FAIR Data Observatory

(Steinbeis EU-VRi Working Version)

 Go back


 Indicators

WP2
Resilience Indicators

(As of 2023, a subset of the 5,000+ resilience indicators from the SmartResilience project have been imported)

See more...

Records: 3902
NameReference Name 
(BRAVO) Is there a reporting procedure in place after an incident?Jovanovic. A., et. al. (2017). T5.1: Report from the
are all incidents reported and investigated?Swedish Water and Wastewater Association. Blåa lista
are all incidents reported and investigated?Swedish Water and Wastewater Association. Blåa lista
Are all incidents reported and investigated?Commission Implementing Regulation (EU) 2015/1998 of
Are Loss of utilities (electricity, inertization, water, refrigeration, air, heat, steam, transfer fluids, ventilation) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are Loss of utilities (electricity, inertization, water, refrigeration, air, heat, steam, transfer fluids, ventilation) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Average marine acidity (pH)Annex of the resolution adopted by the General Assem
Conflict-related deathsAnnex of the resolution adopted by the General Assem
Direct economic loss in relation to global GDPAnnex of the resolution adopted by the General Assem
Do the sensors signal unwanted presence or require human supervision? 
government expenditures Annex of the resolution adopted by the General Assem
Health worker density and distributionAnnex of the resolution adopted by the General Assem
Hepatitis BAnnex of the resolution adopted by the General Assem
Is there detailed incident notification, investigation and reporting procedure in place?Jovanovic. A., et. al. (2017). T5.1: Report from the
Material footprintAnnex of the resolution adopted by the General Assem
Mountain Green Cover IndexAnnex of the resolution adopted by the General Assem
National disaster risk reduction strategiesAnnex of the resolution adopted by the General Assem
National disaster risk reduction strategiesAnnex of the resolution adopted by the General Assem
National disaster risk reduction strategiesAnnex of the resolution adopted by the General Assem
National disaster risk reduction strategiesAnnex of the resolution adopted by the General Assem
National recycling rate, tons of material recycledAnnex of the resolution adopted by the General Assem
Number of commercial bankAnnex of the resolution adopted by the General Assem
Number of medical doctors per 100,000 peopleDeep Knowledge Group (2020) COVID-19 ranking framewo
Operational arrangement for water cooperationAnnex of the resolution adopted by the General Assem
Participation rate in organized learningAnnex of the resolution adopted by the General Assem
Passenger and freight volumesAnnex of the resolution adopted by the General Assem
Prevalence of moderate or severe food insecurity in the population Annex of the resolution adopted by the General Asse
Prevalence of stunting among children under 5 years of ageAnnex of the resolution adopted by the General Assem
Proportion of domestic budget funded by domestic taxesAnnex of the resolution adopted by the General Assem
Proportion of youth and adults with ICT skillsAnnex of the resolution adopted by the General Assem
Research and development expenditure as a proportion of GDPAnnex of the resolution adopted by the General Assem
Suicide mortality rateAnnex of the resolution adopted by the General Assem
Total number of confirmed COVID-19 cases per 100.000 populationDeep Knowledge Group (2020) COVID-19 ranking framewo
Unemployment rateAnnex of the resolution adopted by the General Assem
% Emergency exercises completed acording to the scheduleCCPS (2007). Guidelines for risk based process safet
% for a new employees and emergency response training providedCCPS (2007). Guidelines for risk based process safet
% of the river shore equipped with a stock defences 
% operating procedures reviewed and updated versus planOGP Process safety - Recommended Practice on Key Per
% Plant changes suitably risk assessed and approved before work startedOGP Process safety (2011). Recommended Practice on K
% relevant personnel presented to a S&S trainging versus planOGP Process safety - Recommended Practice on Key Per
% relevant personnel trained on S&S prior to commencing this workOGP Process safety - Recommended Practice on Key Per
%MoCs for which the drawing or procedures where not updatedOGP Process safety - Recommended Practice on Key Per
(BRAVO) How many safety education and awareness trainings are done yearly?Jovanovic. A., et. al. (2017). T5.1: Report from the
(D2.1) Are critical fuel sources connected to the SIPS?D2.1, Chapter 8
(D2.1) Business or Service InterruptionD2.1 Report on asset categorisation, cyber / physica
(D2.1) Contribution to the EconomyD2.1 Report on asset categorisation, cyber / physica
(D2.1) Could an EMP event affect nearby infrastructures?D2.1, Chapter 8
(D2.1) Could an explosion event affect nearby infrastructures?D2.1, Chapter 8
(D2.1) CriticalityD2.1 Report on asset categorisation, cyber / physica
(D2.1) Economic impactD2.1 Report on asset categorisation, cyber / physica
(D2.1) EnvironmentD2.1 Report on asset categorisation, cyber / physica
(D2.1) How accessible is the spare part inventory?D2.1, Chapter 8
(D2.1) How effective are ballistic protection measures?D2.1, Chapter 8
(D2.1) How effective are intruder detection measures?D2.1, Chapter 8
(D2.1) How effective are measures that limit hazmat spread?D2.1, Chapter 8
(D2.1) How effective are the physical barriers?D2.1, Chapter 8
(D2.1) How effective are weapon detection measures?D2.1, Chapter 8
(D2.1) How exposed is the nature of the SIPS?D2.1, Chapter 8
(D2.1) How long are recovery spare parts lead times?D2.1, Chapter 8
(D2.1) How well are response personnel trained and equipped?D2.1, Chapter 8
(D2.1) How well are the BCP, DRP and/or restoration plan implemented?D2.1, Chapter 8
(D2.1) InterdependenciesD2.1 Report on asset categorisation, cyber / physica
(D2.1) Is the threat around physical attacks increasing or evolving?D2.1, Chapter 8
(D2.1) People exposedD2.1 Report on asset categorisation, cyber / physica
(D2.1) Susceptibility to cyber attackD2.1 Report on asset categorisation, cyber / physica
(D2.1) Susceptibility to Natech related accidentsD2.1 Report on asset categorisation, cyber / physica
(D2.1) Susceptibility to physical attackD2.1 Report on asset categorisation, cyber / physica
(D2.1) Susceptibility to Technology related accidentsD2.1 Report on asset categorisation, cyber / physica
(DELTA) Emergency plan defined?American Petroleum Institute RP 581 (2000). (3rd ed.
