DS0040 Operational Databases
Operational databases contain information about the status of the operational process and associated devices, including any measurements, events, history, or alarms that have occurred
| Item | Value |
|---|---|
| ID | DS0040 |
| Collection Layers | Host |
| Version | 1.0 |
| Created | 11 May 2022 |
| Last Modified | 24 March 2023 |
Data Components
Device Alarm
This includes alarms associated with unexpected device functions, such as shutdowns, restarts, failures, or configuration changes
| Domain | ID | Name |
|---|---|---|
| ics | T0800 | Activate Firmware Update Mode |
| ics | T0878 | Alarm Suppression |
| ics | T0892 | Change Credential |
| ics | T0858 | Change Operating Mode |
| ics | T0816 | Device Restart/Shutdown |
| ics | T0821 | Modify Controller Tasking |
| ics | T0836 | Modify Parameter |
| ics | T0889 | Modify Program |
| ics | T0839 | Module Firmware |
| ics | T0843 | Program Download |
| ics | T0848 | Rogue Master |
| ics | T0856 | Spoof Reporting Message |
| ics | T0857 | System Firmware |
Process History/Live Data
This includes any data stores that maintain historical or real-time events and telemetry recorded from various sensors or devices
| Domain | ID | Name |
|---|---|---|
| ics | T0878 | Alarm Suppression |
| ics | T0803 | Block Command Message |
| ics | T0804 | Block Reporting Message |
| ics | T0805 | Block Serial COM |
| ics | T0806 | Brute Force I/O |
| ics | T0814 | Denial of Service |
| ics | T0838 | Modify Alarm Settings |
| ics | T0855 | Unauthorized Command Message |
Process/Event Alarm
This includes a list of any process alarms or alerts produced to indicate unusual or concerning activity within the operational process (e.g., increased temperature/pressure)
| Domain | ID | Name |
|---|---|---|
| ics | T0878 | Alarm Suppression |
| ics | T0803 | Block Command Message |
| ics | T0804 | Block Reporting Message |
| ics | T0805 | Block Serial COM |
| ics | T0855 | Unauthorized Command Message |