over the interconnect"," network.","authenticate"]
["gen.14","m",0.96816349999999995,"Validate signal by verifying certain commands (e.g., disconnect) among"," assets.","verify"]
["gen.14","m",0.97721150000000001,"Define contingency plan for handling interconnects if the microwave WAN is in"," operable.","plan"]
["gen.14","m",0.97816340000000002,"Require safe mode by having standard operating procedures that allow the interconnect protocols to operate in a default"," state.","secure operations"]
["gen.14","m",0.90721149999999995,"Encrypt communication paths to prevent man-in-the-middle"," attacks.","encrypt"]
["gen.14","m",0.9581634,"Require redundancy of communications of interconnect states for assets on the microwave WAN"," (e.g., rolling over to a system on the companies intranet temporarily, etc.).","ensure availability"]
["gen.15","t",0.94838279999999997,"Plant tripped off-line through access gained through a compromised vendor remote connection"]
["gen.15","d",0.97945040000000005,"The threat agent, a disgruntled vendor employee, uses the authorization credentials and verification procedure to a secure remote maintenance solution. The remote access solution involves a vendor-maintained asset on the DCS network that prompts the utility to grant the asset access to the DCS network. In addition to the prompt, the procedure requires a separate call from the vendor to the utility describing the need to remotely connect before the utility will complete the connection. The threat agent claims the need to collect routine system performance information. The utility connects the vendor maintained computer to the DCS network, giving the threat agent access. The payload delivered by the threat agent is a modified system file that starts polling networked assets sending commands that cause a flood of traffic in the DCS network. The commands overwhelm the processing ability of the network causing loss of DCS control of the plant.  On loss of plant control the assigned operator initiates an immediate unit trip."]
["gen.15","v",0.97152819999999995,"System may become overwhelmed by traffic flooding or malformed traffic through the DCS"," network.","Error Handling Vulnerability (6.3.1.6)"]
["gen.15","v",0.97178830000000005,"Insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive"," data.","Insufficient Identity Validation or Background Checks (6.2.2.1)"]
["gen.15","v",0.96179829999999999,"Publicly accessible and/or third-party control links"," used.","Inadequate Network Segregation (6.5.1.2)"]
["gen.15","v",0.97180820000000001,"Design permits unnecessary"," privileges.","Unnecessary System Access (6.2.2.6)"]
["gen.15","v",0.97181830000000002,"Presence of features or functions that may be misused by"," users.","API Abuse (6.3.2.1)"]
["gen.15","v",0.96182829999999997,"System permits installation of"," malware.","Inadequate Malware Protection (6.4.2.3)"]
["gen.15","v",0.96192829999999996,"Users lack visibility of threat activity, specifically unexpected access to network components or unusual traffic on the"," network.","Inadequate Anomaly Tracking (6.4.4.1)"]
["gen.15","v",0.97562819999999995,"Users and hardware/software entities are given access unnecessary for their roles to perform duties that should be"," separated.","Unnecessary System Access (6.2.2.6)"]
["gen.15","v",0.97572829999999999,"Users lack visibility that unauthorized changes were made to the"," DCS.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.15","v",0.96582829999999997,"System permits unauthorized changes by allowing remote access for vendors to do monitoring and"," maintenance.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.15","i",0.96592230000000001,"Affected assets will have to be restored and verified operational."]
["gen.15","i",0.96601130000000002,"Trips result in costs to restart the unit and to purchase replacement power. An unexpected and sudden trips challenge grid stability at the moment that the plant is taken offline."]
["gen.15","i",0.96611130000000001,"Any unexpected plant trip stresses the major plant components (generator, turbine, and boiler) leading to a reduction in the expected life of the components and a greater possibility of damage when the unit restarts."]
["gen.15","m",0.96762150000000002,"Train personnel in proper configuration requirements for assets connected to the DCS"," system.","train"]
["gen.15","m",0.96636350000000004,"Enforce least privilege for access to the DCS by limiting remote administrative access through vendor monitoring employee sessions for cases of configuration and file system"," changes.","control access"]
["gen.15","m",0.97764150000000005,"Restrict remote access to not allow direct file transfer as a default"," privilege.","control access"]
["gen.15","m",0.97656339999999997,"Require second-level authentication requiring management authorization for configuration changes and file transfers and ôescorted remote accessö requiring live monitoring of vendor access for potentially damaging"," actions.","authenticate"]
["gen.15","m",0.90661150000000001,"Restrict configuration access to limit who has access and can make configuration"," changes.","control access"]
["gen.15","m",0.95676340000000004,"Create audit logs through the ability to record the remote access"," session.","audit"]
["gen.15","m",0.96681150000000005,"Detect unauthorized configuration changes to the"," asset.","detect"]
["gen.15","m",0.96916349999999996,"Automated configuration change"," detection.","detect"]
["gen.15","m",0.9777015,"Detect unauthorized access in network traffic between the vendor and the DCS"," device.","detect"]
["gen.15","m",0.97871339999999996,"Require intrusion detection and prevention"," detection.","detect"]
["gen.15","m",0.94321149999999998,"Detect abnormal behavior in machines and flag this"," behavior.","detect"]
["gen.15","m",0.95446339999999996,"Require application whitelisting on the DCS"," network.","secure operations"]
["gen.16","t",0.94828279999999998,"Black-Start Disruption"]
["gen.16","d",0.97915039999999998,"The physical attack is preceded by a cyber attack using malware to indicate false current/voltage transformer (CT/VT) readings. The malwareÆs intent in generating these readings is to falsely indicate the existence of 3 phase shorts  on one or more transmission facilities. The goal of the cyber attack is to create conditions that lead to unnecessary automated responses by select transmission protection equipment. The desired effect of these responses is to cause protection relays to open and close breakers in a manner that results in grid instability leading to the shutdown of electricity generation serving the grid segment under attack. The physical portion of the attack consists of destroying navigation locks or water level control gates on one or more hydroelectric units designated as ôblack-startö facilities. Destruction of the locks or gates results in the loss of water containment. While water volumes behind the generating units remain sufficient for black-start power generation, the force of water movement past the damaged locks or gates will hinder repairs. By the time the water levels have receded to a point which allows repair, the levels will likely be too low to support the level of power generation needed to conduct normal black-start operations. The results of the attack may be extended depending upon the time needed to raise the water to a level sufficient for power generation."]
["gen.16","v",0.97142819999999996,"System permits installation of"," malware.","Inadequate Malware Protection (6.4.2.3)"]
["gen.16","v",0.97142830000000002,"Physical access may be obtained by unauthorized individuals to control system"," devices.","Physical Access to the Device (6.5.1.6)"]
["gen.16","v",0.96142830000000001,"System permits unauthorized changes to the"," configuration.","Inadequate Change and Configuration Management (6.2.2.5)"]
["gen.16","i",0.96722229999999998,"Affected assets will have to be restored and verified operational."]
["gen.16","i",0.9672113,"Time and expense to diagnose the problem."]
["gen.16","i",0.9672115,"The magnitude depends on grid conditions at the time (e.g., brownout, rolling blackout, etc.)."]
["gen.16","m",0.96816349999999995,"Test for malware before updating the"," software.","test"]
["gen.16","m",0.97721150000000001,"Restrict physical"," access.","control access"]
["gen.16","m",0.97816340000000002,"Detect unauthorized configuration"," changes.","detect"]

{"sheet":"Impact","index":13,"n_rows":19,"n_cols":7,"rows_kept":19,"cut":false,"hidden":true,"merged":[[4,6,4,10]]}
[]
[null,"The following scores are entered on the Detail tab for a failure scenario. The total appears on the Detail tab, and also on the Assess tab for the scenario in the Impact Score column."]
[]
[null,"Criterion","Definition","How to score"]
[null,"System scale","Describes whether the impact of this failure scenario is geographically localized, or may impact the entire system. ","0: single utility customer, 1: neighborhood, 3: town or city, 9: potentially full utility service area and beyond",null,null,"Return to Failure Scenarios Detail Analysis Tool"]
[null,"Public safety concern","Two safety criteria consider whether there is a potential for injuries or loss of life. This factor is considered for the public and the utility workforce.","0: none, 1:10-20 injuries possible, 3: 100 injured possible, 9: one death possible"]
[null,"Workforce safety concern","Two safety criteria consider whether there is a potential for injuries or loss of life. This factor is considered for the public and the utility workforce.","0: none, 3: any possible injury, 9: any possible death"]
[null,"Ecological concern","This criterion considers whether the failure scenario might cause damage to the environment. For example, burning or leaking of hazardous material would be judged as “Permanent Ecological Damage.” ","0: none, 1: local ecological damage such as localized fire or spill, repairable, 3: permanent local ecological damage,  9: widespread temporary or permanent damage to one or more ecosystems such as the Exxon Valdez or Chernobyl"]
[null,"Financial impact of compromise on utility","This criterion considers direct financial loss to the utility as a result of the failure scenario, without consideration of the restoration costs as defined below. A scale for costs is used that is relative to the amount of utility revenue.","0: Petty cash or less, 1: up to 2% of utility revenue,  3: up to 5%, 9: Greater than 5%"]
[null,"Restoration costs - cost to return to normal operations, not including any ancillary costs","Restoration costs include the cost to return the system to proper operation, not including any legal or other reparations as a result of the failure. A scale for costs is used that is relative to the total size of the utility operations and maintenance budget.","0: Petty cash or less, 1: < 1% of utility organization O&M budget, 3: <=10%, 9: > 10%"]
[null,"Negative impact on generation capacity","The scoring for this criterion considers the level of loss of generation capacity, and for how long this loss is sustained. ","0: No effect, 1:Small generation facility off-line or degraded operation of large facility, 3: More than 10% loss of generation capacity for 8 hours or less, 9: More than 10% loss of  generation capacity for more than 8 hours"]
[null,"Negative impact on the energy market","Specific impacts identified are price manipulation, loss transactions, or loss of participation by market members (buyers or sellers). Scores Low and Moderate mean respectively either no such impacts, local impacts or widespread occurrence of these impacts. A breakdown in key market functions that creates a non-operational market earns the highest score.  ","0: No effect, 1: localized price manipulation, lost transactions, loss of market participation 3: price manipulation, lost transactions, loss of market participation impacting a large metro area, 9: market or key aspects of market non operational"]
[null,"Negative impact on the bulk transmission system","The scoring for this criterion uses DOE concepts defined for incident reporting.  . In particular, a major transmission system interruption is defined as follows: “An event has occurred that required action(s) to relieve voltage or loading conditions; or transmission separation or islanding has occurred.” A complete operational failure or shut-down of the transmission system is defined as: “An emergency event where an electrically isolated or interconnected electrical system suffers total system collapse that results in the shutdown of the transmission …electrical system….”","0: No, 1: loss of transmission capability to meet peak demand or isolate problem areas, 3: Major transmission system interruption, 9: Complete operational failure or shut-down of the transmission system"]
[null,"Negative impact on customer service","The scores for this criterion consider the delay a customer experiences in gaining resolution of their problem, and for how long this condition persists. ","0: No, 1: up to 4 hour delay in customer ability to contact utility, and gain resolution, lasting one day, 3: up to 4 hr delay in customer ability to contact utility and gain resolution, lasting a week,  9: more than 4 hr delay in customer ability to contact utility and gain resolution, lasting more than a week"]
[null,"Negative impact on billing functions","Billing depends upon accurate power usage data. This criterion measures the number of customers for which the utility may lose the capability to generate accurate bills due to the failure scenario. The scores also consider whether or not the data is recoverable. ","0: None, 1: isolated recoverable errors in customer bills, 3: widespread but correctible errors in bills, 9: widespread loss of accurate power usage data, unrecoverable"]
[null,"Destroys goodwill toward utility","This criterion measures the extent to which customers and the community look less favorably on the utility as a result of the occurrence of the failure scenario. It is scaled by the resulting level of decrease in interest by customers in participating in advanced programs such as smart meter deployments and demand response. ","0: No effect, 1: negative publicity but this doesn’t cause financial loss to utility, 3: negative publicity causing up to 20% less interest in advanced programs, 9: negative publicity causing more than 20% less interest in advanced programs"]
[null,"Immediate economic damage - refers to functioning of society as a whole","Economic damage means a negative impact on the wealth and resources of a country or region. (This is distinct from a financial impact on an organization or individual.) The scoring for these criteria is based upon how widespread the damage is, and for how long it continues to have impact. ","0: none, 1: local businesses down for a week,  3: regional infrastructure damage, 9: widespread runs on banks"]
[null,"Long term economic damage","Economic damage means a negative impact on the wealth and resources of a country or region. (This is distinct from a financial impact on an organization or individual.) The scoring for these criteria is based upon how widespread the damage is, and for how long it continues to have impact. ","0: none, 1: (not used), 3: several year local recession, 9: several year national recession"]
[null,"Causes a loss of privacy for a significant number of stakeholders","The scale for this criterion considers the number of customers who may have personal information disclosed due to the failure scenario.  Personal information is defined as in Appendix E of the NISTIR 7628.  ","0: none, 1: 1000 or less individuals, 3: 1000's of individuals, 9: millions of individuals"]

{"sheet":"Terms","index":14,"n_rows":28,"n_cols":6,"rows_kept":28,"cut":false,"hidden":true,"merged":[[3,5,3,7],[5,5,5,7],[11,1,14,1],[11,2,13,2],[11,3,13,3],[8,2,8,3],[15,1,18,1],[16,2,18,2],[19,1,22,1],[19,2,20,2],[19,3,20,3],[21,2,22,2],[23,1,27,1],[23,2,25,2],[23,3,25,3],[26,2,27,2],[10,4,10,7],[12,4,12,7],[13,4,13,7],[14,4,14,7],[15,4,15,7],[16,4,16,7],[17,4,17,7],[18,4,18,7],[19,4,19,7],[20,4,20,7],[21,4,21,7],[22,4,22,7],[23,4,23,7],[24,4,24,7],[25,4,25,7],[26,4,26,7],[27,4,27,7]]}
[]
[]
[]
[null,"Terms","Definition","Source",null,"RETURN TO FAILURE SCENARIO DETAIL ANALYSIS TOOL"]
[null,"Potential Mitigation","controls or countermeasures that reduce risk","NISTIR 7298 Revision 2 (Draft) Glossary of Key Information Security Terms (Draft) Richard Kissel, Editor Computer Security Division Information Technology Laboratory http://dx.doi.org/10.6028/NIST.IR.7298 December 2012"]
[null,"Impact","Consequences of an event that affect (1) the delivery of electricity, (2) the business of running a utility and/or (3) the interests of the customers of a utility.","scope of threat model in Section 3.1 of failure scenario document",null,"RETURN TO ASSESSMENT SUMMARY TOOL"]
[null,"Relevant Vulnerabilities","Weakness in an information system, system security procedures, internal controls, or implementation that could be exploited or triggered by a threat source.","NISTIR 7298 Revision 2 (Draft) Glossary of Key Information Security Terms (Draft) Richard Kissel, Editor Computer Security Division Information Technology Laboratory http://dx.doi.org/10.6028/NIST.IR.7298 December 2012"]
[]
[null,null,"Table 7 - Impact Examples by System State and Type of WAMPAC Application"]
[]
[null,null,null,"Normal","Alert / Emergency"]
[null,"Monitoring","Data loss","·    No impact","·      Delay in taking actions (e.g., load shedding) "]
[null,null,null,null,"·      Delay in grid reconfiguration "]
[null,null,null,null,"·      Unnecessary power generation, overload of lines, or creation of fault conditions, if timely or appropriate corrective actions are not taken "]
[null,null,"Altered data","·    Control actions that create undesirable state ","·      Incorrect actions to be taken"]
[null,"Local Protection","Data loss","·    No impact","·    Failure in taking action, if no alternative data source is available "]
[null,null,"Altered data","·      Triggered protection mechanisms when not required ","·      Line trip, which can lead to cascading failures if lines are overloaded and other protection takes place "]
[null,null,null,"·      Line trip (which can be recoverable) ","·      Improper synchronous closing, leading to equipment damage "]
[null,null,null,"·      Improper synchronous closing, leading to equipment damage "]
[null,"Special Protection","Data loss","·    No impact ","·    Delay in triggering protection elements "]
[null,null,null,null,"·    Overload of lines, or creation of fault conditions, if timely or appropriate corrective actions are not taken "]
[null,null,"Altered data","·      Line trip, which can lead to cascading failures if lines are overloaded and other protection takes place ","·      Line trip, which can lead to cascading failures if lines are overloaded and other protection takes place "]
[null,null,null,"·      Improper synchronous closing, leading to equipment damage ","·      Improper synchronous closing, leading to equipment damage "]
[null,"Control","Data loss","·    Control actions that create undesirable state ","·      Delay in taking actions (e.g., load shedding) "]
[null,null,null,null,"·      Delay in grid reconfiguration "]
[null,null,null,null,"·      Unnecessary power generation, overload of lines, or creation of fault conditions, if timely or appropriate corrective actions are not taken "]
[null,null,"Altered data","·      Taking action when none is necessary, such as opening/closing switches, turning on or shutting down generation ","·      Failure to take action, when needed, leading to voltage or frequency conditions that could have been prevented "]
[null,null,null,"·      Failure to take action, when needed, leading to voltage or frequency conditions that could have been prevented ","·      Cascading failures "]

{"sheet":"Common Vuln","index":15,"n_rows":335,"n_cols":6,"rows_kept":335,"cut":false,"hidden":true,"merged":[[2,5,3,7],[7,5,8,7]]}
[]
[null,"Vulnerability Class","Common Vulnerability","Failure Scenarios With Common Vulnerability"]
[null,"API Abuse (6.3.2.1)","presence of features or functions that may be misused by users","ami.7, gen.15",null,"Return to Vulnerability Class Report Tool"]
[null,"Business Logic Vulnerability (6.3.1.8)","critical operations are not locked out during maintenance","dgm.15"]
[null,null,"inadequate criteria for determining which alarms deserve priority","ami.8"]
[null,null,"system assumes data inputs and resulting calculations are accurate","ami.2, ami.26, der.15, der.17, der.25, dr.7, dgm.7"]
[null,null,"system design limits opportunity for system recovery using reconfiguration","dgm.11, dgm.15"]
[null,null,"system permits potentially harmful command sequences","ami.1, der.6, der.16, gen.4, gen.14",null,"Return to Common Vulnerability Report Tool"]
[null,null,"system takes action before confirming changes with user","der.7, der.11, et.15"]
[null,"Cryptographic Vulnerability (6.3.1.4)","cryptography used that employs algorithms that are breakable within a time period useful to the adversary","ami.14, ami.16, ami.24"]
[null,"Error Handling Vulnerability (6.3.1.6)","system may become overwhelmed by traffic flooding or malformed traffic","wampac.1, gen.8, gen.11, gen.15"]
[null,null,"users lack visibility to the failure of the system to respond to commands","der.2"]
[null,"General Logic Error (6.3.1.7)","alarm management system does not support required processing for legitimate alarm conditions","ami.8"]
[null,null,"alarm processing capability is overwhelmed by unnecessary alarms","ami.8"]
[null,"Inadequate Anomaly Tracking (6.4.4.1)","users lack visibility of threat activity","ami.12, der.14, der.15, wampac.6, wampac.11, dr.1, dr.2, dr.3, generic.2, gen.15"]
[null,null,"users lack visibility of unapproved access","wampac.7, wampac.10, dgm.16, generic.1, generic.2, gen.3"]
[null,"Inadequate Change and Configuration Management (6.2.2.5)","configuration changes are not verified for correctness","ami.10, wampac.5, dgm.11, dgm.15, gen.2, gen.5"]
[null,null,"sensitive data remains on disposed equipment","generic.4"]
[null,null,"system permits unauthorized changes","ami.2, ami.10, ami.12, ami.17, ami.19, ami.19, ami.20, ami.26, ami.32, der.1, der.8, der.10, der.15, der.16, der.17, der.18, wampac.4, wampac.8, et.1, et.1, et.2, et.5, et.14, et.15, et.16, dr.1, dr.1, dr.4, dr.6, dr.7, dgm.3, dgm.5, dgm.8, dgm.8, dgm.8, dgm.11, dgm.15, generic.1, generic.4, gen.1, gen.5, gen.9, gen.10, gen.15, gen.16"]
[null,null,"system permits unauthorized installation of software or firmware","ami.6, ami.31, der.3, der.3, wampac.8, gen.7"]
[null,null,"users lack visibility that unauthorized changes were made","der.19, der.20, wampac.3, wampac.7, et.6, et.13, dr.4, dr.6, dr.7, gen.3, gen.15"]
[null,null,"users lack visibility that unauthorized firmware has been installed","wampac.8"]
[null,"Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)","emergency response policy, procedures, or execution intentionally disregards security controls to speed recovery","dgm.9"]
[null,null,"emergency response procedures unintentionally omit security controls","dgm.9"]
[null,null,"emergency situations may not have the appropriate replacement equipment, some of which require long lead times for repair or replacement","dgm.12"]
[null,null,"inadequate continuity and recovery security architecture","ami.15"]
[null,"Inadequate Incident Response Process (6.2.3.5)","speed of incident response process is not appropriate for incident","generic.1"]
[null,"Inadequate Malware Protection (6.4.2.3)","system permits installation of malware","ami.2, ami.3, ami.30, der.5, et.3, et.3, et.3, et.16, et.16, et.16, gen.6, gen.11, gen.15, gen.16"]
[null,null,"the list of signatures used for detection of attacks is no longer current","dr.5, dr.7"]
[null,"Inadequate Network Segregation (6.5.1.2)","back doors for access are left in place","ami.27"]
[null,null,"communication channels are shared between different system owners","dgm.2"]
[null,null,"Internet connection may be misused by adversary","ami.3"]
[null,null,"network interconnections provide users and hardware/software entities with access unnecessary for their roles","ami.9, ami.10, generic.2"]
[null,null,"network interfaces permit unnecessary traffic flows","ami.18, der.13, wampac.1, wampac.3, wampac.7, dgm.7, gen.8, gen.13"]
[null,null,"network is connected to untrusted networks","der.2, generic.2"]
[null,null,"network services are shared between different system owners","dgm.2"]
[null,null,"publicly accessible and/or third party controlled links used","ami.14, dr.1, dr.2, dr.3, dgm.14, gen.10, gen.15"]
[null,"Inadequate Patch Management Process (6.2.2.4)","software patches are not checked regularly to ensure that they are current","ami.25, der.13, wampac.2, dr.5, dr.7, dgm.4, dgm.5, gen.11, gen.12"]
[null,null,"software patches may be applied without verifying continued system operation","ami.28"]
[null,"Inadequate Periodic Security Audits (6.2.3.1)","adherence to policies and procedures degrades over time","dgm.13"]
[null,null,"human error in adherence to policies and procedures","dgm.13"]
[null,"Insufficient Identity Validation or Background Checks (6.2.2.1)","insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data","ami.32, der.3, dgm.10, gen.15"]
[null,"Insufficiently Trained Personnel (6.2.1.1)","workforce may be unaware of recommended precautions","ami.9, ami.13, dgm.10, gen.4, gen.9, gen.11"]
[null,null,"workforce not trained in proper procedures","dgm.13, gen.4, gen.6, gen.9"]
[null,"Insufficient Redundancy (6.5.1.5)","critical components exhibit single point of failure","wampac.5, et.12"]
[null,"Physical Access to the Device (6.5.1.6)","enabled but unused ports","dgm.3"]
[null,null,"physical access may be obtained by unauthorized individuals","ami.3, ami.7, ami.13, der.1, der.10, der.11, der.12, der.13, dr.1, dr.2, dr.3, dr.5, dgm.3, dgm.10, dgm.11, dgm.15, dgm.16, generic.3, gen.1, gen.10, gen.16"]
[null,null,"physical access to a serial port may enable logical access by unauthorized entities","dgm.14"]
[null,null,"physical access to mobile devices may enable logical access to business functions by unauthorized individuals","ami.21, dgm.11, dgm.15"]