(ECHO) Frequency of communication about the incidents to the external sitesCompany's standard SD-09.02.05 Emergency response an
(ECHO) The existence of a register of accidents/incidentsCompany's standard SD-09.01.15 HSE incident manageme
(ECHO) Total number of SIA activiations reported by operationsCompany's Standard UP-03.05.04-049 Management of ala
(EPRI) Indicator 
(Eskom) Budget for Liabilities and RisksR-Tech
(Eskom) Financial RiskR-Tech
(Eskom) iRiS asset scoreR-Tech
(Eskom) MSEQ ScoreR-Tech
(Eskom) PSMS ScoreR-Tech
(Eskom) Training and Quality FactorR-Tech
(Global) Catastrophic potentialCWA16649
(NESA) Dummy indicatorNESA, 2018
(PAP Serbia) technical capacity of the gas infrastructure to satisfy demandREGULATION (EU) No 994/2010 OF THE EUROPEAN PARLIAME
(PSPI T1+2) Rate of Process Safety Events (PSEs)?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Average Overtime?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Average Scoring of Safety Induction Questionnaires?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Downtime caused by Unplanned Shut-downs?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Extent of Safe Operating Limit Excursion?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) How often is Performance Data reviewed?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Mean Time between Alarm Activation and Operator Response?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Mean Time to Repair of Safety Systems?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Deficiencies in MOC relevant to Safety Systems?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Demands on Safety Systems?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Errors in Executing Maintenance Procedures?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Errors in Executing Operational Procedures?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Failures of Process Control System?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Failures of Safety Systems?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Inspections of Primary Containment Equipment?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Near-miss Loss of Containment from Primary Equipment?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of O&M Personnel meeting the FASC Criteria?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Physical Damage Incidents?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Preventive Maintenance Tasks completed on time?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Proof Tests of Safety Systems?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Number of Safety Systems Performing within Specification?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Planned Preventive Maintenance of Safety Systems?Pasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) Primary Containment Equipment Operated Outside Acceptable LimitPasquale Fanelli (2014) Process Safety Performance I
(PSPI T3+4) To what extent is Performance Data is managed?Pasquale Fanelli (2014) Process Safety Performance I
[administrative, operational] activities [procedurally, technically] enforced by 2-person controls / all [administrative, operational] activitiesEU-VRi
“Aftershocks”.Steinbeis EU-Vri
“Risk aversion”.Steinbeis EU-Vri
“The whole country”, leading to “global shocks”.Steinbeis EU-Vri
“Unknown”, no historical data, “black swans”.Steinbeis EU-Vri
“Winter, night”, “high infrastructure density”Steinbeis EU-Vri
„Е1“ ОПАСНОСТ ПО ВОДЕНУ ЖИВОТНУ  
„Е2“ ОПАСНОСТ ПО ВОДЕНУ ЖИВОТНУ  
„Н1“ АКУТНА ТОКСИЧНОСТ 
„Н2“ АКУТНА ТОКСИЧНОСТ,  
„Н3“ СПЕЦИФИЧНА ТОКСИЧНОСТ ЗА ЦИЉНИ ОРГАН  
„О1“ Супстанце или смеше којима је додељено додатно обавештење о опасности  
„О2“ Супстанце или смеше које у контакту са водом ослобађају запаљиве гасове 
„О3“ Супстанце или смеше којима је додељено додатно обавештење о опасности EUH 029 
„Р1а“ ЕКСПЛОЗИВИ 
„Р1б“ ЕКСПЛОЗИВИ 
„Р2“ ЗАПАЉИВИ ГАСОВИ 
„Р3а“ ЗАПАЉИВИ АЕРОСОЛИ 
„Р3б“ ЗАПАЉИВИ АЕРОСОЛИ 
„Р4“ ОКСИДУЈУЋИ ГАСОВИ ОКСИДУЈУЋИ ГАСОВИ 
„Р5а“ ЗАПАЉИВЕ ТЕЧНОСТИ  
„Р5б“ ЗАПАЉИВЕ ТЕЧНОСТИ 
„Р5с“ ЗАПАЉИВЕ ТЕЧНОСТИ 
„Р6б“ САМОРЕАКТИВНЕ СУПСТАНЦЕ И СМЕШЕ И ОРГАНСКИ ПЕРОКСИДИ  
„Р7“ САМОЗАПАЉИВЕ ТЕЧНОСТИ И ЧВРСТЕ СУПСТАНЦЕ  
„Р8“ ОКСИДУЈУЋЕ ТЕЧНОСТИ И ЧВРСТЕ СУПСТАНЦЕ 
„Рба“ САМОРЕАКТИВНЕ СУПСТАНЦЕ И СМЕШЕ И ОРГАНСКИ ПЕРОКСИДИ  
15. Protect, restore and promote the sustainable use of terrestrial ecosystemsAnnex of the resolution adopted by the General Assem
2.End hunger, achieve food security and improved nutrition and agricultureAnnex of the resolution adopted by the General Assem
51C Are regional plans annually reviewed?SmartResilience. (2017). D5.1 Report on the results
51C Are regional plans annually reviewed?SmartResilience. (2017). D5.1 Report on the results
51C Are the plans reviewed after experienced scenarios?SmartResilience. (2017). D5.1 Report on the results
51C Are the plans reviewed after experienced scenarios?SmartResilience. (2017). D5.1 Report on the results
51C Are there any external reviewers of the emergency plan?SmartResilience. (2017). D5.1 Report on the results
51C Are there any external reviewers of the emergency plan?SmartResilience. (2017). D5.1 Report on the results
51C Are there any external reviewers of the transport and evacuation plans?SmartResilience. (2017). D5.1 Report on the results
51C Are there any external reviewers of the transport and evacuation plans?SmartResilience. (2017). D5.1 Report on the results
51C Does a regional plan exist?SmartResilience. (2017). D5.1 Report on the results
51C Does a regional plan exist?SmartResilience. (2017). D5.1 Report on the results
51C Does the quality of the followed plans correlate with training?SmartResilience. (2017). D5.1 Report on the results
51C Does the quality of the followed plans correlate with training?SmartResilience. (2017). D5.1 Report on the results
51C Does the quality of the regional plan correlates with training?SmartResilience. (2017). D5.1 Report on the results
51C Does the quality of the regional plan correlates with training?SmartResilience. (2017). D5.1 Report on the results
51C How much time did it take to update key performance indicators?SmartResilience. (2017). D5.1 Report on the results
51C How much time did it take to update key performance indicators?SmartResilience. (2017). D5.1 Report on the results
