Chemical Sector Report - PDF

The Repository for Industrial Security Incidents (RISI) records incidents of a cyber security nature that directly affect industrial Supervisory Control and Data Acquisition (SCADA) and process control systems. It is the largest known collection of incidents of this type. At the end of 2009, the database contained a total of 175 records.

Each of the incidents has been thoroughly investigated and sensitive information has been removed to protect the confidentiality of the reporter. Incidents are indexed and categorized according to a long list of criteria and the data is analyzed. Events that cannot be confirmed are excluded from the analysis.

Issued annually, a RISI Sector Report provides in-depth analysis of all of the incidents reported for a specific industry sector. It studies where and when incidents occurred, the types of incidents and the people who executed them, the methods and techniques they used to gain entry, the results they achieved versus the results they were attempting, and finally the financial and operational impact on the “victims”.

The report includes case studies for all of the incidents reported to date for the industry sector. Case studies illustrate the most common incident types including descriptions of what happened, the impact of the incident, and what the company did to avoid future incidents. In addition, RISI security experts provide recommendations of mitigation strategies to avoid similar incidents in the future.
The report concludes with an interpretation of the results analyzing the rate at which incidents have occurred, the types and various pathways, the impact of incidents to date and finally a look into the future.