"A risk assessment of the Piql Services" by FFI

The scenario takes place during the production of the piqlFilm. The setting is therefore the production site, which is situated in a standard office building. The Piql computer, the piqlWriter and the piqlReader are all located in the same large production room, whereas the processing room and its equipment are located elsewhere. The productions site is regulated through ventilation to uphold the ISO standards governing levels of humidity and temperature. We assume that all safety measures required by Piql AS to be in place in the storage facility also apply in the production site. See section 5.5.1 for details.

Production site description

Local safety measures

Local security measures

All security measures required by Piql AS are in place.

Consequences

The physical infrastructure of the building and the storage room is not affected during the incident.

Outer building

The structural integrity of the production site is not affected by the incident. However, the Piql IT system, as part of the Piql Preservation Services, is breached. State X hackers are able, with the full weight and resources of state X behind them, to breach the security software of the Front-End code and gain access into the Piql computer system. Once there, the hackers place malware which utilises the interconnection between the Piql computer and the Piql I/O computer to completely connect the two. As the hackers now have free access to both computers’ CPU they can alter the client data undetected because they also change the corresponding checksum on both CPUs. Even though the Piql I/O computer does what it is supposed to and checks the integrity of the data against the designated checksum, it can find no faults and confirms the data ready for writing on the piqlFilm.

Production site

Box

The piqlBox is not affected during the incident.

The client information which is being prepared for writing onto the piqlFilm is accessed without authorised permission to the detriment of the data owner. It is altered to exclude certain important pieces of information. The complete information is thus prevented from being printed.

Film

Power/energy supply

The power supply is not affected during the incident.

Divergence from

The storage conditions of the Piql Preservation Services are not affected during the incident.

ISO standard

143

FFI-RAPPORT 16/00707