51C How much time does it take to get ambulances to the affected areaSmartResilience. (2017). D5.1 Report on the results
51C How much time does it take to get ambulances to the affected areaSmartResilience. (2017). D5.1 Report on the results
51C How much time does it take to locate the medical response team?SmartResilience. (2017). D5.1 Report on the results
51C How much time does it take to locate the medical response team?SmartResilience. (2017). D5.1 Report on the results
51C How well is the critical infrastructure maintained?SmartResilience. (2017). D5.1 Report on the results
51C How well is the critical infrastructure maintained?SmartResilience. (2017). D5.1 Report on the results
51C Is it defined who is in charge of the media communication?SmartResilience. (2017). D5.1 Report on the results
51C Is it defined who is in charge of the media communication?SmartResilience. (2017). D5.1 Report on the results
51C Is there a plan for patients triage according to their urgency level?SmartResilience. (2017). D5.1 Report on the results
51C Is there a plan for patients triage according to their urgency level?SmartResilience. (2017). D5.1 Report on the results
51C Is there a syndromic surveillance system in place?SmartResilience. (2017). D5.1 Report on the results
51C Is there a syndromic surveillance system in place?SmartResilience. (2017). D5.1 Report on the results
51C Is there an emergency medical response team in place?SmartResilience. (2017). D5.1 Report on the results
51C Is there an emergency medical response team in place?SmartResilience. (2017). D5.1 Report on the results
51C Is there information about the public health procedures?SmartResilience. (2017). D5.1 Report on the results
51C Is there information about the public health procedures?SmartResilience. (2017). D5.1 Report on the results
51C Is training conducted to further improve staff competences?SmartResilience. (2017). D5.1 Report on the results
51C Is training conducted to further improve staff competences?SmartResilience. (2017). D5.1 Report on the results
51C Number of ambulancesSmartResilience. (2017). D5.1 Report on the results
51C Number of ambulancesSmartResilience. (2017). D5.1 Report on the results
51C Number of certified assessorsSmartResilience. (2017). D5.1 Report on the results
51C Number of certified assessorsSmartResilience. (2017). D5.1 Report on the results
51C Number of initiatives organized in collaboration after the eventSmartResilience. (2017). D5.1 Report on the results
51C Number of initiatives organized in collaboration after the eventSmartResilience. (2017). D5.1 Report on the results
51C Number of new partners after the event occurredSmartResilience. (2017). D5.1 Report on the results
51C Number of new partners after the event occurredSmartResilience. (2017). D5.1 Report on the results
51C Number of patients assessed in an affected areaSmartResilience. (2017). D5.1 Report on the results
51C Number of patients assessed in an affected areaSmartResilience. (2017). D5.1 Report on the results
51C Number of patients connected to the guidance systemSmartResilience. (2017). D5.1 Report on the results
51C Number of patients connected to the guidance systemSmartResilience. (2017). D5.1 Report on the results
51C Number of patients that need to be transported to another hospitalSmartResilience. (2017). D5.1 Report on the results
51C Number of patients that need to be transported to another hospitalSmartResilience. (2017). D5.1 Report on the results
51C Number of patients that were assessed in triageSmartResilience. (2017). D5.1 Report on the results
51C Number of patients that were assessed in triageSmartResilience. (2017). D5.1 Report on the results
51C Number of reported major eventsSmartResilience. (2017). D5.1 Report on the results
51C Number of reported major eventsSmartResilience. (2017). D5.1 Report on the results
51C Number of staff available to treat patients SmartResilience. (2017). D5.1 Report on the results
51C Number of staff available to treat patients SmartResilience. (2017). D5.1 Report on the results
51C Number of taken training exercises SmartResilience. (2017). D5.1 Report on the results
51C Number of taken training exercises SmartResilience. (2017). D5.1 Report on the results
51C Percentage of completed courses of dedicated personnelSmartResilience. (2017). D5.1 Report on the results
51C Percentage of completed courses of dedicated personnelSmartResilience. (2017). D5.1 Report on the results
51C Percentage of electronically reporting (including handheld devices)SmartResilience. (2017). D5.1 Report on the results
51C Percentage of electronically reporting (including handheld devices)SmartResilience. (2017). D5.1 Report on the results
51C Percentage of insular areas that prepared after-action reportsSmartResilience. (2017). D5.1 Report on the results
51C Percentage of insular areas that prepared after-action reportsSmartResilience. (2017). D5.1 Report on the results
51C Percentage of localities that prepared after-action reportsSmartResilience. (2017). D5.1 Report on the results
51C Percentage of localities that prepared after-action reportsSmartResilience. (2017). D5.1 Report on the results
51C Percentage of states that prepared after-action reportsSmartResilience. (2017). D5.1 Report on the results
51C Percentage of states that prepared after-action reportsSmartResilience. (2017). D5.1 Report on the results
51C Population density in potential affected areasSmartResilience. (2017). D5.1 Report on the results
51C Population density in potential affected areasSmartResilience. (2017). D5.1 Report on the results
51C Were any corrective actions taken after the event occurred?SmartResilience. (2017). D5.1 Report on the results
51C Were any corrective actions taken after the event occurred?SmartResilience. (2017). D5.1 Report on the results
51C What are the most likely medical needs of the population?SmartResilience. (2017). D5.1 Report on the results
51C What are the most likely medical needs of the population?SmartResilience. (2017). D5.1 Report on the results
51C What is the available capacity of the hospital?SmartResilience. (2017). D5.1 Report on the results
51C What is the available capacity of the hospital?SmartResilience. (2017). D5.1 Report on the results
