A Risk Assessment of Piql Services by FFI

For the piqlFilms which are damaged beyond repair by the flying concrete, availability is irrevocably compromised. For the piqlFilms which survive the colder temperatures, availability is only temporarily compromised while the Films are conditioned and prepared for safe handling again.

The confidentiality of all the piqlFilms remains intact.

All the piqlFilms in the vault were, however, left without proper security regarding access control when the outer walls protecting the piqlVault were blasted away and could hypothetically have been accessed by others at this time. Other circumstances (protected by the unstable infrastructure of the building) made sure no unwelcome persons came near the piqlFilms.

Confidentiality

Immunity (against attacks on the above mentioned)

The Piql Preservation Services is not immune to attacks against integrity or availability.

Recommendations

As the risk in this scenario does not represent a direct targeting of the Piql Preservation Services, and it was rather collateral damage in another attack, the only advice one can give is ―Beware of your surroundings‖. All Piql partners must assess their surroundings and make a judgement call on the security level needed. Neither should they get complacent. When it comes to the specific mitigation against explosives, the recommendation from Piql AS to use an oxygen reduction suppression solution as the fire protection mechanism in the piqlVault is regarded as the best one. In this scenario, the fire did not reach the piqlVault, but when explosives are involved, it very well could have.

Recommended protective measures

References

Relevant literature

154

FFI-RAPPORT 16/00707