The ways power, water, and pipeline systems get fooled, in plain language, and what DOR does about each one.
Generation, transmission, and distribution, from the control room to the substation to the solar field.
CI-P.1
Operator screens can be made to show normal values while equipment is driven toward failure.
DOR proves each reading came from the device it names, unchanged, so an altered display is caught before anyone acts on it.
CI-P.2
Anyone who reaches the control network can send commands to open breakers, change setpoints, or shut down units.
DOR holds any command it cannot prove came from an authorized source before it reaches the equipment.
CI-P.3
Protection relays and grid measurements set their clocks by GPS, and a radio signal can shift that time without touching the network.
DOR checks time where it enters and holds a source that fails, so protection acts on the true time.
CI-P.4
Wind, solar, and battery sites are controlled over cellular and radio links.
DOR verifies every command and setpoint itself, no matter which link carried it.
CI-P.5
A controller or meter can be replaced with a device that copies its identity.
DOR confirms the device is the registered one while it operates.
CI-P.6
Hardware can arrive with parts or communication paths that were never documented.
DOR watches equipment while it runs, so behavior outside what was approved is flagged and recorded.
Treatment plants, towers, and lift stations, most of them run by small teams.
CI-W.1
Attackers can download a plant controller's program, change it, and load it back.
DOR checks control programs before they load and holds any that do not match what was approved.
CI-W.2
Alarm and shutdown logic can be switched off quietly, so a problem grows with no warning.
DOR confirms the logic running is the approved logic and records any change, who made it, and why.
CI-W.3
A false pressure, flow, or chemical reading can hide a problem or start a needless shutdown.
DOR proves each reading is unaltered from the sensor to the screen.
CI-W.4
Towers and lift stations are often run over cellular links that attackers can reach.
DOR verifies each command at the site where it arrives.
CI-W.5
Many protections stop working when the service they check with cannot be reached.
DOR depends on no outside service, so it keeps working on small and isolated systems.
Wells, pipelines, and terminals controlled across hundreds of miles.
CI-G.1
Commands to open, close, stop, or override can cause spills, fires, or injuries.
DOR holds any command it cannot prove before the equipment acts on it.
CI-G.2
A valid command can be recorded and sent again later, or held back until conditions change.
DOR knows what it has already received and when each command was sent, so a repeated or stale command fails.
CI-G.3
Pressure and flow readings can be changed on the way to the control room, hiding a leak or forcing a shutdown.
DOR proves each reading is unaltered.
CI-G.4
Meter and custody transfer records can be changed or backdated.
DOR locks in what was measured and when, so a record can be defended.
The ways in that every operator shares.
CI-X.1
Vendor and integrator logins can be used for more than the job they were granted.
DOR holds actions outside what was approved and requires a name and a reason for each one.
CI-X.2
Engineering laptops and USB drives can carry malware straight to controllers.
DOR accepts only registered devices and records every attempt to use another.
CI-X.3
Updates and firmware can carry harmful code that passes ordinary checks.
DOR checks them before they install and keeps checking what runs.
CI-X.4
After a break-in, logs are often edited or deleted.
DOR's record of what your systems received and did cannot be edited or deleted.
CI-X.5
An urgent call or message from someone posing as a supervisor, vendor, or agency can push an operator to act.
DOR confirms the sender before the request is acted on, including a cloned voice on a live call.
No entries match. Try another word, or choose All.
Critical Infrastructure
Bring your control system diagram, or just the questions keeping your operators up at night. DOR will show you exactly where it fits.