51C What is the insular area staff response time?SmartResilience. (2017). D5.1 Report on the results
51C What is the insular area staff response time?SmartResilience. (2017). D5.1 Report on the results
51C What is the likelihood of the hospital needs to be evacuated?SmartResilience. (2017). D5.1 Report on the results
51C What is the likelihood of the hospital needs to be evacuated?SmartResilience. (2017). D5.1 Report on the results
51C What is the local staff response time?SmartResilience. (2017). D5.1 Report on the results
51C What is the local staff response time?SmartResilience. (2017). D5.1 Report on the results
51C What is the quality of the regional plan?SmartResilience. (2017). D5.1 Report on the results
51C What is the quality of the regional plan?SmartResilience. (2017). D5.1 Report on the results
51C What is the quality of the transport and evacuation plans?SmartResilience. (2017). D5.1 Report on the results
51C What is the quality of the transport and evacuation plans?SmartResilience. (2017). D5.1 Report on the results
51C What is the state staff response time?SmartResilience. (2017). D5.1 Report on the results
51C What is the state staff response time?SmartResilience. (2017). D5.1 Report on the results
51D Are there outcome reports with recommendations?SmartResilience. (2017). D5.1 Report on the results
51D Cameras coverage areaSmartResilience. (2017). D5.1 Report on the results
51D Cameras coverage areaSmartResilience. (2017). D5.1 Report on the results
51D Does the airport have redundancy of critical systems in place?SmartResilience. (2017). D5.1 Report on the results
51D Does the airport have redundancy of critical systems in place?SmartResilience. (2017). D5.1 Report on the results
51D Does the building have an effective CCTV system?Commission Regulation (EU) 72/2016
51D Does the building have an effective CCTV system?Commission Regulation (EU) 72/2016
51D Frequency of periodic reports on the quality of barriersSmartResilience. (2017). D5.1 Report on the results
51D Frequency of periodic reports on the quality of barriersSmartResilience. (2017). D5.1 Report on the results
51D Frequency of periodic reports on the quality of barriers IICommission Implementing Regulation (EU) 2015/1998of
51D Gauge coverage areaSmartResilience. (2017). D5.1 Report on the results
51D Gauge coverage areaSmartResilience. (2017). D5.1 Report on the results
51D How much time does it take to alert the pilots about the event?SmartResilience. (2017). D5.1 Report on the results
51D How much time does it take to alert the pilots about the event?SmartResilience. (2017). D5.1 Report on the results
51D Is the chain of command clearly identified?SmartResilience. (2017). D5.1 Report on the results
51D Is the chain of command clearly identified?SmartResilience. (2017). D5.1 Report on the results
51D Is there an outcome report with recommendations?SmartResilience. (2017). D5.1 Report on the results
51D Is there an outcome report with recommendations?SmartResilience. (2017). D5.1 Report on the results
51D Number of choke pointsSmartResilience. (2017). D5.1 Report on the results
51D Number of choke pointsSmartResilience. (2017). D5.1 Report on the results
51D Number of feedbacks received on staff performance SmartResilience. (2017). D5.1 Report on the results
51D Number of feedbacks received on staff performance SmartResilience. (2017). D5.1 Report on the results
51D Number of MOUSmartResilience. (2017). D5.1 Report on the results
51D Number of MOUSmartResilience. (2017). D5.1 Report on the results
51D Number of systems re-evaluatedSmartResilience. (2017). D5.1 Report on the results
51D Number of systems re-evaluatedSmartResilience. (2017). D5.1 Report on the results
51D Number of years spent in positionSmartResilience. (2017). D5.1 Report on the results
51D Number of years spent in positionSmartResilience. (2017). D5.1 Report on the results
51D Percentage of incidents used in trainingSmartResilience. (2017). D5.1 Report on the results
51D Percentage of incidents used in trainingSmartResilience. (2017). D5.1 Report on the results
51D Rate of processed previous incidentsSmartResilience. (2017). D5.1 Report on the results
51D Rate of processed previous incidentsSmartResilience. (2017). D5.1 Report on the results
51E Number of fire fighters per shift at siteSmartResilience. (2017) D5.1: Report on the results
51F Does the surface water contains permissible contents?SmartResilience. (2017). D 5.1 Report on the results
51F Does the surface water contains permissible contents?SmartResilience. (2017). D 5.1 Report on the results
51F Probability of contamination at each sourceSmartResilience. (2017). D 5.1 Report on the results
51F Probability of contamination at each sourceSmartResilience. (2017). D 5.1 Report on the results
51F Probability of contamination at each sourceSmartResilience. (2017). D 5.1 Report on the results
51G Do you have a Flood Action Plan?SmartResilience (2017) D 5.1 Report on the results o
51G Do you have a Flood Emergency Plan?SmartResilience (2017) D 5.1 Report on the results o
51G How many meetings were provided to stakeholders per crisis situation?SmartResilience. (2017). D 5.1 Report on the results
51G How many meetings were provided to stakeholders per crisis situation?SmartResilience. (2017). D 5.1 Report on the results
51G Is community receiving extra training after crisis? SmartResilience. (2017). D 5.1 Report on the results
51G Is community receiving extra training after crisis? SmartResilience. (2017). D 5.1 Report on the results
51G Is there a reporting procedure in place after an incident?SmartResilience. (2017). D 5.1 Report on the results
51G Is there a reporting procedure in place after an incident?SmartResilience. (2017). D 5.1 Report on the results
51G Is there a system in place for data analysis after crisis?SmartResilience. (2017). D 5.1 Report on the results
51G Is there a system in place for data analysis after crisis?SmartResilience. (2017). D 5.1 Report on the results
51G Number of agencies involved in formal flood event management.SmartResilience. (2017). D 5.1 Report on the results
51G Number of agencies involved in formal flood event management.SmartResilience. (2017). D 5.1 Report on the results