[null,"Sensitive Data Protection Vulnerability (6.3.1.15)","system makes private data accessible to unauthorized individuals","der.4, der.21, der.24, et.7, et.11"]
[null,"Unnecessary System Access (6.2.2.6)","default configuration allows access that is unnecessary after the system is operational","ami.12"]
[null,null,"design permits unnecessary privileges","wampac.3, gen.15"]
[null,null,"remote access may be obtained by unauthorized individuals","wampac.3, wampac.5, wampac.7, dr.5, dgm.5, gen.3, gen.4, gen.9"]
[null,null,"system permits bypass of physical access controls","dgm.4"]
[null,null,"system permits networking components to be accessed by unauthorized individuals","wampac.2"]
[null,null,"system permits wireless access by unauthorized parties","ami.22, der.2, gen.8"]
[null,null,"unnecessary access is permitted to critical functions","der.12, wampac.1, gen.5, gen.12"]
[null,null,"unnecessary access is permitted to networking components","wampac.2, gen.8"]
[null,null,"unnecessary access is permitted to system functions","der.2, der.14, der.18, der.19, der.21, der.24, dr.7, dgm.3"]
[null,null,"unnecessary access is permitted to the communications channel","dr.1, dr.2, dr.3, dgm.4, gen.10"]
[null,null,"unnecessary access is permitted to the database","et.4, et.4, et.4, et.11, et.13"]
[null,null,"unnecessary access is permitted to the operating system","der.10, der.11, der.12"]
[null,null,"unnecessary network access is permitted","der.10, der.11, der.12, wampac.4, wampac.6, wampac.7, wampac.10, wampac.11, et.11, et.13, dr.4, dr.6, dgm.16"]
[null,null,"users and hardware/software entities are given access unnecessary for their roles","ami.27, dgm.10, generic.1, gen.13, gen.15"]
[null,"Unneeded Services Running (6.4.3.2)","unnecessary system services are configured to run","wampac.1, dr.5, dr.6, dr.7"]
[null,"Use of Inadequate Security Architectures and Designs (6.4.1.1)","critical communication paths are not isolated from communication paths that require fewer protections to operate","et.3"]
[null,null,"critical functions are not isolated from those that require fewer protections to operate","et.3"]
[null,null,"design, implementation, or maintenance permits system to enter a hazardous state","et.1, et.2, et.15, et.16"]
[null,null,"security design does not consider the system lifecycle","ami.16"]
[null,null,"system permits bypass of access control mechanisms","ami.13, wampac.4"]
[null,null,"system permits device identifier to be misused","et.8, et.9, et.10, et.11"]
[null,null,"weaker security architecture at backup sites","ami.15"]
[null,"Use of Insecure Protocols (6.3.1.21)","a copy of a prior alarm is difficult or infeasible to distinguish from a new legitimate alarm","ami.8"]
[null,null,"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command","ami.11, ami.14, ami.19, der.6, dgm.16"]
[null,null,"commands or other messages may be inserted on the network by unauthorized individuals","der.1, wampac.2, dgm.16, gen.1, gen.14"]
[null,null,"message modified by an adversary is either difficult or infeasible to distinguish from a valid message","ami.11, der.7, der.9, der.14, der.15, der.18, der.19, der.20, der.24, der.26, wampac.2, dr.3, dgm.6, dgm.16"]
[null,null,"spoofed signal is either difficult or infeasible to distinguish from a legitimate signal","wampac.12, gen.14"]
[null,null,"system makes messages accessible to unauthorized individuals","der.4, dr.2, dgm.1, dgm.6, dgm.11, dgm.12, dgm.14, dgm.15, dgm.16"]
[null,null,"system permits messages to be modified by unauthorized individuals","ami.11, der.7, der.9, der.14, der.18, der.19, der.20, der.26, wampac.2, dr.3, dgm.6"]
[null,null,"system relies on communications that are easy to jam","dr.1, dgm.1"]
[null,"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)","credentials are accessible in the clear","wampac.4"]
[null,null,"default password is not changed","der.1"]
[null,null,"encryption keys are shared","ami.4, ami.5, dr.2"]
[null,null,"inadequate binding of meter with energy users authorized to charge to that meter","et.6"]
[null,null,"secret key is stored or transmitted in the clear","ami.4, ami.5, ami.5"]
[null,null,"shared credentials are used for access","ami.23, et.16"]
[null,null,"system relies on credentials that are easy to obtain for access","ami.3, ami.6, ami.9, ami.9, ami.10, ami.12, ami.17, ami.18, ami.22, ami.23, ami.29, ami.30, ami.31, ami.32, ami.32, der.2, der.3, der.10, der.10, der.11, der.11, der.12, der.12, der.13, der.16, der.17, der.19, der.20, der.21, der.23, der.24, der.25, wampac.3, wampac.5, wampac.6, wampac.7, wampac.10, wampac.11, et.4, dr.4, dgm.5, dgm.11, dgm.12, dgm.14, dgm.15, dgm.15, dgm.16, gen.1, gen.3, gen.4"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,{"$f":"CompileIt(\", \",Table4[Vulnerability Class],#REF!,#REF!)","v":{"$error":"#NAME?"}}]

{"sheet":"Common Mit","index":16,"n_rows":184,"n_cols":6,"rows_kept":184,"cut":false,"hidden":true,"merged":[]}
[]
[null,"Mitigation Action Group","Common Mitigation Action","Failure Scenarios with Common Action "]
[null,"alert","generate alarms","ami.1, ami.2, ami.7, ami.10, ami.25, der.6, der.9, et.2, et.13, et.15, dgm.3, dgm.4, dgm.13, gen.1",null,"Return to Failure Scenarios Detail Analysis Tool"]
[null,null,"generate alerts","ami.3, ami.7, der.11, der.17, der.24, wampac.7, dr.4, dgm.11, dgm.12, dgm.15, generic.2, gen.3"]
[null,null,"prioritize alarms","ami.8",null,"Return to Common Mitigation Report Tool"]
[null,"analyze","analyze anomalous events","ami.8, et.3, et.16"]
[null,null,"re-evaluate scheduled disconnects","ami.9"]
[null,null,"review recovery response","dgm.9",null,"Return to Mitigation Group Report Tool"]
[null,"audit","create audit logs","ami.1, ami.2, ami.3, ami.10, ami.12, ami.20, der.5, der.6, der.9, der.13, der.17, der.21, der.23, der.24, et.3, et.9, et.11, et.13, et.13, et.14, dgm.3, dgm.4, dgm.5, dgm.8, dgm.11, dgm.12, dgm.15, gen.2, gen.3, gen.4, gen.6, gen.15"]
[null,null,"protect audit logs","der.5"]
[null,null,"perform audit","dgm.13, generic.4"]
[null,null,"perform financial audit","ami.2, ami.4"]
[null,"authenticate","authenticate data source","ami.26, der.14, der.15"]
[null,null,"authenticate devices","ami.9, ami.18, der.2, wampac.4, et.6, et.8, et.9, et.10, gen.8"]
[null,null,"authenticate messages","ami.8, ami.11, der.2, der.7, der.9, der.14, der.15, der.16, der.18, der.19, der.20, der.24, der.26, dr.3, dgm.6, gen.14"]
[null,null,"authenticate users","ami.3, der.1, der.2, der.3, der.10, der.12, der.16, wampac.2, wampac.4, et.1, et.2, et.15, dr.1, dr.1, dr.5, dr.7, dgm.3, dgm.4, dgm.7, dgm.12, dgm.14, gen.1, gen.4"]
[null,null,"require authentication","der.5, et.11, dgm.16, gen.12"]
[null,null,"require multi-factor authentication","ami.3, ami.6, ami.9, ami.10, ami.12, ami.17, ami.22, ami.23, ami.29, ami.30, ami.31, der.10, der.11, der.12, der.17, der.18, der.23, der.25, wampac.3, wampac.5, wampac.7, wampac.10, wampac.11, dgm.5, dgm.16, gen.4"]
[null,null,"require PIN","et.9, et.10, et.11"]
[null,null,"require second-level authentication","ami.13, gen.15"]
[null,null,"require single sign-on","dgm.10"]
[null,null,"authenticate devices","ami.9, ami.18, der.2, wampac.4, et.6, et.8, et.9, et.10"]
[null,null,"require multi-factor authentication","ami.3, ami.6, ami.9, ami.10, ami.12, ami.17, ami.22, ami.23, ami.29, ami.30, ami.31, der.10, der.11, der.12, der.17, der.18, der.23, der.25, wampac.3, wampac.5, wampac.7, wampac.10, wampac.11, dgm.5, dgm.16"]
[null,"check integrity","check message integrity","der.6, der.7, der.18, der.19, der.20, wampac.2, wampac.7, dr.3"]
[null,null,"check OS integrity","der.13"]
[null,null,"check software execution integrity","ami.2, ami.3, ami.19, der.13, wampac.8, et.1, et.3, et.14, et.16, et.16, dgm.3, gen.11"]
[null,null,"check software file integrity","ami.2, ami.3, ami.6, ami.26, ami.30, ami.31, der.13, et.2, et.5, et.15, dr.1, dr.6, dgm.5, gen.2, gen.7"]
[null,null,"protect against replay","ami.8, ami.11, ami.14, ami.19, der.6, dr.3"]
[null,null,"check software execution integrity","ami.2, ami.3, ami.19, der.13, wampac.8, et.1, et.3, et.14, et.16, et.16, dgm.3"]
[null,"control access","enforce least privilege","ami.9, ami.10, ami.12, der.10, der.11, der.12, et.11, et.13, dr.7, dgm.8, dgm.10, gen.8, gen.13, gen.15"]
[null,null,"require credential revocation","ami.21, dgm.13"]
[null,null,"restrict access","der.5, wampac.1, dgm.3, dgm.8, gen.1, gen.12"]
[null,null,"restrict network access","ami.9, ami.10, ami.25, wampac.1, wampac.2, wampac.6, wampac.6, wampac.10, wampac.11, wampac.11, wampac.11, et.11, et.13, dr.1, dr.2, dr.3, dr.4, dr.6, dgm.7, gen.10"]
[null,null,"restrict physical access","ami.2, ami.3, ami.13, ami.15, dr.1, dr.2, dr.3, dr.5, dgm.3, dgm.10, dgm.16, gen.1, gen.10, gen.16"]
[null,null,"use Role-Based Access Control","ami.1, ami.2, ami.3, ami.6, ami.30, ami.32, der.2, der.3, der.5, der.10, der.11, der.12, der.14, der.15, der.16, der.17, der.18, der.19, der.20, der.21, der.23, der.24, wampac.2, wampac.3, wampac.5, wampac.7, dr.1, dr.4, dr.6, dgm.3, dgm.5, generic.1"]
[null,null,"enforce restrictive firewall rules","der.10, der.11, der.12, wampac.3, wampac.7, generic.2"]
[null,null,"limit remote modification","der.2"]
[null,null,"prevent modification","et.6, gen.5"]
[null,null,"require read-only access","der.8, wampac.7"]
[null,null,"restrict access","der.5, wampac.1, dgm.3, dgm.8"]
[null,null,"restrict application access","ami.22, der.10, der.12, der.25, wampac.7, et.16"]
[null,null,"restrict communication access","dgm.6"]
[null,null,"restrict configuration access","ami.3, gen.1, gen.2, gen.3, gen.4, gen.5, gen.15"]
[null,null,"restrict database access","wampac.10, et.4, et.4"]
[null,null,"restrict device access","ami.18, dgm.3"]
[null,null,"restrict file access","et.11, et.13, et.15"]
[null,null,"restrict Internet access","ami.3, ami.9, ami.9, ami.10"]
[null,null,"restrict network access","ami.9, ami.10, ami.25, wampac.1, wampac.2, wampac.6, wampac.6, wampac.10, wampac.11, wampac.11, wampac.11, et.11, et.13, dr.1, dr.2, dr.3, dr.4, dr.6, dgm.7"]
[null,null,"restrict network service access","wampac.1, wampac.3, wampac.4"]
[null,null,"restrict physical access","ami.2, ami.3, ami.13, ami.15, dr.1, dr.2, dr.3, dr.5, dgm.3, dgm.10, dgm.16, gen.1"]
[null,null,"restrict port access","dgm.3"]
[null,null,"restrict remote access","wampac.3, wampac.4, wampac.7, et.11, et.13, dr.1, dr.2, dr.4, dr.4, dr.6, dr.6, dr.7, dgm.4, dgm.11, dgm.15, gen.10, gen.15"]
[null,null,"restrict system access","wampac.8"]
[null,"detect","detect abnormal behavior","wampac.7, et.4, dgm.5, generic.1, generic.4, gen.15"]
[null,null,"detect abnormal functionality","ami.7, et.3"]
[null,null,"detect anomalous commands","ami.1, ami.31"]
[null,null,"detect physical intrusion","ami.2, ami.15"]
[null,null,"detect unauthorized access","ami.9, ami.10, ami.12, ami.25, wampac.4, wampac.6, wampac.11, dr.1, dr.2, dr.3, dgm.16, gen.15"]
[null,null,"detect unauthorized configuration changes","ami.12, ami.32, der.2, gen.15, gen.16"]
[null,null,"detect unauthorized use","et.9"]
[null,null,"detect unusual patterns","ami.2, ami.4, ami.6, ami.9, ami.12, ami.17, ami.30, ami.32, wampac.2, et.3, et.8, et.16, et.16, dr.3, dgm.6, dgm.16, gen.8"]
[null,null,"detect abnormal behavior","wampac.7, et.4, dgm.5, generic.1, generic.4"]
[null,null,"detect abnormal functionality","ami.7, et.3"]
[null,null,"detect abnormal output","ami.2, et.16, dr.1, dr.3, dr.4, gen.11, gen.13"]
[null,null,"detect unauthorized access","ami.9, ami.10, ami.12, ami.25, wampac.4, wampac.6, wampac.11, dr.1, dr.2, dr.3, dgm.16"]
[null,null,"detect unauthorized configuration","wampac.5, wampac.10"]
[null,null,"detect unauthorized connections","wampac.3, wampac.7"]
[null,null,"detect unauthorized devices","wampac.2, gen.5"]
[null,null,"detect unusual patterns","ami.2, ami.4, ami.6, ami.9, ami.12, ami.17, ami.30, ami.32, wampac.2, et.3, et.8, et.16, et.16, dr.3, dgm.6, dgm.16"]
[null,null,"require intrusion detection and prevention","der.14, der.15, der.17, der.18, der.21, wampac.1, wampac.4, wampac.6, wampac.11, dr.1, dr.2, dr.3, dgm.5, generic.2, gen.15"]
[null,null,"Automated configuration change detection","gen.15"]
[null,"encrypt","encrypt application layer","wampac.2"]
[null,null,"encrypt communication paths","ami.8, ami.11, der.4, wampac.4, et.7, et.11, dgm.6, dgm.7, dgm.11, dgm.12, dgm.14, dgm.15, dgm.16, gen.10, gen.14"]
[null,null,"encrypt data at rest","ami.21, der.21, wampac.4, wampac.10, et.4, et.11"]
[null,null,"encrypt link layer","wampac.2"]
[null,null,"encrypt communication paths","ami.8, ami.11, der.4, wampac.4, et.7, et.11, dgm.6, dgm.7, dgm.11, dgm.12, dgm.14, dgm.15, dgm.16"]
[null,null,"require VPNs","ami.9, ami.10, dgm.4"]
[null,"enforce limits","enforce hardware limits","et.15"]
[null,null,"enforce limits in hardware","der.1"]
[null,null,"limit events","ami.1, der.14"]
[null,null,"protect from overcharge","et.1"]
[null,null,"require circuit breaker","et.2, et.15, et.16"]
[null,"ensure availability","require fail-over","ami.17, wampac.12"]
[null,null,"require fail-safe rollback","ami.28"]
[null,null,"require redundancy","wampac.3, wampac.5, wampac.6, wampac.8, et.14, dr.1, dgm.1, dgm.1, dgm.2, gen.10, gen.14"]
[null,null,"require resiliency","et.12"]
[null,null,"require synchronous functions","dgm.10"]
[null,null,"require backup","dgm.5"]
[null,null,"require redundancy","wampac.3, wampac.5, wampac.6, wampac.8, et.14, dr.1, dgm.1, dgm.1, dgm.2"]
[null,null,"require resiliency","et.12"]
[null,null,"require spares","dgm.8"]
[null,null,"require spread-spectrum radio","dgm.1"]
[null,"isolate","isolate functions","der.24, wampac.1, et.3, et.9, et.14"]
[null,null,"isolate networks","ami.3, ami.9, ami.14, et.3, dgm.11, dgm.15, generic.2, generic.2"]
[null,null,"require unique keys","ami.4, ami.5, et.16, dr.2"]
[null,null,"isolate networks","ami.3, ami.9, ami.14, et.3, dgm.11, dgm.15, generic.2, generic.2"]
[null,null,"require separation of duty","generic.1"]
[null,"learn","learn from others","et.9, et.12"]
[null,"plan","define contingency plan","generic.2, gen.14"]
[null,null,"define incident response plan","generic.2"]
[null,null,"define policy","ami.9, ami.15, dgm.9, dgm.11, dgm.15, generic.3, generic.4"]
[null,null,"define procedures","ami.9, ami.11, ami.24, ami.24, ami.25, dgm.15, generic.1, generic.1, gen.1"]
[null,null,"define SLA","generic.4"]
[null,null,"emphasize security management","ami.15"]
[null,null,"prioritize recovery activities","dgm.9"]
[null,"profile","profile equipment","dgm.7"]
[null,"sanitize","sanitize device","ami.21"]
[null,"secure design and implementation","design for trust","wampac.12, dgm.7, dgm.8, dgm.12, dgm.14"]
[null,null,"protect credentials","ami.3, ami.10, ami.12, ami.17, ami.32, der.10, der.10, der.11, der.11, der.12, der.12, der.13, der.16, der.16, der.21, der.23, der.25, wampac.4, wampac.11"]
[null,null,"require approved cryptographic algorithms","ami.4, ami.9, ami.14, ami.22, ami.24, ami.29, der.2, der.21, wampac.3, dr.2, dgm.16, generic.4"]
[null,null,"require approved key management","ami.4, ami.5, ami.16, wampac.4, dgm.16"]
[null,null,"require secure key storage","ami.5"]
[null,null,"configure for least functionality","ami.21, ami.27, der.2, der.5, wampac.1, dr.5, dr.6, dr.7, dgm.3, generic.3, generic.3, gen.5"]
[null,null,"design for security","ami.26, ami.27, ami.27, gen.3"]
[null,null,"design for trust","wampac.12, dgm.7, dgm.8, dgm.12, dgm.14"]
[null,null,"enforce changing default passwords","der.12"]
[null,null,"minimize private information","ami.29"]
[null,null,"protect security configuration","wampac.4"]
[null,null,"require approved cryptographic algorithms","ami.4, ami.9, ami.14, ami.22, ami.24, ami.29, der.2, der.21, wampac.3, dr.2, dgm.16, generic.4"]
[null,null,"require approved key management","ami.4, ami.5, ami.16, wampac.4, dgm.16"]
[null,null,"require physical connection","et.6, gen.5"]
[null,null,"require secure factory settings","der.2"]
[null,null,"restrict occurrence","et.5"]
[null,"secure operations","require application whitelisting","der.11, dr.6, dgm.4, dgm.5, gen.15"]
[null,null,"require password rule enforcement","ami.23, ami.32, et.4"]
[null,null,"require secure boot loader","ami.7, der.13"]
[null,null,"require secure remote firmware upgrade","ami.7"]
[null,null,"require tamper detection and response","dgm.16"]
[null,null,"require periodic physical surveillence","gen.1"]
[null,null,"require video surveillance","ami.3, ami.13, ami.15, dgm.3, gen.1"]
[null,null,"change default credentials","der.1, der.10, wampac.4"]
[null,null,"configure for least functionality","ami.21, ami.27, der.2, der.5, wampac.1, dr.5, dr.6, dr.7, dgm.3, generic.3, generic.3"]
[null,null,"harden platforms","ami.2"]
[null,null,"lock workstations","ami.2, ami.13, ami.13"]
[null,null,"maintain anti-virus","et.3, et.16, dr.5, dr.7, dgm.4, dgm.5"]
[null,null,"maintain latest firmware","dgm.3"]
[null,null,"maintain patches","ami.25, der.13, wampac.2, et.16, dr.5, dr.7, dgm.3, dgm.4, dgm.5, gen.11, gen.12"]
[null,null,"require assured maintenance","der.5"]
[null,null,"require lockout","et.9, et.10, et.11"]
[null,null,"require password rule enforcement","ami.23, ami.32, et.4"]
[null,null,"require safe mode","dr.1, dgm.1, dgm.2, gen.8, gen.14"]
[null,null,"require strong passwords","ami.3, ami.12, ami.17, der.23, der.25, wampac.11, dgm.11, dgm.15"]
[null,"test","conduct code review","et.3, dgm.8"]
[null,null,"conduct penetration testing","ami.7, ami.12"]
[null,null,"perform hardware acceptance testing","ami.8"]
[null,null,"perform security testing","ami.24, ami.25, ami.26"]
[null,null,"require reconfiguration in test mode","wampac.5"]
[null,null,"test after installation","der.5"]
[null,null,"test after maintenance","der.5"]
[null,null,"test before installation","ami.28, der.5, wampac.1, wampac.6, wampac.11, generic.3, generic.4"]
[null,null,"test for malware","der.3, gen.6, gen.7, gen.16"]
[null,null,"vulnerability scan before install","et.3, dgm.8, generic.3"]
[null,"track","implement configuration management","ami.2, ami.12, ami.20, wampac.8, et.3, dgm.5, dgm.8, dgm.9, dgm.11, dgm.15, gen.2, gen.5"]
[null,null,"track asset","ami.21"]
[null,"train","train personnel","ami.2, ami.9, ami.13, der.1, der.2, der.10, der.11, dgm.10, dgm.11, dgm.11, dgm.15, dgm.15, generic.2, generic.3, gen.4, gen.6, gen.8, gen.9, gen.11, gen.15"]
[null,"user decision","choose own rate","et.12"]
[null,null,"continue normal operations","ami.11"]
[null,"verify","confirm action","ami.11, ami.11, ami.13, der.26, et.15, dgm.8, dgm.11, dgm.15"]
[null,null,"cross check","ami.1, ami.7, ami.8, ami.8, ami.13, ami.19, der.3, der.7, der.25, dr.7, gen.1"]
[null,null,"require two-person rule","ami.1, ami.1, ami.10, ami.20, wampac.5, dr.4, dgm.11, dgm.15, gen.2, gen.3, gen.6, gen.9"]
[null,null,"require acknowledgment","der.2, dr.1, dr.1, gen.10"]
[null,null,"require approval","der.1, gen.3"]
[null,null,"require failure messages","der.2"]
[null,null,"require message verification","dr.7"]
[null,null,"require non-repudiation","der.8, der.23"]
[null,null,"require on-going validation","der.3"]
[null,null,"require read-only access","der.8, wampac.7, gen.9"]
[null,null,"validate data","ami.1, ami.2, ami.10, der.9, dr.3, gen.2"]
[null,null,"validate inputs","der.14, der.16, der.19, der.20"]
[null,null,"validate signal","wampac.12, gen.14"]
[null,null,"verify correct operation","wampac.1, wampac.11, dgm.9"]
[null,null,"verify EV owner","et.9"]
[null,null,"verify network changes","der.2"]
[null,null,"confirm action","ami.11, ami.11, ami.13, der.26, et.15, dgm.8, dgm.11, dgm.15"]
[null,null,"cross check","ami.1, ami.7, ami.8, ami.8, ami.13, ami.19, der.3, der.7, der.25, dr.7"]
[null,null,"require periodic walk-downs","generic.3"]
[null,null,"require reliable external time source","ami.19"]
[null,null,"verify absence of hardcoded credentials","ami.23"]
[null,null,"verify correct operation","wampac.1, wampac.11, dgm.9"]
[null,null,"verify load","ami.11"]
[null,null,"verify mode","ami.17"]
[null,null,"verify personnel","ami.32, der.3, der.5, et.3, dgm.2, dgm.2, dgm.8, dgm.10"]
[null,null,"verify settings","generic.3"]
[null,null,"verify time synchronization","ami.19"]

{"sheet":"Summary Data2","index":17,"n_rows":410,"n_cols":8,"rows_kept":410,"cut":false,"hidden":true,"merged":[]}
["FS #","Common Vulnerability","Vulnerability Class","Utility Risk","Num UR","Utility",null,1]
[{"$f":"'Saved Values'!A4","v":"ami.1"},{"$f":"'Saved Values'!D4","v":"system permits potentially harmful command sequences"},{"$f":"'Saved Values'!F4","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A2,Table2[Column1],0))","v":0},{"$f":"NumIt(D2)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A18","v":"ami.2"},{"$f":"'Saved Values'!D18","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F18","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A3,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A19","v":"ami.2"},{"$f":"'Saved Values'!D19","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Saved Values'!F19","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A4,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A20","v":"ami.2"},{"$f":"'Saved Values'!D20","v":"system permits installation of malware"},{"$f":"'Saved Values'!F20","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A5,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A40","v":"ami.3"},{"$f":"'Saved Values'!D40","v":"system permits installation of malware"},{"$f":"'Saved Values'!F40","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A6,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A41","v":"ami.3"},{"$f":"'Saved Values'!D41","v":"Internet connection may be misused by adversary"},{"$f":"'Saved Values'!F41","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A7,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A42","v":"ami.3"},{"$f":"'Saved Values'!D42","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F42","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A8,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A43","v":"ami.3"},{"$f":"'Saved Values'!D43","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F43","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A9,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A62","v":"ami.4"},{"$f":"'Saved Values'!D62","v":"secret key is stored or transmitted in the clear"},{"$f":"'Saved Values'!F62","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A10,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A63","v":"ami.4"},{"$f":"'Saved Values'!D63","v":"encryption keys are shared"},{"$f":"'Saved Values'!F63","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A11,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A74","v":"ami.5"},{"$f":"'Saved Values'!D74","v":"encryption keys are shared"},{"$f":"'Saved Values'!F74","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A12,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A75","v":"ami.5"},{"$f":"'Saved Values'!D75","v":"secret key is stored or transmitted in the clear"},{"$f":"'Saved Values'!F75","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A13,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A76","v":"ami.5"},{"$f":"'Saved Values'!D76","v":"secret key is stored or transmitted in the clear"},{"$f":"'Saved Values'!F76","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A14,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A84","v":"ami.6"},{"$f":"'Saved Values'!D84","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F84","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A15,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A85","v":"ami.6"},{"$f":"'Saved Values'!D85","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Saved Values'!F85","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A16,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A94","v":"ami.7"},{"$f":"'Saved Values'!D94","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F94","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A17,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A95","v":"ami.7"},{"$f":"'Saved Values'!D95","v":"presence of features or functions that may be misused by users"},{"$f":"'Saved Values'!F95","v":"API Abuse (6.3.2.