Skip to content

DS0040 Operational Databases

Operational databases contain information about the status of the operational process and associated devices, including any measurements, events, history, or alarms that have occurred

Item Value
ID DS0040
Collection Layers Host
Version 1.0
Created 11 May 2022
Last Modified 24 March 2023

Data Components

Device Alarm

This includes alarms associated with unexpected device functions, such as shutdowns, restarts, failures, or configuration changes

Domain ID Name
ics T0800 Activate Firmware Update Mode
ics T0878 Alarm Suppression
ics T0892 Change Credential
ics T0858 Change Operating Mode
ics T0816 Device Restart/Shutdown
ics T0821 Modify Controller Tasking
ics T0836 Modify Parameter
ics T0889 Modify Program
ics T0839 Module Firmware
ics T0843 Program Download
ics T0848 Rogue Master
ics T0856 Spoof Reporting Message
ics T0857 System Firmware

Process History/Live Data

This includes any data stores that maintain historical or real-time events and telemetry recorded from various sensors or devices

Domain ID Name
ics T0878 Alarm Suppression
ics T0803 Block Command Message
ics T0804 Block Reporting Message
ics T0805 Block Serial COM
ics T0806 Brute Force I/O
ics T0814 Denial of Service
ics T0838 Modify Alarm Settings
ics T0855 Unauthorized Command Message

Process/Event Alarm

This includes a list of any process alarms or alerts produced to indicate unusual or concerning activity within the operational process (e.g., increased temperature/pressure)

Domain ID Name
ics T0878 Alarm Suppression
ics T0803 Block Command Message
ics T0804 Block Reporting Message
ics T0805 Block Serial COM
ics T0855 Unauthorized Command Message