51G Number of backup energy supplies available and number of hours use.SmartResilience. (2017). D 5.1 Report on the results
51G Number of backup energy supplies available and number of hours use.SmartResilience. (2017). D 5.1 Report on the results
51G Number of critical spare parts availableSmartResilience. (2017). D 5.1 Report on the results
51G Number of critical spare parts availableSmartResilience. (2017). D 5.1 Report on the results
51G Number of drills/exercise undertaken in relation to flood action plan.SmartResilience. (2017). D 5.1 Report on the results
51G Number of drills/exercise undertaken in relation to flood action plan.SmartResilience. (2017). D 5.1 Report on the results
51G Number of Evacuation centres available.SmartResilience. (2017). D 5.1 Report on the results
51G Number of Evacuation centres available.SmartResilience. (2017). D 5.1 Report on the results
51G Number of flood protection equipment available.SmartResilience (2017) D 5.1 Report on the results o
51G Number of flood protection equipment available.SmartResilience (2017) D 5.1 Report on the results o
51G Number of gully maintenance crews staff availableSmartResilience. (2017). D 5.1 Report on the results
51G Number of gully maintenance crews staff availableSmartResilience. (2017). D 5.1 Report on the results
51G Number of hours from DAM warning to City floodingSmartResilience. (2017). D 5.1 Report on the results
51G Number of hours from DAM warning to City floodingSmartResilience. (2017). D 5.1 Report on the results
51G Number of OPW Flood Maps AvailableSmartResilience. (2017). D 5.1 Report on the results
51G Number of OPW Flood Maps AvailableSmartResilience. (2017). D 5.1 Report on the results
51G Number of River Channel ScreensSmartResilience (2017) D 5.1 Report on the results o
51G Number of River Channel ScreensSmartResilience (2017) D 5.1 Report on the results o
51G Number of subscribers to communication channelsSmartResilience. (2017). D 5.1 Report on the results
51G Number of subscribers to communication channelsSmartResilience. (2017). D 5.1 Report on the results
51G Number of tidal and river gauges in placesSmartResilience (2017) D 5.1 Report on the results o
51G Number of tidal and river gauges in placesSmartResilience (2017) D 5.1 Report on the results o
51G Number of Tidal/Fluvial floods in the past 10 yearsSmartResilience (2017) D 5.1 Report on the results o
51G Number of Tidal/Fluvial floods in the past 10 yearsSmartResilience (2017) D 5.1 Report on the results o
51G Number of Traffic Management Plans available.SmartResilience (2017) D 5.1 Report on the results o
51G Number of Traffic Management Plans available.SmartResilience (2017) D 5.1 Report on the results o
51G Number of trained staff available to assist in a flood eventSmartResilience. (2017). D 5.1 Report on the results
51G Number of trained staff available to assist in a flood eventSmartResilience. (2017). D 5.1 Report on the results
51G Number of Vehicle Management Signs AvaialbleSmartResilience (2017) D 5.1 Report on the results o
51G Number of Vehicle Management Signs AvaialbleSmartResilience (2017) D 5.1 Report on the results o
51G Number of water/drainage repair crews staff availableSmartResilience. (2017). D 5.1 Report on the results
51G Number of water/drainage repair crews staff availableSmartResilience. (2017). D 5.1 Report on the results
51G Public Weather Forecasting Alert System in placeSmartResilience. (2017). D 5.1 Report on the results
51G Public Weather Forecasting Alert System in placeSmartResilience. (2017). D 5.1 Report on the results
51G Time (hours) to reopen critical road infrastructure.SmartResilience. (2017). D 5.1 Report on the results
51G Time (hours) to reopen critical road infrastructure.SmartResilience. (2017). D 5.1 Report on the results
802.1x authenticationThe Center for Internet Security, Critical Security
A proportion of the population who believe decision-making is inclusive Annex of the resolution adopted by the General Assem
A set of package managers 
A set of programming languages 
A1.To set up emergency administration agencies for production safety according to law(2 points).RiskRadar China - Emergency Ability Asessment
A2.To establish and improve the production safety responsibility system and related management system of the unit;Make it clear that the main person in charge of the enterprise is the first person responsible for the emergency management of production safety(2).RiskRadar China - Emergency Ability Asessment
A3.Equipped with full-time or part-time safety production emergency management personnel(2).RiskRadar China - Emergency Ability Asessment
A4.Make clear the initial response mechanism of the site, including the procedure requirements of starting the pre-plan, advance disposal, issuing alarm, emergency situation disposal, evacuation and withdrawal, information report, situation analysis, request for support and other tasks(2).RiskRadar China - Emergency Ability Asessment
A5.Establish and improve the safety risk joint control mechanism that closely connects with the local government and relevant departments in information transmission, early warning response, emergency response, social meeting control, emergency evacuation and rehabilitation(2).RiskRadar China - Emergency Ability Asessment
Ability to take decisions in the organisation 
Acceptable Use and Safe Handling of Assets PolicyCloud Computing Compliance Controls Catalogue (C5) -
Access rights illicitly grantedETSI GS ISI 001-1 V1.1.2
Access to development artifactsThe Center for Internet Security, Critical Security
Access to electricityAnnex of the resolution adopted by the General Assem
Accident historyCWA16649
Accident rate per million departuresICAO (2014). Safety report. International Civil Avi
Accident rate per million departuresICAO (2014). Safety report. International Civil Avi
Account add/remove alertsThe Center for Internet Security, Critical Security
Account lockoutsThe Center for Internet Security, Critical Security
Account upgrade attemptsThe Center for Internet Security, A Measurement Comp
Accounts expiration dateThe Center for Internet Security, Critical Security
Accounts without two-factor authenticationThe Center for Internet Security, A Measurement Comp
Active participation in local or regional cybersecurity forumsAdapted from the US:DHS Infrastructure Survey Tool (