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A18,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A108","v":"ami.8"},{"$f":"'Saved Values'!D108","v":"a copy of a prior alarm is difficult or infeasible to distinguish from a new legitimate alarm"},{"$f":"'Saved Values'!F108","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A19,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A109","v":"ami.8"},{"$f":"'Saved Values'!D109","v":"alarm management system does not support required processing for legitimate alarm conditions"},{"$f":"'Saved Values'!F109","v":"General Logic Error (6.3.1.7)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A20,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A110","v":"ami.8"},{"$f":"'Saved Values'!D110","v":"alarm processing capability is overwhelmed by unnecessary alarms"},{"$f":"'Saved Values'!F110","v":"General Logic Error (6.3.1.7)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A21,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A111","v":"ami.8"},{"$f":"'Saved Values'!D111","v":"inadequate criteria for determining which alarms deserve priority"},{"$f":"'Saved Values'!F111","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A22,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A123","v":"ami.9"},{"$f":"'Saved Values'!D123","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F123","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A23,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A124","v":"ami.9"},{"$f":"'Saved Values'!D124","v":"workforce may be unaware of recommended precautions"},{"$f":"'Saved Values'!F124","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A24,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A125","v":"ami.9"},{"$f":"'Saved Values'!D125","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F125","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A25,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A126","v":"ami.9"},{"$f":"'Saved Values'!D126","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles"},{"$f":"'Saved Values'!F126","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A26,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A148","v":"ami.10"},{"$f":"'Saved Values'!D148","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles"},{"$f":"'Saved Values'!F148","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A27,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A149","v":"ami.10"},{"$f":"'Saved Values'!D149","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F149","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A28,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A150","v":"ami.10"},{"$f":"'Saved Values'!D150","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F150","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A29,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A151","v":"ami.10"},{"$f":"'Saved Values'!D151","v":"configuration changes are not verified for correctness"},{"$f":"'Saved Values'!F151","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A30,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A168","v":"ami.11"},{"$f":"'Saved Values'!D168","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F168","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A31,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A169","v":"ami.11"},{"$f":"'Saved Values'!D169","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F169","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A32,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A170","v":"ami.11"},{"$f":"'Saved Values'!D170","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Saved Values'!F170","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A33,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A185","v":"ami.12"},{"$f":"'Saved Values'!D185","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F185","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A34,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A186","v":"ami.12"},{"$f":"'Saved Values'!D186","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F186","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A35,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A187","v":"ami.12"},{"$f":"'Saved Values'!D187","v":"default configuration allows access that is unnecessary after the system is operational"},{"$f":"'Saved Values'!F187","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A36,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A188","v":"ami.12"},{"$f":"'Saved Values'!D188","v":"users lack visibility of threat activity"},{"$f":"'Saved Values'!F188","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A37,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A202","v":"ami.13"},{"$f":"'Saved Values'!D202","v":"system permits bypass of access control mechanisms"},{"$f":"'Saved Values'!F202","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A38,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A203","v":"ami.13"},{"$f":"'Saved Values'!D203","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F203","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A39,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A204","v":"ami.13"},{"$f":"'Saved Values'!D204","v":"workforce may be unaware of recommended precautions"},{"$f":"'Saved Values'!F204","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A40,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A216","v":"ami.14"},{"$f":"'Saved Values'!D216","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Saved Values'!F216","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A41,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A217","v":"ami.14"},{"$f":"'Saved Values'!D217","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"},{"$f":"'Saved Values'!F217","v":"Cryptographic Vulnerability (6.3.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A42,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A218","v":"ami.14"},{"$f":"'Saved Values'!D218","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Saved Values'!F218","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A43,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A227","v":"ami.15"},{"$f":"'Saved Values'!D227","v":"weaker security architecture at backup sites"},{"$f":"'Saved Values'!F227","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A44,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A228","v":"ami.15"},{"$f":"'Saved Values'!D228","v":"inadequate continuity and recovery security architecture"},{"$f":"'Saved Values'!F228","v":"Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A45,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A240","v":"ami.16"},{"$f":"'Saved Values'!D240","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"},{"$f":"'Saved Values'!F240","v":"Cryptographic Vulnerability (6.3.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A46,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A241","v":"ami.16"},{"$f":"'Saved Values'!D241","v":"security design does not consider the system lifecycle"},{"$f":"'Saved Values'!F241","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A47,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A248","v":"ami.17"},{"$f":"'Saved Values'!D248","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F248","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A48,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A249","v":"ami.17"},{"$f":"'Saved Values'!D249","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F249","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A49,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A262","v":"ami.18"},{"$f":"'Saved Values'!D262","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F262","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A50,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A263","v":"ami.18"},{"$f":"'Saved Values'!D263","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Saved Values'!F263","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A51,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A271","v":"ami.19"},{"$f":"'Saved Values'!D271","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Saved Values'!F271","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A52,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A272","v":"ami.19"},{"$f":"'Saved Values'!D272","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F272","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A53,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A273","v":"ami.19"},{"$f":"'Saved Values'!D273","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F273","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A54,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A284","v":"ami.20"},{"$f":"'Saved Values'!D284","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F284","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A55,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A291","v":"ami.21"},{"$f":"'Saved Values'!D291","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"},{"$f":"'Saved Values'!F291","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A56,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A301","v":"ami.22"},{"$f":"'Saved Values'!D301","v":"system permits wireless access by unauthorized parties"},{"$f":"'Saved Values'!F301","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A57,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A302","v":"ami.22"},{"$f":"'Saved Values'!D302","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F302","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A58,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A309","v":"ami.23"},{"$f":"'Saved Values'!D309","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F309","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A59,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A310","v":"ami.23"},{"$f":"'Saved Values'!D310","v":"shared credentials are used for access"},{"$f":"'Saved Values'!F310","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A60,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A317","v":"ami.24"},{"$f":"'Saved Values'!D317","v":"cryptography used that employs algorithms that are breakable within a time period useful to the adversary"},{"$f":"'Saved Values'!F317","v":"Cryptographic Vulnerability (6.3.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A61,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A327","v":"ami.25"},{"$f":"'Saved Values'!D327","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Saved Values'!F327","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A62,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A339","v":"ami.26"},{"$f":"'Saved Values'!D339","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Saved Values'!F339","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A63,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A340","v":"ami.26"},{"$f":"'Saved Values'!D340","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F340","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A64,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A348","v":"ami.27"},{"$f":"'Saved Values'!D348","v":"design permits unnecessary privileges"},{"$f":"'Saved Values'!F348","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A65,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A349","v":"ami.27"},{"$f":"'Saved Values'!D349","v":"back doors for access are left in place"},{"$f":"'Saved Values'!F349","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A66,Table2[Column1],0))","v":0},{"$f":"NumIt(D66)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A357","v":"ami.28"},{"$f":"'Saved Values'!D357","v":"software patches may be applied without verifying continued system operation"},{"$f":"'Saved Values'!F357","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A67,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A366","v":"ami.29"},{"$f":"'Saved Values'!D366","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F366","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A68,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A375","v":"ami.30"},{"$f":"'Saved Values'!D375","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F375","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A69,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A376","v":"ami.30"},{"$f":"'Saved Values'!D376","v":"system permits installation of malware"},{"$f":"'Saved Values'!F376","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A70,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A385","v":"ami.31"},{"$f":"'Saved Values'!D385","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F385","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A71,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A386","v":"ami.31"},{"$f":"'Saved Values'!D386","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Saved Values'!F386","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A72,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A393","v":"ami.32"},{"$f":"'Saved Values'!D393","v":"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data"},{"$f":"'Saved Values'!F393","v":"Insufficient Identity Validation or Background Checks (6.2.2.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A73,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A394","v":"ami.32"},{"$f":"'Saved Values'!D394","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F394","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A74,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A395","v":"ami.32"},{"$f":"'Saved Values'!D395","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F395","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A75,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A396","v":"ami.32"},{"$f":"'Saved Values'!D396","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F396","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A76,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A406","v":"der.1"},{"$f":"'Saved Values'!D406","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F406","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A77,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A407","v":"der.1"},{"$f":"'Saved Values'!D407","v":"default password is not changed"},{"$f":"'Saved Values'!F407","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A78,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A408","v":"der.1"},{"$f":"'Saved Values'!D408","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F408","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A79,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A409","v":"der.1"},{"$f":"'Saved Values'!D409","v":"commands or other messages may be inserted on the network by unauthorized individuals"},{"$f":"'Saved Values'!F409","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A80,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A420","v":"der.2"},{"$f":"'Saved Values'!D420","v":"network is connected to untrusted networks"},{"$f":"'Saved Values'!F420","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A81,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A421","v":"der.2"},{"$f":"'Saved Values'!D421","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F421","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A82,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A422","v":"der.2"},{"$f":"'Saved Values'!D422","v":"system permits wireless access by unauthorized parties"},{"$f":"'Saved Values'!F422","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A83,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A423","v":"der.2"},{"$f":"'Saved Values'!D423","v":"unnecessary access is permitted to system functions"},{"$f":"'Saved Values'!F423","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A84,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A424","v":"der.2"},{"$f":"'Saved Values'!D424","v":"users lack visibility to the failure of the system to respond to commands"},{"$f":"'Saved Values'!F424","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A85,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A443","v":"der.3"},{"$f":"'Saved Values'!D443","v":"insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive data"},{"$f":"'Saved Values'!F443","v":"Insufficient Identity Validation or Background Checks (6.2.2.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A86,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A444","v":"der.3"},{"$f":"'Saved Values'!D444","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Saved Values'!F444","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A87,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A445","v":"der.3"},{"$f":"'Saved Values'!D445","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F445","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A88,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A446","v":"der.3"},{"$f":"'Saved Values'!D446","v":"system permits unauthorized installation of software or firmware"},{"$f":"'Saved Values'!F446","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A89,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A459","v":"der.4"},{"$f":"'Saved Values'!D459","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Saved Values'!F459","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A90,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A460","v":"der.4"},{"$f":"'Saved Values'!D460","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Saved Values'!F460","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A91,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A466","v":"der.5"},{"$f":"'Saved Values'!D466","v":"system permits installation of malware"},{"$f":"'Saved Values'!F466","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A92,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A483","v":"der.6"},{"$f":"'Saved Values'!D483","v":"system permits potentially harmful command sequences"},{"$f":"'Saved Values'!F483","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A93,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A484","v":"der.6"},{"$f":"'Saved Values'!D484","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Saved Values'!F484","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A94,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A494","v":"der.7"},{"$f":"'Saved Values'!D494","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F494","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A95,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A495","v":"der.7"},{"$f":"'Saved Values'!D495","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F495","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A96,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A496","v":"der.7"},{"$f":"'Saved Values'!D496","v":"system takes action before confirming changes with user"},{"$f":"'Saved Values'!F496","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A97,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A505","v":"der.8"},{"$f":"'Saved Values'!D505","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F505","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A98,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A512","v":"der.9"},{"$f":"'Saved Values'!D512","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F512","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A99,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A513","v":"der.9"},{"$f":"'Saved Values'!D513","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F513","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A100,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A523","v":"der.10"},{"$f":"'Saved Values'!D523","v":"A malicious individual accesses a FDEMS in a small- to medium-sized commercial or industrial site, and modifies the energy output, the volt-var curves, or other DER efficiency settings that were requested by the utility."},{"$f":"'Saved Values'!F523","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A101,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A524","v":"der.10"},{"$f":"'Saved Values'!D524","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F524","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A102,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A525","v":"der.10"},{"$f":"'Saved Values'!D525","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F525","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A103,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A526","v":"der.10"},{"$f":"'Saved Values'!D526","v":"unnecessary access is permitted to the operating system"},{"$f":"'Saved Values'!F526","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A104,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A527","v":"der.10"},{"$f":"'Saved Values'!D527","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F527","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A105,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A528","v":"der.10"},{"$f":"'Saved Values'!D528","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F528","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A106,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A543","v":"der.11"},{"$f":"'Saved Values'!D543","v":"A threat agent gains access to a FDEMS in a small- to medium-sized commercial or industrial site, such as a shopping center, university campus, hospital complex, or manufacturing facility and installs malicious software. At a pre-planned time, the virus planted by the threat agent causes a synchronized shut down of all the DER systems on the site, either causing a complete or partial outage of the facility or forcing the facility to purchase additional power from the grid."},{"$f":"'Saved Values'!F543","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A107,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A544","v":"der.11"},{"$f":"'Saved Values'!D544","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F544","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A108,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A545","v":"der.11"},{"$f":"'Saved Values'!D545","v":"unnecessary access is permitted to the operating system"},{"$f":"'Saved Values'!F545","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A109,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A546","v":"der.11"},{"$f":"'Saved Values'!D546","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F546","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A110,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A547","v":"der.11"},{"$f":"'Saved Values'!D547","v":"system takes action before confirming changes with user"},{"$f":"'Saved Values'!F547","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A111,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A548","v":"der.11"},{"$f":"'Saved Values'!D548","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F548","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A112,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A564","v":"der.12"},{"$f":"'Saved Values'!D564","v":"A malicious individual accesses a utility FDEMS that manages DER generation and storage systems within a substation, and modifies the energy output, the volt-var curves, or other DER management settings. When the utility requests the FDEMS to control the DER systems to provide more vars, the FDEMS causes the DER systems to behave erratically and cause the substation to have power quality problems, including tripping of the transmission line breaker."},{"$f":"'Saved Values'!F564","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A113,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A565","v":"der.12"},{"$f":"'Saved Values'!D565","v":"unnecessary access is permitted to critical functions"},{"$f":"'Saved Values'!F565","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A114,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A566","v":"der.12"},{"$f":"'Saved Values'!D566","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F566","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A115,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A567","v":"der.12"},{"$f":"'Saved Values'!D567","v":"unnecessary access is permitted to the operating system"},{"$f":"'Saved Values'!F567","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A116,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A568","v":"der.12"},{"$f":"'Saved Values'!D568","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F568","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A117,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A569","v":"der.12"},{"$f":"'Saved Values'!D569","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F569","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A118,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A583","v":"der.13"},{"$f":"'Saved Values'!D583","v":"A threat agent compromises the operating system/operating environment platform of a FDEMS and installs malware. The malware leverages automated machine-to-machine authentication mechanisms and/or compromises stored cryptographic authentication keys to allow it to impersonate the authorized FDEMS software. This gives the threat agent complete control over all of the FDEMS resources and remote resources controlled or managed by the FDEMS."},{"$f":"'Saved Values'!F583","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A119,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A584","v":"der.13"},{"$f":"'Saved Values'!D584","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F584","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A120,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A585","v":"der.13"},{"$f":"'Saved Values'!D585","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Saved Values'!F585","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A121,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A586","v":"der.13"},{"$f":"'Saved Values'!D586","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Saved Values'!F586","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A122,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A599","v":"der.14"},{"$f":"'Saved Values'!D599","v":" threat agent spoofs DER SCADA control commands to perform emergency shutdowns of a large number of DER systems simultaneously."},{"$f":"'Saved Values'!F599","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A123,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A600","v":"der.14"},{"$f":"'Saved Values'!D600","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F600","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A124,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A601","v":"der.14"},{"$f":"'Saved Values'!D601","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F601","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A125,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A602","v":"der.14"},{"$f":"'Saved Values'!D602","v":"users lack visibility of threat activity"},{"$f":"'Saved Values'!F602","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A126,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A613","v":"der.15"},{"$f":"'Saved Values'!D613","v":"A threat agent modifies the industrial and the larger commercial DER data being monitored by the utility distribution DER SCADA system in real-time, altering the load value so that it is much higher than the actual value. Although this modification does not affect the monthly revenue metering for these DER systems, it causes the utility to request and pay for additional ancillary services from a neighboring DER storage system."},{"$f":"'Saved Values'!F613","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A127,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A614","v":"der.15"},{"$f":"'Saved Values'!D614","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F614","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A128,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A615","v":"der.15"},{"$f":"'Saved Values'!D615","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Saved Values'!F615","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A129,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A616","v":"der.15"},{"$f":"'Saved Values'!D616","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F616","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A130,Table2[Column1],0))","v":0},{"$f":"NumIt(D130)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A625","v":"der.16"},{"$f":"'Saved Values'!D625","v":"A threat agent breaches a DER SCADA system and causes the DER SCADA system to issue an invalid command to all DER systems. Since DER systems may react differently to invalid commands, the power system experiences immediate and rapid fluctuations as some DER systems shut down, while others go into default mode with no volt-var support, still others revert to full output, and a few become islanded microgrids. The distribution equipment tries to compensate automatically, but causes more problems as the voltage experiences severe surges and sags."