{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Network & Communications Security","Business Continuity & Disaster Recovery"],"inherent_rating":"high","taxonomy":["nist-800-30-threat-event","iso-27005-threat","basel-operational-risk","coso-erm-risk"]},"canonicalUrl":"https://assureswarm.com/controls/?v=1&node=risk%3Anet-denial-of-service","description":"Simple, targeted, or distributed denial-of-service attacks, wireless jamming, and saturation of systems or networks (adversarial or excessive legitimate load) make resources unavailable to intended users.","details":{"category":"cyber_security","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"net-denial-of-service","taxonomies":["nist-800-30-threat-event","iso-27005-threat","basel-operational-risk","coso-erm-risk"],"treatment":"mitigate"},"id":"risk:net-denial-of-service","mapUrl":"https://assureswarm.com/controls/?v=1&node=risk%3Anet-denial-of-service","sourceIds":["cobit-2019","dora","nist-800-53","nist-csf-2","soc2"],"sourceUrl":null,"title":"Denial-of-service and system saturation","type":"risk"},"relationships":[{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:2016d9d0b97b703894782f376e98d4c833a6f1c27c1ca110289146b06ec98c01","properties":{"rationale":"Distributing processing/storage removes single choke points, reducing the impact of a denial-of-service attack on any one node.","strength":"related"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-net-09-6777e6ac.json","sourceId":"uc:UC-NET-09","targetDetailPath":"/controls/data/v1/records/risk-net-denial-of-service-934ccd7f.json","targetId":"risk:net-denial-of-service","type":"mitigates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:e2764825f1902b116d8bd2e64b2318cab5bd455d75ecc81e20b378e063f8c432","properties":{"rationale":"priority-based allocation and quotas protect shared-resource availability under saturation","strength":"related"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-bcdr-05-f73361f2.json","sourceId":"uc:UC-BCDR-05","targetDetailPath":"/controls/data/v1/records/risk-net-denial-of-service-934ccd7f.json","targetId":"risk:net-denial-of-service","type":"mitigates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:eafcf60fbd5b37bd73828722db4dd5943e6c08e63876f0f46d13d9664a3604fb","properties":{"rationale":"Capacity management, rate limiting, filtering, and upstream DoS mitigation are the operative defense against denial-of-service saturation.","strength":"primary"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-net-08-e0d8837a.json","sourceId":"uc:UC-NET-08","targetDetailPath":"/controls/data/v1/records/risk-net-denial-of-service-934ccd7f.json","targetId":"risk:net-denial-of-service","type":"mitigates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:fb1605fa71e8c698225f13730978a2d1108c3677adb1265b2e61f81525255a57","properties":{"rationale":"incident detection and escalation mitigate an ongoing denial-of-service event","strength":"related"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-bcdr-06-c505e5bd.json","sourceId":"uc:UC-BCDR-06","targetDetailPath":"/controls/data/v1/records/risk-net-denial-of-service-934ccd7f.json","targetId":"risk:net-denial-of-service","type":"mitigates"}],"schemaVersion":1}