Activities undertaken for developing employees skills?International organization for Standardization (2016
Activities undertaken for developing employees skills?International organization for Standardization (2016
Activities undertaken to identify and respond to change?International organization for Standardization (2016
Activities undertaken to identify and respond to change?International organization for Standardization (2016
Activities undertaken to routinely review the resource allocation?International organization for Standardization (2016
Activities undertaken to routinely review the resource allocation?International organization for Standardization (2016
Adaptation, mitigation and technology transfer, and development actionsAnnex of the resolution adopted by the General Assem
Additional staff trained for specific operations during a pandemic?German Federal Ministry of the Interior. (2008) Prot
Admin account useThe Center for Internet Security, Critical Security
Admin account useThe Center for Internet Security, Critical Security
Admin accounts inventoryThe Center for Internet Security, Critical Security
Admin notificationThe Center for Internet Security, A Measurement Comp
Adolescent birth rateAnnex of the resolution adopted by the General Assem
Adopt and implement investment promotion for least developed countriesAnnex of the resolution adopted by the General Assem
Adults with an account at a bank or other financial institutionAnnex of the resolution adopted by the General Assem
After an incident, are all prepared texts for media response within reach?German Federal Ministry of the Interior. (2008) Prot
After an incident, is damaged equipment repaired or is repair initiated?German Federal Ministry of the Interior. (2008) Prot
After an incident, is medical aid provided for possible injured persons?German Federal Ministry of the Interior. (2008) Prot
After backup communications implemented, % of function lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
After natural gas service backup, percent of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
After screening, is a security status declaration issued for SHR?Commission Implementing Regulation (EU) 2015/1998 of
After water alternative implemented, percent of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Age-standardized prevalence of current tobacco use Annex of the resolution adopted by the General Assem
Aggregate score of penetration testsThe Center for Internet Security, A Measurement Comp
Aggregate vulnerability ratingThe Center for Internet Security, A Measurement Comp
Agreement with external entities for restoration of operations?Petit, F. et. al (2013). Resilience measurement inde
Agreement with external entitities for restoration of operations?Petit, F. et. al (2013). Resilience measurement inde
Agreement with external entitities for restoration of operations?Petit, F. et. al (2013). Resilience measurement inde
Agreements on shifting tasks to external service providers during pandemic?German Federal Ministry of the Interior. (2008) Prot
Agreements or contracts with providers of resources for backup generators?German Federal Ministry of the Interior. (2008) Prot
Agricultural export subsidiesAnnex of the resolution adopted by the General Assem
Agriculture orientation index for government expendituresAnnex of the resolution adopted by the General Assem
AI for Diagnostics and PrognosticsDeep Knowledge Group (2020) COVID-19 ranking framewo
Aid for Trade commitments and disbursementsAnnex of the resolution adopted by the General Assem
AI-driven diagnostics analysisDeep Knowledge Group (2020) COVID-19 ranking framewo
Aika häiriöalueen tunnistamiseen - Time to identify the incident areaVTT Workshop 16.4.2018
Air pollution, level of PM2.5OECD Statistics (2018), http://data.oecd.org
Alarms per hourOGP Process safety - Recommended Practice on Key Per
Alert and notification to employees?Petit, F. et. al (2013). Resilience measurement inde
Alert and notification to employees?Petit, F. et. al (2013). Resilience measurement inde
Alert cancelled and operations restored after a crisis has ended?German Federal Ministry of the Interior. (2008) Prot
Alert when logging failsThe Center for Internet Security, A Measurement Comp
Alert, warning, reporting procedures exercised in table-top exercises?German Federal Ministry of the Interior. (2008) Prot
Alihankintaresurssit - Subcontracting resourcesVTT
All persons present led to determined assembly areas by evacuation wardens?German Federal Ministry of the Interior. (2008) Prot
All relevant crisis management tasks defined and assigned to staff?German Federal Ministry of the Interior. (2008) Prot
Alternates and backups for communication systems exist?Petit, F. et. al (2013). Resilience measurement inde
Alternates and backups for communication systems exist?Petit, F. et. al (2013). Resilience measurement inde
Alternates and backups for Electric power in place?Petit, F. et. al (2013). Resilience measurement inde
Alternates and backups for Electric power in place?Petit, F. et. al (2013). Resilience measurement inde
Alternates and backups for IT systems in place?Petit, F. et. al (2013). Resilience measurement inde
Alternates and backups for IT systems in place?Petit, F. et. al (2013). Resilience measurement inde
Alternates and backups for water systemsPetit, F. et. al (2013). Resilience measurement inde
Alternates and backups for water systemsPetit, F. et. al (2013). Resilience measurement inde
Alternative modes of transportation in case of loss of air transportation?Adapted from the US:DHS Infrastructure Survey Tool (
Alternative modes of transportation in case of loss of maritime transport?Adapted from the US:DHS Infrastructure Survey Tool (
Alternative modes of transportation in case of loss of pipeline transport?Adapted from the US:DHS Infrastructure Survey Tool (
Alternative modes of transportation in case of loss of rail transportation?Adapted from the US:DHS Infrastructure Survey Tool (
Alternative modes of transportation in case of loss of road transportation?Adapted from the US:DHS Infrastructure Survey Tool (
Alternative site capacity?Petit, F. .et. al (2013). Resilience measurement ind
Alternative site capacity?Petit, F. .et. al (2013). Resilience measurement ind