},{"$f":"'Saved Values'!F625","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A131,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A626","v":"der.16"},{"$f":"'Saved Values'!D626","v":"system permits potentially harmful command sequences"},{"$f":"'Saved Values'!F626","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A132,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A627","v":"der.16"},{"$f":"'Saved Values'!D627","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F627","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A133,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A639","v":"der.17"},{"$f":"'Saved Values'!D639","v":"A malicious individual modifies the utility DERMS system power flow analysis function (input, output, or power flow configuration) that determines what energy and ancillary services to request from the DER systems. Under these modifications, the results still remain \"reasonable,\" but lead to benefits to some DER systems and to the detriment of others."},{"$f":"'Saved Values'!F639","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A134,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A640","v":"der.17"},{"$f":"'Saved Values'!D640","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F640","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A135,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A641","v":"der.17"},{"$f":"'Saved Values'!D641","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Saved Values'!F641","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A136,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A651","v":"der.18"},{"$f":"'Saved Values'!D651","v":"A threat agent gains access to the utility DERMS system and alters the conditions that determine when a utility has permission to disconnect a pre-established microgrid from the grid. This modification causes the microgrid either to disconnect at some random time in the future, or to prevent it from disconnecting even when it is supposed to disconnect (e.g., in the case of an outage)."},{"$f":"'Saved Values'!F651","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A137,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A652","v":"der.18"},{"$f":"'Saved Values'!D652","v":"unnecessary access is permitted to system functions"},{"$f":"'Saved Values'!F652","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A138,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A653","v":"der.18"},{"$f":"'Saved Values'!D653","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F653","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A139,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A654","v":"der.18"},{"$f":"'Saved Values'!D654","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F654","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A140,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A664","v":"der.19"},{"$f":"'Saved Values'!D664","v":"A threat agent uses a FDEMS to which they have full access, to access the utility's DERMS system. The threat agent is able to modify the DER commands, schedules, and requests sent to other DER systems, making these settings beneficial to their own DER systems, and consequently less beneficial to other DER systems."},{"$f":"'Saved Values'!F664","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A141,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A665","v":"der.19"},{"$f":"'Saved Values'!D665","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F665","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A142,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A666","v":"der.19"},{"$f":"'Saved Values'!D666","v":"unnecessary access is permitted to system functions"},{"$f":"'Saved Values'!F666","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A143,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A667","v":"der.19"},{"$f":"'Saved Values'!D667","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F667","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A144,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A668","v":"der.19"},{"$f":"'Saved Values'!D668","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F668","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A145,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A677","v":"der.20"},{"$f":"'Saved Values'!D677","v":"A threat agent accesses the DERMS system and modifies the weather data being used to forecast loads and DER generation/storage. Consequently, less than optimal requests are sent to DER systems, causing financial impacts to the utility."},{"$f":"'Saved Values'!F677","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A146,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A678","v":"der.20"},{"$f":"'Saved Values'!D678","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F678","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A147,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A679","v":"der.20"},{"$f":"'Saved Values'!D679","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F679","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A148,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A680","v":"der.20"},{"$f":"'Saved Values'!D680","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F680","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A149,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A690","v":"der.21"},{"$f":"'Saved Values'!D690","v":"A threat agent accesses the DERMS systems and steals the customer DER registration information, using it for industrial espionage or other purposes, causing confidentiality impacts to these utility customers. For example, if stolen, this information could allow other DER owners to manipulate the retail (or wholesale) energy markets, for instance by bidding in prices or energy products that make it less likely the DER system (whose data was stolen) would be willing/able to bid, or if they did bid, making it less cost-effective for them."},{"$f":"'Saved Values'!F690","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A150,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A691","v":"der.21"},{"$f":"'Saved Values'!D691","v":"unnecessary access is permitted to system functions"},{"$f":"'Saved Values'!F691","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A151,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A692","v":"der.21"},{"$f":"'Saved Values'!D692","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Saved Values'!F692","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A152,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A704","v":"der.23"},{"$f":"'Saved Values'!D704","v":"A threat agent obtains control of the DER management system of a Retail Energy Provider (REP) (who might be a department within a utility or could be a Third Party). The REP then provides invalid information to the utility grid operators on the future availability of large amounts of DER energy and ancillary services. This causes the grid operator to make less-than-optimal market decisions on purchasing energy and ancillary services."},{"$f":"'Saved Values'!F704","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A153,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A715","v":"der.24"},{"$f":"'Saved Values'!D715","v":"A Retail Energy Provider (REP) that manages a group of DER systems normally receives commands from the DERMS on what energy levels and ancillary services that group of DER systems should provide. A threat agent accesses confidential or private information in the DERMS DER database on customers who own DER systems, and uses that information to \"market\" to those customers."},{"$f":"'Saved Values'!F715","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A154,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A716","v":"der.24"},{"$f":"'Saved Values'!D716","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Saved Values'!F716","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A155,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A717","v":"der.24"},{"$f":"'Saved Values'!D717","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F717","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A156,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A718","v":"der.24"},{"$f":"'Saved Values'!D718","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F718","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A157,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A727","v":"der.25"},{"$f":"'Saved Values'!D727","v":"A threat agent obtains control of the DER management system of a REP (who might be a department within a utility or could be a Third Party). The REP provides information to the utility grid operators that all DER systems will continue to function normally but then the compromised DER management system shuts down large amounts of DER energy and ancillary services."},{"$f":"'Saved Values'!F727","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A158,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A728","v":"der.25"},{"$f":"'Saved Values'!D728","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F728","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A159,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A739","v":"der.26"},{"$f":"'Saved Values'!D739","v":"A threat agent spoofs messages that appear to come from a microgrid to the utility. The messages indicate that the pre-established conditions have been met for the utility to disconnect from the microgrid. The utility disconnects from the microgrid, even though these conditions are not actually met."},{"$f":"'Saved Values'!F739","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A160,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A740","v":"der.26"},{"$f":"'Saved Values'!D740","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F740","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A161,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A747","v":"wampac.1"},{"$f":"'Saved Values'!D747","v":"A set of Phasor Measurement Units (PMUs) receive their time via network communication from a Precision Time Protocol (PTP) server. A threat agent is able to perform a denial of service attack against PTP either by leveraging vulnerabilities in the PTP service itself or by flooding it with high volume of traffic or malformed packets targeting open ports that are not required by PTP. This leads to delays or lack of functionality of the PTP service, translating into the inability of the PMUs to correctly timestamp their measurements."},{"$f":"'Saved Values'!F747","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A162,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A748","v":"wampac.1"},{"$f":"'Saved Values'!D748","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Saved Values'!F748","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A163,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A749","v":"wampac.1"},{"$f":"'Saved Values'!D749","v":"unnecessary system services are configured to run"},{"$f":"'Saved Values'!F749","v":"Unneeded Services Running (6.4.3.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A164,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A750","v":"wampac.1"},{"$f":"'Saved Values'!D750","v":"system may become overwhelmed by traffic flooding or malformed traffic"},{"$f":"'Saved Values'!F750","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A165,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A762","v":"wampac.2"},{"$f":"'Saved Values'!D762","v":"A threat agent leverages vulnerabilities to perform a spoofing attack and inject messages in WAMPAC network equipment (router, switch, etc.). The altered messages might be either measurements used as input to the WAMPAC algorithms, or commands to phasor measurement units (PMUs) or phasor data concentrators (PDCs)."},{"$f":"'Saved Values'!F762","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A166,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A763","v":"wampac.2"},{"$f":"'Saved Values'!D763","v":"unnecessary access is permitted to networking components"},{"$f":"'Saved Values'!F763","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A167,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A764","v":"wampac.2"},{"$f":"'Saved Values'!D764","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F764","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A168,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A765","v":"wampac.2"},{"$f":"'Saved Values'!D765","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F765","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A169,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A766","v":"wampac.2"},{"$f":"'Saved Values'!D766","v":"commands or other messages may be inserted on the network by unauthorized individuals"},{"$f":"'Saved Values'!F766","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A170,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A767","v":"wampac.2"},{"$f":"'Saved Values'!D767","v":"system permits networking components to be accessed by unauthorized individuals"},{"$f":"'Saved Values'!F767","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A171,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A780","v":"wampac.3"},{"$f":"'Saved Values'!D780","v":"An insider is able to gain access to the network to which a PDC is connected and to the PDC's credentials, assuming credentials are in place. This individual compromises (malicious intent) or misconfigures (accidentally) the PDC. Consequently, the PDC does not recognize certain PDCs/PMUs and sends incomplete measurement data up in the WAMPAC hierarchy."},{"$f":"'Saved Values'!F780","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A172,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A781","v":"wampac.3"},{"$f":"'Saved Values'!D781","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Saved Values'!F781","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A173,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A782","v":"wampac.3"},{"$f":"'Saved Values'!D782","v":"design permits unnecessary privileges"},{"$f":"'Saved Values'!F782","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A174,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A783","v":"wampac.3"},{"$f":"'Saved Values'!D783","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Saved Values'!F783","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A175,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A784","v":"wampac.3"},{"$f":"'Saved Values'!D784","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F784","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A176,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A796","v":"wampac.4"},{"$f":"'Saved Values'!D796","v":"Although access control and connection authentication from a PMU into a PDC are in place, these are compromised. This may be due to a backdoor not subject to the usual controls, social engineering, network sniffing to gain credentials or an attack on the authentication database to modify or steal credential information. This allows inadvertent or malicious introduction of false measurement data."},{"$f":"'Saved Values'!F796","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A177,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A797","v":"wampac.4"},{"$f":"'Saved Values'!D797","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F797","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A178,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A798","v":"wampac.4"},{"$f":"'Saved Values'!D798","v":"credentials are accessible in the clear"},{"$f":"'Saved Values'!F798","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A179,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A799","v":"wampac.4"},{"$f":"'Saved Values'!D799","v":"system permits bypass of access control mechanisms"},{"$f":"'Saved Values'!F799","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A180,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A815","v":"wampac.5"},{"$f":"'Saved Values'!D815","v":"An authorized or unauthorized insider (e.g., social-engineered by a threat agent or accidentally) is able to gain access and misconfigures a phasor gateway, allowing less synchrophasor measurement data to be shared with other phasor gateways or altering the tagging of PMU ID associated with the shared data. This action results in a delay in other utilities' visibility to a cascading failure across utilities."},{"$f":"'Saved Values'!F815","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A181,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A816","v":"wampac.5"},{"$f":"'Saved Values'!D816","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F816","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A182,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A817","v":"wampac.5"},{"$f":"'Saved Values'!D817","v":"configuration changes are not verified for correctness"},{"$f":"'Saved Values'!F817","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A183,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A818","v":"wampac.5"},{"$f":"'Saved Values'!D818","v":"remote access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F818","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A184,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A828","v":"wampac.6"},{"$f":"'Saved Values'!D828","v":"WAMPAC communications are slowed down or stopped by manipulating the communications link between the PMUs and the control center. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack."},{"$f":"'Saved Values'!F828","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A185,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A829","v":"wampac.6"},{"$f":"'Saved Values'!D829","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F829","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A186,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A830","v":"wampac.6"},{"$f":"'Saved Values'!D830","v":"users lack visibility of threat activity"},{"$f":"'Saved Values'!F830","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A187,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A840","v":"wampac.7"},{"$f":"'Saved Values'!D840","v":"An insider is able to gain unauthorized access to the network to which a WAMPAC historian is connected and to the historian host/database software's credentials, assuming credentials are in place. The insider corrupts or deletes the measurement data from the database."},{"$f":"'Saved Values'!F840","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A188,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A841","v":"wampac.7"},{"$f":"'Saved Values'!D841","v":"network interfaces permit unnecessary traffic flows"},{"$f":"'Saved Values'!F841","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A189,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A842","v":"wampac.7"},{"$f":"'Saved Values'!D842","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F842","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A190,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A843","v":"wampac.7"},{"$f":"'Saved Values'!D843","v":"users lack visibility of unapproved access"},{"$f":"'Saved Values'!F843","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A191,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A844","v":"wampac.7"},{"$f":"'Saved Values'!D844","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Saved Values'!F844","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A192,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A845","v":"wampac.7"},{"$f":"'Saved Values'!D845","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F845","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A193,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A859","v":"wampac.8"},{"$f":"'Saved Values'!D859","v":"A threat agent inserts firmware into PMU/PDC that alters measurements while they are collected. The altering mechanism can be triggered at all times, randomly or by certain events (e.g., time of day, certain date, etc.) that are assumed to inflict significant damage."},{"$f":"'Saved Values'!F859","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A194,Table2[Column1],0))","v":0},{"$f":"NumIt(D194)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A860","v":"wampac.8"},{"$f":"'Saved Values'!D860","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F860","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A195,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A861","v":"wampac.8"},{"$f":"'Saved Values'!D861","v":"users lack visibility that unauthorized firmware has been installed"},{"$f":"'Saved Values'!F861","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A196,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A871","v":"wampac.10"},{"$f":"'Saved Values'!D871","v":"A threat agent is able to gain unauthorized access to the credentials of the PMU/PDC/Phasor Gateway metadata that describes the data structure, assuming credentials are in place, and corrupts or deletes the associated metadata from the database."},{"$f":"'Saved Values'!F871","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A197,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A872","v":"wampac.10"},{"$f":"'Saved Values'!D872","v":"users lack visibility of unapproved access"},{"$f":"'Saved Values'!F872","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A198,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A873","v":"wampac.10"},{"$f":"'Saved Values'!D873","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F873","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A199,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A883","v":"wampac.11"},{"$f":"'Saved Values'!D883","v":"An insider delays local measurement data exchange between substations by compromising the integrity of the WAMPAC communication link between substations. This might be done by attacking network components such as routers, or gaining access to the network and employing a flooding attack. Note: The impact of the failure scenario presented below is assessed under the assumption that WAMPAC is used as part of a special protection scheme (SPS)."},{"$f":"'Saved Values'!F883","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A200,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A884","v":"wampac.11"},{"$f":"'Saved Values'!D884","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F884","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A201,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A885","v":"wampac.11"},{"$f":"'Saved Values'!D885","v":"users lack visibility of threat activity"},{"$f":"'Saved Values'!F885","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A202,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A899","v":"wampac.12"},{"$f":"'Saved Values'!D899","v":"An attacker blocks or alters the GPS time signal that is associated with the synchrophasor measurements. The attacker can perform either a GPS spoofing or GPS jamming attack, where the GPS receiver is deceived by a more powerful signal resulting in the GPS signal being intentionally blocked or altered."},{"$f":"'Saved Values'!F899","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A203,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A907","v":"et.1"},{"$f":"'Saved Values'!D907","v":"A threat agent directly accesses and compromises the Electric Vehicle (EV) firmware or inserts a Trojan horse to always indicate the EV is undercharged. Consequently, the battery becomes overcharged and may eventually explode."},{"$f":"'Saved Values'!F907","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A204,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A908","v":"et.1"},{"$f":"'Saved Values'!D908","v":"design, implementation, or maintenance permits system to enter a hazardous state"},{"$f":"'Saved Values'!F908","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A205,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A909","v":"et.1"},{"$f":"'Saved Values'!D909","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F909","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A206,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A917","v":"et.2"},{"$f":"'Saved Values'!D917","v":"A threat agent is able to compromise a fast-charging station management system. When a large number of electric vehicles are connected to charging stations, the threat agent modifies the charge-staggering algorithm such that fast-charging begins concurrently for all the EVs, thus overloading the distribution transformer, causing a local outage, and preventing the EVs from being charged."},{"$f":"'Saved Values'!F917","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A207,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A918","v":"et.2"},{"$f":"'Saved Values'!D918","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F918","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A208,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A927","v":"et.3"},{"$f":"'Saved Values'!D927","v":"A threat agent such as a disgruntled employee or an employee subjected to social engineering could inject a virus into the computer system of an EV at an EV maintenance center or at a factory. Although not present today, future wireless communication technologies for Vehicle-to-Infrastructure (V2I) could enable a vehicle to establish additional data communications channels through which the virus infects public charging stations. A public charging station may in turn infect other EVs. The virus could harm other key functions for car safety in the EV as well as charging functions in the EV and EVSE (Electric Vehicle Service Equipment)."},{"$f":"'Saved Values'!F927","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A209,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A928","v":"et.3"},{"$f":"'Saved Values'!D928","v":"system permits installation of malware"},{"$f":"'Saved Values'!F928","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A210,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A929","v":"et.3"},{"$f":"'Saved Values'!D929","v":"system permits installation of malware"},{"$f":"'Saved Values'!F929","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A211,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A930","v":"et.3"},{"$f":"'Saved Values'!D930","v":"critical communication paths are not isolated from communication paths that require fewer protections to operate"},{"$f":"'Saved Values'!F930","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A212,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A931","v":"et.3"},{"$f":"'Saved Values'!D931","v":"system permits installation of malware"},{"$f":"'Saved Values'!F931","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A213,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A950","v":"et.4"},{"$f":"'Saved Values'!D950","v":"A threat agent cracks through an enterprise firewall and exploits a weak operating system password. Because of a poor database server security configuration, the threat agent is able to obtain confidential utility records regarding charging locations for specific vehicles from the database."},{"$f":"'Saved Values'!F950","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A214,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A951","v":"et.4"},{"$f":"'Saved Values'!D951","v":"unnecessary access is permitted to the database"},{"$f":"'Saved Values'!F951","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A215,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A952","v":"et.4"},{"$f":"'Saved Values'!D952","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F952","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A216,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A953","v":"et.4"},{"$f":"'Saved Values'!D953","v":"unnecessary access is permitted to the database"},{"$f":"'Saved Values'!F953","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A217,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A965","v":"et.5"},{"$f":"'Saved Values'!D965","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F965","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A218,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A974","v":"et.6"},{"$f":"'Saved Values'!D974","v":"inadequate binding of meter with energy users authorized to charge to that meter"},{"$f":"'Saved Values'!F974","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A219,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A975","v":"et.6"},{"$f":"'Saved Values'!D975","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Saved Values'!F975","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A220,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A984","v":"et.7"},{"$f":"'Saved Values'!D984","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Saved Values'!F984","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A221,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A990","v":"et.8"},{"$f":"'Saved Values'!D990","v":"system permits device identifier to be misused"},{"$f":"'Saved Values'!F990","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A222,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A997","v":"et.9"},{"$f":"'Saved Values'!D997","v":"system permits device identifier to be misused"},{"$f":"'Saved Values'!F997","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A223,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1011","v":"et.10"},{"$f":"'Saved Values'!D1011","v":"system permits device identifier to be misused"},{"$f":"'Saved Values'!F1011","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A224,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1018","v":"et.11"},{"$f":"'Saved Values'!D1018","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F1018","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A225,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1019","v":"et.11"},{"$f":"'Saved Values'!D1019","v":"unnecessary access is permitted to the database"},{"$f":"'Saved Values'!F1019","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A226,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1020","v":"et.11"},{"$f":"'Saved Values'!D1020","v":"system makes private data accessible to unauthorized individuals"},{"$f":"'Saved Values'!F1020","v":"Sensitive Data Protection Vulnerability (6.3.1.15)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A227,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1021","v":"et.11"},{"$f":"'Saved Values'!D1021","v":"system permits device identifier to be misused"},{"$f":"'Saved Values'!F1021","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A228,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1038","v":"et.12"},{"$f":"'Saved Values'!D1038","v":"critical components exhibit single point of failure"},{"$f":"'Saved Values'!F1038","v":"Insufficient Redundancy (6.5.1.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A229,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1046","v":"et.13"},{"$f":"'Saved Values'!D1046","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F1046","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A230,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1047","v":"et.13"},{"$f":"'Saved Values'!D1047","v":"unnecessary access is permitted to the database"},{"$f":"'Saved Values'!F1047","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A231,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1048","v":"et.13"},{"$f":"'Saved Values'!D1048","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Saved Values'!F1048","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A232,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1060","v":"et.14"},{"$f":"'Saved Values'!D1060","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1060","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A233,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1072","v":"et.15"},{"$f":"'Saved Values'!D1072","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1072","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A234,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1073","v":"et.15"},{"$f":"'Saved Values'!D1073","v":"design, implementation, or maintenance permits system to enter a hazardous state"},{"$f":"'Saved Values'!F1073","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A235,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1074","v":"et.15"},{"$f":"'Saved Values'!D1074","v":"system takes action before confirming changes with user"},{"$f":"'Saved Values'!F1074","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A236,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1089","v":"et.16"},{"$f":"'Saved Values'!D1089","v":"system permits installation of malware"},{"$f":"'Saved Values'!F1089","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A237,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1090","v":"et.16"},{"$f":"'Saved Values'!D1090","v":"system permits installation of malware"},{"$f":"'Saved Values'!F1090","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A238,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1091","v":"et.16"},{"$f":"'Saved Values'!D1091","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1091","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A239,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1092","v":"et.16"},{"$f":"'Saved Values'!D1092","v":"system permits installation of malware"},{"$f":"'Saved Values'!F1092","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A240,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1093","v":"et.16"},{"$f":"'Saved Values'!D1093","v":"shared credentials are used for access"},{"$f":"'Saved Values'!F1093","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A241,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1094","v":"et.16"},{"$f":"'Saved Values'!D1094","v":"design, implementation, or maintenance permits system to enter a hazardous state"},{"$f":"'Saved Values'!F1094","v":"Use of Inadequate Security Architectures and Designs (6.4.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A242,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1113","v":"dr.1"},{"$f":"'Saved Values'!D1113","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1113","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A243,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1114","v":"dr.1"},{"$f":"'Saved Values'!D1114","v":"unnecessary access is permitted to the communications channel"},{"$f":"'Saved Values'!F1114","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A244,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1115","v":"dr.1"},{"$f":"'Saved Values'!D1115","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Saved Values'!F1115","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A245,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1116","v":"dr.1"},{"$f":"'Saved Values'!D1116","v":"system relies on communications that are easy to jam"},{"$f":"'Saved Values'!F1116","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A246,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1117","v":"dr.1"},{"$f":"'Saved Values'!D1117","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1117","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A247,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1118","v":"dr.1"},{"$f":"'Saved Values'!D1118","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1118","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A248,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1119","v":"dr.1"},{"$f":"'Saved Values'!D1119","v":"users lack visibility of threat activity"},{"$f":"'Saved Values'!F1119","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A249,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1140","v":"dr.2"},{"$f":"'Saved Values'!D1140","v":"A threat agent eavesdrops on traffic on the network between a DRAS and a customer system. This could leak private information to the threat agent. This might be the easiest attack that the agent can launch while not being detected by utilities."},{"$f":"'Saved Values'!F1140","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A250,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1141","v":"dr.2"},{"$f":"'Saved Values'!D1141","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1141","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A251,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1142","v":"dr.2"},{"$f":"'Saved Values'!D1142","v":"unnecessary access is permitted to the communications channel"},{"$f":"'Saved Values'!F1142","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A252,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1143","v":"dr.2"},{"$f":"'Saved Values'!D1143","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Saved Values'!F1143","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A253,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1144","v":"dr.2"},{"$f":"'Saved Values'!D1144","v":"encryption keys are shared"},{"$f":"'Saved Values'!F1144","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A254,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1145","v":"dr.2"},{"$f":"'Saved Values'!D1145","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Saved Values'!F1145","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A255,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1158","v":"dr.3"},{"$f":"'Saved Values'!D1158","v":"A threat agent obtains access to the communications channel between the DRAS and the customer DR system, modifies on-going traffic or communications, inserts false messages, or launches a replay attack. The DRAS and the customer system could receive an unauthorized message or a corrupted message. Such a message may cause unintentional (often unfavorable) behaviors of these systems. (Note: Spoofed last gasp messages as in AMI.11 is an important special case of this failure scenario.)"},{"$f":"'Saved Values'!F1158","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A256,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1159","v":"dr.3"},{"$f":"'Saved Values'!D1159","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F1159","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A257,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1160","v":"dr.3"},{"$f":"'Saved Values'!D1160","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F1160","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A258,Table2[Column1],0))","v":0},{"$f":"NumIt(D258)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1161","v":"dr.3"},{"$f":"'Saved Values'!D1161","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1161","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A259,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1162","v":"dr.3"},{"$f":"'Saved Values'!D1162","v":"unnecessary access is permitted to the communications channel"},{"$f":"'Saved Values'!F1162","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A260,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1163","v":"dr.3"},{"$f":"'Saved Values'!D1163","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Saved Values'!F1163","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A261,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1181","v":"dr.4"},{"$f":"'Saved Values'!D1181","v":"A threat agent maliciously modifies the DRAS configuration to send (or not send) DR messages at incorrect times and to incorrect devices. This could deliver a wrong, but seemingly legitimate set of messages to the customer system."},{"$f":"'Saved Values'!F1181","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A262,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1182","v":"dr.4"},{"$f":"'Saved Values'!D1182","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1182","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A263,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1183","v":"dr.4"},{"$f":"'Saved Values'!D1183","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Saved Values'!F1183","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A264,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1184","v":"dr.4"},{"$f":"'Saved Values'!D1184","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F1184","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A265,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1201","v":"dr.5"},{"$f":"'Saved Values'!D1201","v":"The DRAS or customer DR system is infected by non-specific common malware. This malware may consume system resources, thus slowing other system processes or may attempt to compromise typical components such as databases. This could cause the DRAS to fail to send DR messages when needed or to disclose customer information in its database. It could cause the customer system not to execute the contractual terms of the DR service although it receives legitimate DR messages."},{"$f":"'Saved Values'!F1201","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A266,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1202","v":"dr.5"},{"$f":"'Saved Values'!D1202","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Saved Values'!F1202","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A267,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1203","v":"dr.5"},{"$f":"'Saved Values'!D1203","v":"the list of signatures used for detection of attacks is no longer current"},{"$f":"'Saved Values'!F1203","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A268,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1204","v":"dr.5"},{"$f":"'Saved Values'!D1204","v":"unnecessary system services are configured to run"},{"$f":"'Saved Values'!F1204","v":"Unneeded Services Running (6.4.3.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A269,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1205","v":"dr.5"},{"$f":"'Saved Values'!D1205","v":"remote access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1205","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A270,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1217","v":"dr.6"},{"$f":"'Saved Values'!D1217","v":"A threat agent injects purpose-built malware into the DRAS. This malware places the server under remote command of this agent. The agent might use this capability to send out DR messages appropriate for non-peak times at peak times, and vice versa."},{"$f":"'Saved Values'!F1217","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A271,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1218","v":"dr.6"},{"$f":"'Saved Values'!D1218","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1218","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A272,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1219","v":"dr.6"},{"$f":"'Saved Values'!D1219","v":"users lack visibility that unauthorized changes were made"},{"$f":"'Saved Values'!F1219","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A273,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1220","v":"dr.6"},{"$f":"'Saved Values'!D1220","v":"unnecessary system services are configured to run"},{"$f":"'Saved Values'!F1220","v":"Unneeded Services Running (6.4.3.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A274,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1232","v":"dr.7"},{"$f":"'Saved Values'!D1232","v":"A threat agent injects a malware into a customer DR system that runs an OpenADR client program at the gateway of the customer domain. The malware might be controlled remotely by the agent or could directly change the behaviors of the customer DR system without any remote connection. As a consequence, the compromised DR system sends incorrect DR messages back to the DRAS. For instance, it sends a false DR registration message to the DRAS, when registering the customer's capability of energy reduction - the false message informs the DRAS that the customer is able to reduce 500kW, although he cannot. Alternatively, the compromised DR system sends a false DR report message to the DRAS, after the DR event finishes - the false message informs the DRAS that the customer reduced 500kW, although the customer actually reduced 100kW."},{"$f":"'Saved Values'!F1232","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A275,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1233","v":"dr.7"},{"$f":"'Saved Values'!D1233","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Saved Values'!F1233","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A276,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1234","v":"dr.7"},{"$f":"'Saved Values'!D1234","v":"the list of signatures used for detection of attacks is no longer current"},{"$f":"'Saved Values'!F1234","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A277,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1235","v":"dr.7"},{"$f":"'Saved Values'!D1235","v":"unnecessary system services are configured to run"},{"$f":"'Saved Values'!F1235","v":"Unneeded Services Running (6.4.3.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A278,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1236","v":"dr.7"},{"$f":"'Saved Values'!D1236","v":"unnecessary access is permitted to system functions"},{"$f":"'Saved Values'!F1236","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A279,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1237","v":"dr.7"},{"$f":"'Saved Values'!D1237","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Saved Values'!F1237","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A280,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1238","v":"dr.7"},{"$f":"'Saved Values'!D1238","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1238","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A281,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1253","v":"dgm.1"},{"$f":"'Saved Values'!D1253","v":"A threat agent uses a wireless signal jammer to disrupt wireless communications channels used to monitor and control distribution systems and substations. Examples are wireless local area network (LAN) communications for inter-substation differential protection, wireless communications between a distribution management system (DMS) and static VAR compensators (SVC), and communications to wireless monitoring equipment."},{"$f":"'Saved Values'!F1253","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A282,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1254","v":"dgm.1"},{"$f":"'Saved Values'!D1254","v":"system relies on communications that are easy to jam"},{"$f":"'Saved Values'!F1254","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A283,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1265","v":"dgm.2"},{"$f":"'Saved Values'!D1265","v":"Some utilities depend upon communication providers for long-haul and wide area network (WAN) communications for monitoring and control of their distribution system. Furthermore, utilities that provide their own communication network for critical functions often resell unused bandwidth to offset costs while others have spun off their communication network as a separate communications company. There is also a general trend toward economizing communications costs by sharing them. A threat agent could take advantage of these paradigms by compromising computer systems using the same network as the Distribution Management System (DMS) to facilitate a distributed denial of service attack through the infected computer system by means of a botnet centered on IP spoofing and Internet Control Message Protocol (ICMP) flooding. With the network overburdened, monitoring and control functions could become unavailable for optimization or protection."},{"$f":"'Saved Values'!F1265","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A284,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1266","v":"dgm.2"},{"$f":"'Saved Values'!D1266","v":"communication channels are shared between different system owners"},{"$f":"'Saved Values'!F1266","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A285,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1277","v":"dgm.3"},{"$f":"'Saved Values'!D1277","v":"A threat agent injects malicious code into substation equipment through physical access of engineering serial ports or by memory update devices such as USB memory sticks, Secure Digital (SD) cards or Compact Flash (CF) cards. Examples of target equipment include communications concentrators, remote terminal units (RTUs), and protection relays. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration."},{"$f":"'Saved Values'!F1277","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A286,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1278","v":"dgm.3"},{"$f":"'Saved Values'!D1278","v":"unnecessary access is permitted to system functions"},{"$f":"'Saved Values'!F1278","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A287,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1279","v":"dgm.3"},{"$f":"'Saved Values'!D1279","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1279","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A288,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1280","v":"dgm.3"},{"$f":"'Saved Values'!D1280","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1280","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A289,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1301","v":"dgm.4"},{"$f":"'Saved Values'!D1301","v":"A threat agent uploads malicious code into substation equipment via remote engineering access, either through an IP network WAN or dialup to a line-sharing switch (LSS). Examples of target equipment include communication concentrators, RTUs, and protection relays. Connections with peers are another avenue of attack. Some distribution substations, particularly in urban environments, use Bluetooth or ZigBee for access to reduce the need for crews to install underground cables. Malicious code could change device settings for purposes of rendering equipment inoperable, data gathering, denial of service, or misconfiguration."},{"$f":"'Saved Values'!F1301","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A290,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1302","v":"dgm.4"},{"$f":"'Saved Values'!D1302","v":"unnecessary access is permitted to the communications channel"},{"$f":"'Saved Values'!F1302","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A291,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1303","v":"dgm.4"},{"$f":"'Saved Values'!D1303","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Saved Values'!F1303","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A292,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1318","v":"dgm.5"},{"$f":"'Saved Values'!D1318","v":"A threat agent compromises distribution management system (DMS) functionality through remote access modification of executable programs and libraries, rendering the DMS inoperable."},{"$f":"'Saved Values'!F1318","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A293,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1319","v":"dgm.5"},{"$f":"'Saved Values'!D1319","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1319","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A294,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1320","v":"dgm.5"},{"$f":"'Saved Values'!D1320","v":"software patches are not checked regularly to ensure that they are current"},{"$f":"'Saved Values'!F1320","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A295,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1321","v":"dgm.5"},{"$f":"'Saved Values'!D1321","v":"remote access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1321","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A296,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1340","v":"dgm.6"},{"$f":"'Saved Values'!D1340","v":"Threat agent spoofs data inputs from field devices at substations and below to cause the DMS to report a false system state. This could cause operator or automated responses that are inappropriate."