Alternative site existsPetit, F. et. al (2013). Resilience measurement inde
Alternative site existsPetit, F. et. al (2013). Resilience measurement inde
Alternative work places which canbe used during an epidemic or pandemic?German Federal Ministry of the Interior. (2008) Prot
Alternatives systems exists for financial services in case of cyber attack?International organization for Standardization(2012)
Alternatives systems exists for financial services in case of cyber attack?International organization for Standardization(2012)
Ambiguities CWA16649
Amount of Dust emiissions (tons/year) 
Amount of Dust emiissions (tons/year) 
Amount of support to developing countriesAnnex of the resolution adopted by the General Assem
Analyse and evaluation of performed fire fighters drillsSD-09.02.01 - Protection From Fire and Explosion Sta
Annual management review of risk assessment conducted?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Annual mean levels of fine particulate matter in cities Annex of the resolution adopted by the General Assem
Annual review of protocols conducted?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Anomalies in logsThe Center for Internet Security, A Measurement Comp
Anti-exploration featuresThe Center for Internet Security, Critical Security
API DocumentationEU-VRi
Application firewallsThe Center for Internet Security, Critical Security
Application of the Risk Management PolicyCloud Computing Compliance Controls Catalogue (C5) -
Application software updateThe Center for Internet Security, A Measurement Comp
Applications not scanned by application security code scannerThe Center for Internet Security, A Measurement Comp
Apply configuration changes to block trafficThe Center for Internet Security, A Measurement Comp
Appropriate inspection team included in incident investigation?American Petroleum Institute RP 581 (2000). (3rd ed.
Appropriateness of the inspection team involved in incident investigation?American Petroleum Institute RP 581 (2000). (3rd ed.
Approved funding for developing countrieAnnex of the resolution adopted by the General Assem
Approved security configurationThe Center for Internet Security, A Measurement Comp
Approximate number of employees on site?Commission Implementing Regulation (EU) 2015/1998 of
Archived data setsThe Center for Internet Security, Critical Security
Are “security incident reports” compiled after each adverse event?RINA InfraStress project (D3.4, T8.4)
Are access controls carried out in the buildings?German Federal Ministry of the Interior. (2008) Prot
Are actions and decisions during a crisis recorded?German Federal Ministry of the Interior. (2008) Prot
Are actions taken to promote equality of access to services and basic infrastructure to vulnerable sectors of society?SMR CWA91:2018
Are additional support activities undertaken to deal with cyber attacks?Project Group LÜKEX Bund, Federal Office of Civil Pr
Are additional support activities undertaken to deal with cyber attacks?Project Group LÜKEX Bund, Federal Office of Civil Pr
Are additional support activities undertaken to deal with cyber attacks?Project Group LÜKEX Bund, Federal Office of Civil Pr
Are additional support activities undertaken to deal with cyber attacks?Project Group LÜKEX Bund, Federal Office of Civil Pr
Are air carrier mail and materials screened?Regulation 300/2008/EC
Are air inlets difficult to reach from outside?German Federal Ministry of the Interior. (2008) Prot
Are airport supplies screened?Regulation 300/2008/EC
Are alarm systems installed in core areas?German Federal Ministry of the Interior. (2008) Prot
Are alerts adapted to possible impacts of major emergencies?German Federal Ministry of the Interior. (2008) Prot
Are all access points to identifiable air cargo/air mail secured?Commission Implementing Regulation (EU) 2015/1998 of
Are all authorizations within different IT systems logged?Swedish Water and Wastewater Association. Blåa lista
Are all backup power generators regularly maintained?German Federal Ministry of the Interior. (2008) Prot
Are all backup power generators regularly tested under full load?German Federal Ministry of the Interior. (2008) Prot
Are all bills settled following a crisis incident?German Federal Ministry of the Interior. (2008) Prot
Are all contact information lists regularly updated?German Federal Ministry of the Interior. (2008) Prot
Are all contact lists available to media representatives?German Federal Ministry of the Interior. (2008) Prot
Are all data traffic within the networks of the business logged?Swedish Water and Wastewater Association. Blåa lista
Are all decisions before, during, and after a crisis incident recorded?German Federal Ministry of the Interior. (2008) Prot
Are all events classified ?SD-09.01.15 - HSE Incident Management Standard
Are all events including who does what in SCADA logged?Swedish Water and Wastewater Association. Blåa lista
Are all events investigatedUP-09.01.15-001 - Investigation of HSE Events
Are all events logged in the database?SD-09.01.15 - HSE Incident Management Standard
Are all facilities and equipment removed from any damage zones?German Federal Ministry of the Interior. (2008) Prot
Are all injuries (and related measures taken for injuries) recorded?German Federal Ministry of the Interior. (2008) Prot
Are all media representatives treated equally?German Federal Ministry of the Interior. (2008) Prot
Are all necessary elements included in the pre-check procedure ?Commission Implementing Regulation (EU) 2015/1998 of
Are all necessary external bodies alerted to provide first aid?German Federal Ministry of the Interior. (2008) Prot
Are all necessary files within reach?German Federal Ministry of the Interior. (2008) Prot
Are all necessary measures taken to seal off the organization?German Federal Ministry of the Interior. (2008) Prot
Are all necessary steps taken to extinguish fires?German Federal Ministry of the Interior. (2008) Prot
Are all necessary steps taken to provide first aid?German Federal Ministry of the Interior. (2008) Prot
Are all necessary steps taken to rescue persons and retrieve equipment?German Federal Ministry of the Interior. (2008) Prot
Are all necessary working tools available for maintenance and restoration? 