},{"$f":"'Saved Values'!F1340","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A297,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1341","v":"dgm.6"},{"$f":"'Saved Values'!D1341","v":"system permits messages to be modified by unauthorized individuals"},{"$f":"'Saved Values'!F1341","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A298,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1342","v":"dgm.6"},{"$f":"'Saved Values'!D1342","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F1342","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A299,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1352","v":"dgm.7"},{"$f":"'Saved Values'!D1352","v":"Assuming the same communications system serves DGM, DR, AMI, and many other services at the distribution level, a Quality of Service (QoS) allocation of bandwidth is necessary. QoS can be spoofed and if end device classifications are trusted, a threat agent can escalate the priority of malevolent data streams. If denial of service is the goal, the threat agent could spoof the QoS of flooded ICMP packets to prevent the transmission and reception of monitoring and control packets."},{"$f":"'Saved Values'!F1352","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A300,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1353","v":"dgm.7"},{"$f":"'Saved Values'!D1353","v":"system assumes data inputs and resulting calculations are accurate"},{"$f":"'Saved Values'!F1353","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A301,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1365","v":"dgm.8"},{"$f":"'Saved Values'!D1365","v":"Lifecycle attacks against equipment during development, production, shipping, and maintenance can introduce deliberate errors that will result in failure under special conditions. For example, a threat agent might upload modified firmware in a relay during production that introduces a back door for changing relay settings and set points. This could render the relay inoperable or cause it to operate unexpectedly."},{"$f":"'Saved Values'!F1365","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A302,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1366","v":"dgm.8"},{"$f":"'Saved Values'!D1366","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1366","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A303,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1367","v":"dgm.8"},{"$f":"'Saved Values'!D1367","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1367","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A304,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1381","v":"dgm.9"},{"$f":"'Saved Values'!D1381","v":"A threat agent could take advantage of the confusion, lack of security, and hasty reconstitution of the distribution grid after a disaster. For example, a threat agent could delay the recovery effort by leveraging temporary communications with low security to access DMS to switch breakers. Likewise this objective could be achieved by subverting weak physical security at substations (due to damage or communication outages) to access engineering or console ports or relays to change settings and render them inoperable. Further, the interception of temporary communications with low security might support reconnaissance of high priority vulnerabilities to aid in future attacks."},{"$f":"'Saved Values'!F1381","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A305,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1382","v":"dgm.9"},{"$f":"'Saved Values'!D1382","v":"emergency response policy, procedures, or execution intentionally disregards security controls to speed recovery"},{"$f":"'Saved Values'!F1382","v":"Inadequate Continuity of Operations or Disaster Recovery Plan (6.2.3.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A306,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1393","v":"dgm.10"},{"$f":"'Saved Values'!D1393","v":"Switched capacitor banks can create large switching transients when connected to a utility feeder, generating voltage spikes up to twice the rated voltage and can be exacerbated when two are switched on back-to-back. A threat agent social engineers DMS Human Machine Interface (HMI) passwords to gain control of switched capacitor bank relays to repeatedly switch capacitor banks on and off, generating cascading voltage spikes and instability to trip protection devices."},{"$f":"'Saved Values'!F1393","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A307,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1394","v":"dgm.10"},{"$f":"'Saved Values'!D1394","v":"workforce may be unaware of recommended precautions"},{"$f":"'Saved Values'!F1394","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A308,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1395","v":"dgm.10"},{"$f":"'Saved Values'!D1395","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1395","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A309,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1396","v":"dgm.10"},{"$f":"'Saved Values'!D1396","v":"users and hardware/software entities are given access unnecessary for their roles"},{"$f":"'Saved Values'!F1396","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A310,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1407","v":"dgm.11"},{"$f":"'Saved Values'!D1407","v":"A threat agent performs reconnaissance of utility communications, electrical infrastructure, and ancillary systems to identify critical feeders and electrical equipment. Threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent manufactures an artificial cascade through sequential tripping of select critical feeders and components, causing automated tripping of generation sources due to power and voltage fluctuations. A blackout of varying degree and potential equipment damage ensues. The remote connections might be established using a variety of methods or combination of methods. These include, but are not limited to, using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly."},{"$f":"'Saved Values'!F1407","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A311,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1408","v":"dgm.11"},{"$f":"'Saved Values'!D1408","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"},{"$f":"'Saved Values'!F1408","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A312,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1409","v":"dgm.11"},{"$f":"'Saved Values'!D1409","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F1409","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A313,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1410","v":"dgm.11"},{"$f":"'Saved Values'!D1410","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1410","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A314,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1411","v":"dgm.11"},{"$f":"'Saved Values'!D1411","v":"configuration changes are not verified for correctness"},{"$f":"'Saved Values'!F1411","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A315,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1412","v":"dgm.11"},{"$f":"'Saved Values'!D1412","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1412","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A316,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1413","v":"dgm.11"},{"$f":"'Saved Values'!D1413","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Saved Values'!F1413","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A317,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1431","v":"dgm.12"},{"$f":"'Saved Values'!D1431","v":"A threat agent carries out a man in the middle attack, hijacking the wireless communications channel to a substation transformer. The threat agent uses this capability to disable transformer cooling fans and overheat the device. Depending on the transformer and its controller, this could be done through a direct command or by drastically increasing oil temperature setpoints. Many transformers are also custom built and have long lead times for replacement or repair."},{"$f":"'Saved Values'!F1431","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A318,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1432","v":"dgm.12"},{"$f":"'Saved Values'!D1432","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F1432","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A319,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1433","v":"dgm.12"},{"$f":"'Saved Values'!D1433","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Saved Values'!F1433","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A320,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1444","v":"dgm.13"},{"$f":"'Saved Values'!D1444","v":"After a maintenance employee retires, computer services personnel forgot to deactivate the employees account on the DMS network. A week later, a threat agent uses the employee's credentials to access the DMS network. The threat agent alters DMS switching schedules so that automated and manual switching actions trip the wrong lines after a fault or before maintenance to cause power interruptions for critical loads, such as hospitals or prisons."},{"$f":"'Saved Values'!F1444","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A321,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1445","v":"dgm.13"},{"$f":"'Saved Values'!D1445","v":"workforce not trained in proper procedures"},{"$f":"'Saved Values'!F1445","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A322,Table2[Column1],0))","v":0},{"$f":"NumIt(D322)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1446","v":"dgm.13"},{"$f":"'Saved Values'!D1446","v":"adherence to policies and procedures degrades over time"},{"$f":"'Saved Values'!F1446","v":"Inadequate Periodic Security Audits (6.2.3.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A323,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1455","v":"dgm.14"},{"$f":"'Saved Values'!D1455","v":"Serial communications to substations over phone lines often lack authentication of field devices, such as RTUs.┬áThis might allow a threat agent to directly dial into modems attached to RTU equipment by war dialing city phone numbers or company phone extensions. Such techniques could allow a threat agent to send breaker trip commands to substation relays and disconnect feeders."},{"$f":"'Saved Values'!F1455","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A324,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1456","v":"dgm.14"},{"$f":"'Saved Values'!D1456","v":"physical access to a serial port may enable logical access by unauthorized entities"},{"$f":"'Saved Values'!F1456","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A325,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1457","v":"dgm.14"},{"$f":"'Saved Values'!D1457","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F1457","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A326,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1458","v":"dgm.14"},{"$f":"'Saved Values'!D1458","v":"publicly accessible and/or third party controlled links used"},{"$f":"'Saved Values'!F1458","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A327,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1467","v":"dgm.15"},{"$f":"'Saved Values'!D1467","v":"A threat agent performs reconnaissance of utility maintenance operations to identify current or scheduled maintenance on distribution lines and equipment performed by utility linemen. The threat agent gains access to selected elements of the utility DMS system - which includes all distribution automation systems and equipment in control rooms, substations, and on pole tops - via remote connections. After gaining the required access, the threat agent energizes distribution lines or equipment that are under maintenance by linemen to elicit injury or death by electrocution. The remote connections might be established using a variety of methods or combination of methods. These include but are not limited to: using a lost, stolen, or acquired utility linemen's laptop to access the DMS directly; compromising an active remote maintenance connection used for vendor DMS application maintenance; taking advantage of an accidental bridged connection to the internet due to DMS misconfiguration; or subverting distribution control communications directly."},{"$f":"'Saved Values'!F1467","v":0},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A328,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1468","v":"dgm.15"},{"$f":"'Saved Values'!D1468","v":"critical operations are not locked out during maintenance"},{"$f":"'Saved Values'!F1468","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A329,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1469","v":"dgm.15"},{"$f":"'Saved Values'!D1469","v":"physical access to mobile devices may enable logical access to business functions by unauthorized individuals"},{"$f":"'Saved Values'!F1469","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A330,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1470","v":"dgm.15"},{"$f":"'Saved Values'!D1470","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F1470","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A331,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1471","v":"dgm.15"},{"$f":"'Saved Values'!D1471","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1471","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A332,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1472","v":"dgm.15"},{"$f":"'Saved Values'!D1472","v":"configuration changes are not verified for correctness"},{"$f":"'Saved Values'!F1472","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A333,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1473","v":"dgm.15"},{"$f":"'Saved Values'!D1473","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1473","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A334,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1474","v":"dgm.15"},{"$f":"'Saved Values'!D1474","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Saved Values'!F1474","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A335,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1475","v":"dgm.15"},{"$f":"'Saved Values'!D1475","v":"system design limits opportunity for system recovery using reconfiguration"},{"$f":"'Saved Values'!F1475","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A336,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1495","v":"dgm.16"},{"$f":"'Saved Values'!D1495","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1495","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A337,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1496","v":"dgm.16"},{"$f":"'Saved Values'!D1496","v":"unnecessary network access is permitted"},{"$f":"'Saved Values'!F1496","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A338,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1497","v":"dgm.16"},{"$f":"'Saved Values'!D1497","v":"system relies on credentials that are easy to obtain for access"},{"$f":"'Saved Values'!F1497","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A339,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1498","v":"dgm.16"},{"$f":"'Saved Values'!D1498","v":"users lack visibility of unapproved access"},{"$f":"'Saved Values'!F1498","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A340,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1499","v":"dgm.16"},{"$f":"'Saved Values'!D1499","v":"commands or other messages may be inserted on the network by unauthorized individuals"},{"$f":"'Saved Values'!F1499","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A341,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1500","v":"dgm.16"},{"$f":"'Saved Values'!D1500","v":"system makes messages accessible to unauthorized individuals"},{"$f":"'Saved Values'!F1500","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A342,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1501","v":"dgm.16"},{"$f":"'Saved Values'!D1501","v":"message modified by an adversary is either difficult or infeasible to distinguish from a valid message"},{"$f":"'Saved Values'!F1501","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A343,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1502","v":"dgm.16"},{"$f":"'Saved Values'!D1502","v":"a copy of a prior message or command is difficult or infeasible to distinguish from a new legitimate message or command"},{"$f":"'Saved Values'!F1502","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A344,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1520","v":"generic.1"},{"$f":"'Saved Values'!D1520","v":"users and hardware/software entities are given access unnecessary for their roles"},{"$f":"'Saved Values'!F1520","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A345,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1521","v":"generic.1"},{"$f":"'Saved Values'!D1521","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1521","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A346,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1522","v":"generic.1"},{"$f":"'Saved Values'!D1522","v":"users lack visibility of unapproved access"},{"$f":"'Saved Values'!F1522","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A347,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1523","v":"generic.1"},{"$f":"'Saved Values'!D1523","v":"speed of incident response process is not appropriate for incident"},{"$f":"'Saved Values'!F1523","v":"Inadequate Incident Response Process (6.2.3.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A348,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1532","v":"generic.2"},{"$f":"'Saved Values'!D1532","v":"network interconnections provide users and hardware/software entities with access unnecessary for their roles"},{"$f":"'Saved Values'!F1532","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A349,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1533","v":"generic.2"},{"$f":"'Saved Values'!D1533","v":"users lack visibility of unapproved access"},{"$f":"'Saved Values'!F1533","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A350,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1534","v":"generic.2"},{"$f":"'Saved Values'!D1534","v":"users lack visibility of threat activity"},{"$f":"'Saved Values'!F1534","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A351,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1535","v":"generic.2"},{"$f":"'Saved Values'!D1535","v":"network is connected to untrusted networks"},{"$f":"'Saved Values'!F1535","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A352,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1547","v":"generic.3"},{"$f":"'Saved Values'!D1547","v":"physical access may be obtained by unauthorized individuals"},{"$f":"'Saved Values'!F1547","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A353,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1559","v":"generic.4"},{"$f":"'Saved Values'!D1559","v":"sensitive data remains on disposed equipment"},{"$f":"'Saved Values'!F1559","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A354,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1560","v":"generic.4"},{"$f":"'Saved Values'!D1560","v":"system permits unauthorized changes"},{"$f":"'Saved Values'!F1560","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A355,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1570","v":"gen.1"},{"$f":"'Saved Values'!D1570","v":"Physical access may be obtained by unauthorized individuals as many sites have pump houses"},{"$f":"'Saved Values'!F1570","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A356,Table2[Column1],0))","v":0},{"$f":"NumIt(D356)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1571","v":"gen.1"},{"$f":"'Saved Values'!D1571","v":"System relies on credentials that are easy to obtain for access to make configuration changes to"},{"$f":"'Saved Values'!F1571","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A357,Table2[Column1],0))","v":0},{"$f":"NumIt(D357)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1572","v":"gen.1"},{"$f":"'Saved Values'!D1572","v":"System permits unauthorized changes to the"},{"$f":"'Saved Values'!F1572","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A358,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1573","v":"gen.1"},{"$f":"'Saved Values'!D1573","v":"Commands or other messages may be inserted on the network by unauthorized individuals"},{"$f":"'Saved Values'!F1573","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A359,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1590","v":"gen.2"},{"$f":"'Saved Values'!D1590","v":"Configuration changes are not verified for correctness as an individual user is able to modify the referenced"},{"$f":"'Saved Values'!F1590","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A360,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1602","v":"gen.3"},{"$f":"'Saved Values'!D1602","v":"System relies on credentials that are easy to obtain for access to potentially damaging"},{"$f":"'Saved Values'!F1602","v":"Weaknesses in Authentication Process or Authentication Keys (6.5.1.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A361,Table2[Column1],0))","v":0},{"$f":"NumIt(D361)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1603","v":"gen.3"},{"$f":"'Saved Values'!D1603","v":"System relies on credentials that are easy to obtain for access to potentially damaging"},{"$f":"'Saved Values'!F1603","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A362,Table2[Column1],0))","v":0},{"$f":"NumIt(D362)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1604","v":"gen.3"},{"$f":"'Saved Values'!D1604","v":"Remote access may be obtained by unauthorized"},{"$f":"'Saved Values'!F1604","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A363,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1605","v":"gen.3"},{"$f":"'Saved Values'!D1605","v":"Users lack visibility that unauthorized changes were made to the configuration"},{"$f":"'Saved Values'!F1605","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A364,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1618","v":"gen.4"},{"$f":"'Saved Values'!D1618","v":"System permits potentially harmful command sequences by allowing for disabling the disconnect capability to be modified"},{"$f":"'Saved Values'!F1618","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A365,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1619","v":"gen.4"},{"$f":"'Saved Values'!D1619","v":"Remote access may be obtained by unauthorized"},{"$f":"'Saved Values'!F1619","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A366,Table2[Column1],0))","v":0},{"$f":"NumIt(D366)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1620","v":"gen.4"},{"$f":"'Saved Values'!D1620","v":"Workforce may be unaware of recommended precautions to block social engineering attacks, such as spear"},{"$f":"'Saved Values'!F1620","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A367,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1621","v":"gen.4"},{"$f":"'Saved Values'!D1621","v":"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing"},{"$f":"'Saved Values'!F1621","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A368,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1632","v":"gen.5"},{"$f":"'Saved Values'!D1632","v":"Unnecessary access is permitted to critical functions such as commands to activate the deluge system and to make changes to the alerting"},{"$f":"'Saved Values'!F1632","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A369,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1633","v":"gen.5"},{"$f":"'Saved Values'!D1633","v":"System permits unauthorized changes to the system"},{"$f":"'Saved Values'!F1633","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A370,Table2[Column1],0))","v":0},{"$f":"NumIt(D370)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1634","v":"gen.5"},{"$f":"'Saved Values'!D1634","v":"Configuration changes are not verified for correctness to prevent and detect unauthorized setting"},{"$f":"'Saved Values'!F1634","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A371,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1646","v":"gen.6"},{"$f":"'Saved Values'!D1646","v":"Workforce not trained in proper procedures through allowing a USB drive with malware to be connected to a network"},{"$f":"'Saved Values'!F1646","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A372,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1647","v":"gen.6"},{"$f":"'Saved Values'!D1647","v":"System permits installation of"},{"$f":"'Saved Values'!F1647","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A373,Table2[Column1],0))","v":0},{"$f":"NumIt(D373)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1657","v":"gen.7"},{"$f":"'Saved Values'!D1657","v":"System permits installation of malware onto the firmware of the programmable logic"},{"$f":"'Saved Values'!F1657","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A374,Table2[Column1],0))","v":0},{"$f":"NumIt(D374)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1667","v":"gen.8"},{"$f":"'Saved Values'!D1667","v":"System may become overwhelmed by traffic flooding or malformed traffic through the DCS"},{"$f":"'Saved Values'!F1667","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A375,Table2[Column1],0))","v":0},{"$f":"NumIt(D375)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1668","v":"gen.8"},{"$f":"'Saved Values'!D1668","v":"System permits wireless access by unauthorized parties to the DCS"},{"$f":"'Saved Values'!F1668","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A376,Table2[Column1],0))","v":0},{"$f":"NumIt(D376)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1669","v":"gen.8"},{"$f":"'Saved Values'!D1669","v":"Unnecessary access is permitted to networking components by putting a diagnostic component on the DCS network with unnecessary visibility to other"},{"$f":"'Saved Values'!F1669","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A377,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1670","v":"gen.8"},{"$f":"'Saved Values'!D1670","v":"Network interfaces permit unnecessary traffic flows through the ôdual-homedö"},{"$f":"'Saved Values'!F1670","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A378,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1680","v":"gen.9"},{"$f":"'Saved Values'!D1680","v":"Workforce not trained in proper procedures to securing identifying information and avoiding spear phishing"},{"$f":"'Saved Values'!F1680","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A379,Table2[Column1],0))","v":0},{"$f":"NumIt(D379)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1681","v":"gen.9"},{"$f":"'Saved Values'!D1681","v":"Workforce may be unaware of recommended precautions to block social engineering attacks, such as"},{"$f":"'Saved Values'!F1681","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A380,Table2[Column1],0))","v":0},{"$f":"NumIt(D380)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1682","v":"gen.9"},{"$f":"'Saved Values'!D1682","v":"Remote access may be obtained by unauthorized"},{"$f":"'Saved Values'!F1682","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A381,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1683","v":"gen.9"},{"$f":"'Saved Values'!D1683","v":"System permits unauthorized changes through remote configuration"},{"$f":"'Saved Values'!F1683","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A382,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1692","v":"gen.10"},{"$f":"'Saved Values'!D1692","v":"Physical access may be obtained by unauthorized individuals to communications channel"},{"$f":"'Saved Values'!F1692","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A383,Table2[Column1],0))","v":0},{"$f":"NumIt(D383)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1693","v":"gen.10"},{"$f":"'Saved Values'!D1693","v":"Unnecessary access is permitted to the communications channel in that the lines are unnecessarily marked by the phone"},{"$f":"'Saved Values'!F1693","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A384,Table2[Column1],0))","v":0},{"$f":"NumIt(D384)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1694","v":"gen.10"},{"$f":"'Saved Values'!D1694","v":"System permits unauthorized changes to"},{"$f":"'Saved Values'!F1694","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A385,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1695","v":"gen.10"},{"$f":"'Saved Values'!D1695","v":"Publicly accessible and/or third party controlled links used in plant/system operating center communication"},{"$f":"'Saved Values'!F1695","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A386,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1705","v":"gen.11"},{"$f":"'Saved Values'!D1705","v":"System permits installation of malware on the HMI"},{"$f":"'Saved Values'!F1705","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A387,Table2[Column1],0))","v":0},{"$f":"NumIt(D387)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1706","v":"gen.11"},{"$f":"'Saved Values'!D1706","v":"Workforce may be unaware of recommended precautions regarding USB/laptop"},{"$f":"'Saved Values'!F1706","v":"Insufficiently Trained Personnel (6.2.1.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A388,Table2[Column1],0))","v":0},{"$f":"NumIt(D388)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1707","v":"gen.11"},{"$f":"'Saved Values'!D1707","v":"System may become overwhelmed by traffic flooding or malformed traffic because of an exploited"},{"$f":"'Saved Values'!F1707","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A389,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1708","v":"gen.11"},{"$f":"'Saved Values'!D1708","v":"Software patches are not checked regularly to ensure that they are current on the DCS operating"},{"$f":"'Saved Values'!F1708","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A390,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1716","v":"gen.12"},{"$f":"'Saved Values'!D1716","v":"Software patches are not checked regularly to ensure that they are current in the corporate chemical inventory process control"},{"$f":"'Saved Values'!F1716","v":"Inadequate Patch Management Process (6.2.2.4)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A391,Table2[Column1],0))","v":0},{"$f":"NumIt(D391)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1717","v":"gen.12"},{"$f":"'Saved Values'!D1717","v":"Unnecessary access is permitted to critical"},{"$f":"'Saved Values'!F1717","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A392,Table2[Column1],0))","v":0},{"$f":"NumIt(D392)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1724","v":"gen.13"},{"$f":"'Saved Values'!D1724","v":"Users and hardware/software entities are given access unnecessary for their roles. The M&D center has access to both plant operational and information informing strategic power market decision which may not be necessary for the core function of the M&D"},{"$f":"'Saved Values'!F1724","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A393,Table2[Column1],0))","v":0},{"$f":"NumIt(D393)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1725","v":"gen.13"},{"$f":"'Saved Values'!D1725","v":"Network interfaces permit unnecessary traffic flows to the"},{"$f":"'Saved Values'!F1725","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A394,Table2[Column1],0))","v":0},{"$f":"NumIt(D394)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1731","v":"gen.14"},{"$f":"'Saved Values'!D1731","v":"System permits potentially harmful command sequences to be transmitted by a threat"},{"$f":"'Saved Values'!F1731","v":"Business Logic Vulnerability (6.3.1.8)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A395,Table2[Column1],0))","v":0},{"$f":"NumIt(D395)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1732","v":"gen.14"},{"$f":"'Saved Values'!D1732","v":"Commands or other messages may be inserted on the network by unauthorized"},{"$f":"'Saved Values'!F1732","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A396,Table2[Column1],0))","v":0},{"$f":"NumIt(D396)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1733","v":"gen.14"},{"$f":"'Saved Values'!D1733","v":"Spoofed signal is either difficult or infeasible to distinguish from a legitimate"},{"$f":"'Saved Values'!F1733","v":"Use of Insecure Protocols (6.3.1.21)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A397,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1744","v":"gen.15"},{"$f":"'Saved Values'!D1744","v":"System may become overwhelmed by traffic flooding or malformed traffic through the DCS"},{"$f":"'Saved Values'!F1744","v":"Error Handling Vulnerability (6.3.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A398,Table2[Column1],0))","v":0},{"$f":"NumIt(D398)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1745","v":"gen.15"},{"$f":"'Saved Values'!D1745","v":"Insiders with high potential for criminal or malicious behavior have access to critical functions or sensitive"},{"$f":"'Saved Values'!F1745","v":"Insufficient Identity Validation or Background Checks (6.2.2.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A399,Table2[Column1],0))","v":0},{"$f":"NumIt(D399)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1746","v":"gen.15"},{"$f":"'Saved Values'!D1746","v":"Publicly accessible and/or third-party control links"},{"$f":"'Saved Values'!F1746","v":"Inadequate Network Segregation (6.5.1.2)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A400,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1747","v":"gen.15"},{"$f":"'Saved Values'!D1747","v":"Design permits unnecessary"},{"$f":"'Saved Values'!F1747","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A401,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1748","v":"gen.15"},{"$f":"'Saved Values'!D1748","v":"Presence of features or functions that may be misused by"},{"$f":"'Saved Values'!F1748","v":"API Abuse (6.3.2.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A402,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1749","v":"gen.15"},{"$f":"'Saved Values'!D1749","v":"System permits installation of"},{"$f":"'Saved Values'!F1749","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A403,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1750","v":"gen.15"},{"$f":"'Saved Values'!D1750","v":"Users lack visibility of threat activity, specifically unexpected access to network components or unusual traffic on the"},{"$f":"'Saved Values'!F1750","v":"Inadequate Anomaly Tracking (6.4.4.1)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A404,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1751","v":"gen.15"},{"$f":"'Saved Values'!D1751","v":"Users and hardware/software entities are given access unnecessary for their roles to perform duties that should be"},{"$f":"'Saved Values'!F1751","v":"Unnecessary System Access (6.2.2.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A405,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1752","v":"gen.15"},{"$f":"'Saved Values'!D1752","v":"Users lack visibility that unauthorized changes were made to the"},{"$f":"'Saved Values'!F1752","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A406,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1753","v":"gen.15"},{"$f":"'Saved Values'!D1753","v":"System permits unauthorized changes by allowing remote access for vendors to do monitoring and"},{"$f":"'Saved Values'!F1753","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A407,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
[{"$f":"'Saved Values'!A1771","v":"gen.16"},{"$f":"'Saved Values'!D1771","v":"System permits installation of"},{"$f":"'Saved Values'!F1771","v":"Inadequate Malware Protection (6.4.2.3)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A408,Table2[Column1],0))","v":0},{"$f":"NumIt(D408)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1772","v":"gen.16"},{"$f":"'Saved Values'!D1772","v":"Physical access may be obtained by unauthorized individuals to control system"},{"$f":"'Saved Values'!F1772","v":"Physical Access to the Device (6.5.1.6)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A409,Table2[Column1],0))","v":0},{"$f":"NumIt(D409)*1","v":{"$error":"#NAME?"}},0]
[{"$f":"'Saved Values'!A1773","v":"gen.16"},{"$f":"'Saved Values'!D1773","v":"System permits unauthorized changes to the"},{"$f":"'Saved Values'!F1773","v":"Inadequate Change and Configuration Management (6.2.2.5)"},{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH('Summary Data2'!A410,Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]

{"sheet":"Mitigations","index":18,"n_rows":697,"n_cols":6,"rows_kept":697,"cut":false,"hidden":true,"merged":[]}
["Failure Scenario","Common Mitigation","Mitigation Class","Utility Risk","Num UR","Utility"]
["ami.1","detect anomalous commands","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D2))*1","v":{"$error":"#NAME?"}},0]
["ami.1","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.1","validate data","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.1","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.1","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.1","require two-person rule","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.1","limit events","enforce limits",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.1","require two-person rule","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.1","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","validate data","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","detect abnormal output","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","perform financial audit","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","detect physical intrusion","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","lock workstations","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","harden platforms","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.2","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","isolate networks","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","restrict Internet access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","require video surveillance","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","restrict configuration access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.3","require strong passwords","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.4","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.4","require approved key management","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.4","require unique keys","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.4","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.4","perform financial audit","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.5","require unique keys","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.5","require approved key management","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.5","require secure key storage","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.6","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.6","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.6","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.6","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.7","conduct penetration testing","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.7","require secure remote firmware upgrade","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.7","require secure boot loader","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.7","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.7","detect abnormal functionality","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.7","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.7","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.8","prioritize alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.8","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.8","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.8","protect against replay","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.8","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.8","perform hardware acceptance testing","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.8","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.8","analyze anomalous events","analyze",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D66))*1","v":{"$error":"#NAME?"}},0]
["ami.9","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","re-evaluate scheduled disconnects","analyze",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","define policy","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","define procedures","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","restrict Internet access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","require VPNs","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","restrict Internet access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","isolate networks","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","authenticate devices","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.9","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","validate data","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","restrict Internet access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","require VPNs","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","require two-person rule","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.10","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.11","define procedures","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.11","continue normal operations","user decision",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.11","verify load","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.11","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.11","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.11","confirm action","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.11","confirm action","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.11","protect against replay","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","conduct penetration testing","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","detect unauthorized configuration changes","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","require strong passwords","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.12","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.13","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.13","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.13","require video surveillance","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.13","lock workstations","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.13","confirm action","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.13","lock workstations","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.13","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.13","require second-level authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.14","isolate networks","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.14","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.14","protect against replay","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.15","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.15","require video surveillance","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.15","detect physical intrusion","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.15","emphasize security management","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.15","define policy","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.16","require approved key management","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.17","verify mode","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.17","require fail-over","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.17","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D130))*1","v":{"$error":"#NAME?"}},0]
["ami.17","require strong passwords","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.17","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.17","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.18","restrict device access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.18","authenticate devices","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.19","require reliable external time source","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.19","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.19","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.19","verify time synchronization","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.19","protect against replay","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.20","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.20","require two-person rule","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.20","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.21","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.21","encrypt data at rest","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.21","track asset","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.21","require credential revocation","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.21","sanitize device","sanitize",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.22","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.22","restrict application access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.22","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.23","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.23","verify absence of hardcoded credentials","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.23","require password rule enforcement","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.24","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.24","define procedures","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.24","define procedures","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.24","perform security testing","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.25","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.25","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.25","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.25","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.25","define procedures","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.25","perform security testing","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.26","design for security","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.26","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.26","perform security testing","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.26","authenticate data source","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.27","design for security","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.27","design for security","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.27","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.28","require fail-safe rollback","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.28","test before installation","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.29","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.29","minimize private information","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.29","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.30","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.30","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.30","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.30","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.31","detect anomalous commands","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.31","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.31","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.32","require password rule enforcement","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.32","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.32","detect unauthorized configuration changes","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.32","verify personnel","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.32","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["ami.32","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.1","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.1","change default credentials","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.1","enforce limits in hardware","enforce limits",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.1","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.1","require approval","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D194))*1","v":{"$error":"#NAME?"}},0]
["der.2","verify network changes","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","authenticate devices","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","detect unauthorized configuration changes","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","require acknowledgment","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","require failure messages","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","require secure factory settings","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","limit remote modification","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.2","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.3","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.3","require on-going validation","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.3","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.3","test for malware","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.3","verify personnel","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.3","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.4","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","test before installation","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","test after installation","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","require assured maintenance","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","test after maintenance","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","protect audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","verify personnel","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","restrict access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.5","require authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.6","check message integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.6","protect against replay","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.6","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.6","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.7","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.7","check message integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.7","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.8","require read-only access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.8","require non-repudiation","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.9","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.9","validate data","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.9","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.9","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","restrict application access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","change default credentials","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","enforce restrictive firewall rules","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.10","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","enforce restrictive firewall rules","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","require application whitelisting","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.11","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.12","restrict application access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D258))*1","v":{"$error":"#NAME?"}},0]
["der.12","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.12","enforce changing default passwords","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.12","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.12","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.12","enforce restrictive firewall rules","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.12","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.12","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.12","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.13","require secure boot loader","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.13","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.13","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.13","check OS integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.13","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.13","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.13","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.14","limit events","enforce limits",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.14","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.14","authenticate data source","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.14","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.14","validate inputs","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.14","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.15","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.15","authenticate data source","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.15","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.15","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.16","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.16","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.16","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.16","validate inputs","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.16","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.16","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.17","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.17","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.17","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.17","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.17","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.18","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.18","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.18","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.18","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.18","check message integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.19","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.19","validate inputs","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.19","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.19","check message integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.20","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.20","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.20","check message integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.20","validate inputs","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.21","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.21","encrypt data at rest","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.21","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.21","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.21","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.21","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.23","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.23","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.23","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.23","require strong passwords","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.23","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.23","require non-repudiation","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.24","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.24","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.24","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D322))*1","v":{"$error":"#NAME?"}},0]
["der.24","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.24","isolate functions","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.25","restrict application access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.25","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.25","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.25","require strong passwords","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.25","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.26","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["der.26","confirm action","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.1","restrict network service access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.1","isolate functions","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.1","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.1","verify correct operation","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.1","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.1","test before installation","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.1","restrict access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.1","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","encrypt link layer","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","encrypt application layer","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","check message integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","detect unauthorized devices","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.2","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.3","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.3","restrict network service access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.3","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.3","detect unauthorized connections","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.3","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.3","enforce restrictive firewall rules","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.3","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.3","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","authenticate devices","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","restrict network service access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","change default credentials","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","encrypt data at rest","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","require approved key management","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.4","protect security configuration","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.5","require reconfiguration in test mode","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.5","require two-person rule","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.5","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.5","detect unauthorized configuration","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.5","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.5","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.6","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.6","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.6","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.6","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.6","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.6","test before installation","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","restrict application access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","require read-only access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","detect unauthorized connections","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","detect abnormal behavior","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D386))*1","v":{"$error":"#NAME?"}},0]
["wampac.7","check message integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","enforce restrictive firewall rules","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.7","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.8","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.8","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.8","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.8","restrict system access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.10","detect unauthorized configuration","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.10","restrict database access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.10","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.10","encrypt data at rest","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.10","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","verify correct operation","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","test before installation","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","require strong passwords","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.11","protect credentials","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.12","design for trust","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.12","validate signal","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["wampac.12","require fail-over","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.1","protect from overcharge","enforce limits",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.1","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.1","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.2","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.2","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.2","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.2","require circuit breaker","enforce limits",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","verify personnel","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","conduct code review","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","vulnerability scan before install","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","maintain anti-virus","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","isolate networks","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","isolate functions","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","detect abnormal functionality","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","analyze anomalous events","analyze",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.3","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.4","detect abnormal behavior","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.4","require password rule enforcement","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.4","encrypt data at rest","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.4","restrict database access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.4","restrict database access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.5","restrict occurrence","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.5","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.6","authenticate devices","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.6","require physical connection","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.6","prevent modification","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.7","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.8","authenticate devices","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.8","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.9","require PIN","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.9","require lockout","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.9","authenticate devices","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.9","verify EV owner","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.9","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.9","detect unauthorized use","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D450))*1","v":{"$error":"#NAME?"}},0]
["et.9","learn from others","learn",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.9","isolate functions","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.10","require PIN","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.10","require lockout","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.10","authenticate devices","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","require PIN","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","require lockout","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","require authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","restrict file access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","encrypt data at rest","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.11","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.12","require resiliency","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.12","learn from others","learn",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.12","choose own rate","user decision",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.13","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.13","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.13","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.13","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.13","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.13","restrict file access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.13","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.14","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.14","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.14","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.14","isolate functions","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.15","enforce hardware limits","enforce limits",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.15","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.15","require circuit breaker","enforce limits",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.15","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.15","restrict file access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.15","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.15","confirm action","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","restrict application access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","detect abnormal output","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","analyze anomalous events","analyze",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","maintain anti-virus","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","require unique keys","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","require circuit breaker","enforce limits",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["et.16","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","require safe mode","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","require acknowledgment","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","require acknowledgment","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","detect abnormal output","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.1","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.2","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.2","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.2","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D514))*1","v":{"$error":"#NAME?"}},0]
["dr.2","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.2","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.2","require unique keys","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.2","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","check message integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","protect against replay","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","validate data","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.3","detect abnormal output","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.4","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.4","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.4","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.4","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.4","require two-person rule","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.4","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.4","detect abnormal output","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.5","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.5","maintain anti-virus","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.5","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.5","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.5","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.6","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.6","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.6","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.6","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.6","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.6","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.6","require application whitelisting","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.7","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.7","maintain anti-virus","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.7","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.7","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.7","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.7","require message verification","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.7","cross check","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dr.7","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.1","require spread-spectrum radio","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.1","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.1","require safe mode","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.1","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.2","verify personnel","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.2","verify personnel","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.2","require safe mode","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.2","require redundancy","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","restrict device access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","check software execution integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","require video surveillance","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","restrict access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","maintain latest firmware","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","restrict port access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.3","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.4","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.4","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D578))*1","v":{"$error":"#NAME?"}},0]
["dgm.4","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.4","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.4","maintain anti-virus","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.4","require application whitelisting","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.4","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.4","require VPNs","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","maintain patches","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","detect abnormal behavior","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","check software file integrity","check integrity",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","maintain anti-virus","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","require application whitelisting","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","require backup","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.5","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.6","authenticate messages","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.6","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.6","restrict communication access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.6","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.7","profile equipment","profile",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.7","design for trust","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.7","restrict network access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.7","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.7","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","require spares","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","verify personnel","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","conduct code review","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","vulnerability scan before install","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","design for trust","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","restrict access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","confirm action","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.8","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.9","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.9","define policy","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.9","prioritize recovery activities","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.9","review recovery response","analyze",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.9","verify correct operation","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.10","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.10","require synchronous functions","ensure availability",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.10","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.10","require single sign-on","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.10","enforce least privilege","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.10","verify personnel","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","require strong passwords","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","define policy","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","require two-person rule","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","isolate networks","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.11","confirm action","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.12","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.12","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.12","design for trust","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.12","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.12","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$f":"(NumIt(D642))*1","v":{"$error":"#NAME?"}},0]
["dgm.13","require credential revocation","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.13","generate alarms","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.13","perform audit","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.14","authenticate users","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.14","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.14","design for trust","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","define procedures","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","require strong passwords","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","define policy","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","create audit logs","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","restrict remote access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","require two-person rule","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","implement configuration management","track",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","isolate networks","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.15","confirm action","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","require approved key management","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","detect unusual patterns","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","detect unauthorized access","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","require authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","encrypt communication paths","encrypt",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","require multi-factor authentication","authenticate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","require tamper detection and response","secure operations",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["dgm.16","restrict physical access","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.1","require separation of duty","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.1","use Role-Based Access Control","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.1","detect abnormal behavior","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.1","define procedures","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.1","define procedures","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.2","isolate networks","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.2","generate alerts","alert",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.2","isolate networks","isolate",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.2","enforce restrictive firewall rules","control access",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.2","require intrusion detection and prevention","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.2","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.2","define incident response plan","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.2","define contingency plan","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.3","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.3","configure for least functionality","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.3","verify settings","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.3","test before installation","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.3","vulnerability scan before install","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.3","require periodic walk-downs","verify",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.3","define policy","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.3","train personnel","train",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.4","define SLA","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.4","define policy","plan",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.4","require approved cryptographic algorithms","secure design and implementation",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.4","perform audit","audit",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.4","detect abnormal behavior","detect",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]
["generic.4","test before installation","test",{"$f":"INDEX(Table2[Risk Rating\n(H,M,L)],MATCH(Table5[[#This Row],[Failure Scenario]],Table2[Column1],0))","v":0},{"$error":"#NAME?"},0]