Are all originating passengers and their cabin baggage screened?Regulation 300/2008/EC
Are all personal damages during and after a crisis incident recorded?German Federal Ministry of the Interior. (2008) Prot
Are all redundant facilities and equipment for incident response provided?German Federal Ministry of the Interior. (2008) Prot
Are all relevant stakeholders for the development of the resilience action plan mapped?SMR CWA91:2018
Are all required financial resources to cope with a crisis provided?German Federal Ministry of the Interior. (2008) Prot
Are all staff involved in crisis management identified?German Federal Ministry of the Interior. (2008) Prot
Are all staff with access to secured air cargo subject to pre-checks?Commission Implementing Regulation 2015/1998
Are all staff working in hazard zones identified?German Federal Ministry of the Interior. (2008) Prot
Are all sub-events from a serious incident recorded?German Federal Ministry of the Interior. (2008) Prot
Are all the access points to the site subject to access control?European Commission (2015). Commission Implementing
Are all the relevant resilience-related international standards followed?ISO standards
Are all time limits for shut-down and start-up of operations observed?German Federal Ministry of the Interior. (2008) Prot
Are all trained media spokespersons called up following an incident?German Federal Ministry of the Interior. (2008) Prot
Are any consignments exempt from security screening?Commission Implementing Regulation (EU) 2015/1998 of
Are appropriate security controls for unaccompanied baggage?Regulation 300/2008/EC
Are Apps available to track the movement/contact between citizens? 
Are audits for critical infrastructure operators carried out?SMR CWA91:2018
Are aviation security measures sufficient to secure EU/EEA bound air cargo?Commission Implementing Regulation (EU) 2015/1998 of
Are backup data restores performed and verified?Adapted from the US:DHS Infrastructure Survey Tool (
Are BAM/BPM results being analysed and reported?InfraStress D5.2
Are border control personnel equiped to handle infection cases held at the border? 
Are briefing forms available in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Are business cards available in the crisis management center?German Federal Ministry of the Interior. (2008) Prot
Are business processes audited on a regular basis post events?InfraStress D5.2
Are cameras available in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Are certification processes conducted to achieve conformity with national standards?SMR CWA91:2018
Are certified IT components available and used?Federal Ministry of the Interior. (2011). Cyber Secu
Are certified IT components available and used?Federal Ministry of the Interior. (2011). Cyber Secu
Are CI providers really reporting?Project Group LÜKEX Bund, Federal Office of Civil Pr
Are columns operational? 
Are contact lists tested in table-top exercises?German Federal Ministry of the Interior. (2008) Prot
Are Containment failures (pipes, tanks, vessels, containers, hoses, gaskets, etc.) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are Containment failures (pipes, tanks, vessels, containers, hoses, gaskets, etc.) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are controls in place to prevent tampering at the stage of packing?Commission Implementing Regulation (EU) 2015/1998 of
Are controls in place to prevent tampering at the stage of production?Commission Implementing Regulation (EU) 2015/1998 of
Are controls in place to prevent tampering in the despatch area?Commission Implementing Regulation (EU) 2015/1998 of
Are cooperation with mobile network providers in place to collect and analyze location data? 
Are corrective measures taken and monitored regularly?CEC
Are countermeasures are available? 
Are countermeasures effective? 
Are critical areas locked and accessible only to authorized staff?German Federal Ministry of the Interior. (2008) Prot
Are critical areas monitored by video cameras?German Federal Ministry of the Interior. (2008) Prot
Are critical data stored in different places?German Federal Ministry of the Interior. (2008) Prot
Are critical process parameters subject of monitoring by backup/redundant means or sensors?InfraStress Pilot 4
Are cyber attacks a critical risk for the country?Organisation for Economic Co-operation and Developme
Are data and meta-data information available? 
Are data centres protected by location choice (distance)?IEEE Recommended Practice forProtecting Publicly Acc
Are data centres protected by shielding and filtering? 
Are data/power lines easily accessible to outsiders?IEEE Recommended Practice forProtecting Publicly Acc
Are demarcated areas separated?Regulation 300/2008/EC
Are detected anomalies addressed in periodical review?  
Are different national security agencies collaborating with each other? Project Group LÜKEX Bund, Federal Office of Civil Pr
Are Direct effects expected among the negative consequences of the Physical Security hazards?RINA InfraStress project (D3.4, T8.4)
Are direct effects of the events (e.g. effect of the accident internally and externally to the site; direct effects to the personnel and contractors (fatalities, injuries); direct effects to the outside/inhabitants (fatalities, injuries)) evaluated?RINA InfraStress project (D3.4, T8.4)
Are direct effects of the events (effect of the accident internally and externally to the site evaluated?RINA InfraStress project (D3.4, T8.4)
Are direct effects of the events evaluated?RINA InfraStress project (D3.4, T8.4)
Are direct effects to the personnel, contractors, outside inhabitants evaluated? (fatalities, injuries)RINA InfraStress project (D3.4, T8.4)
Are droughts a critical risk for the country?Organisation for Economic Co-operation and Developme
Are emergency plans and continuity plans evaluated annually?Swedish Civil Contingencies Agency. (2015). Indikato
Are Emergency Response Plans based on the information on technological threats developed in the plant risk assessment?RINA InfraStress project (D3.4, T8.4)
Are Emergency Response Plans based on the information on technological threats developed in the plant risk assessment?RINA InfraStress project (D3.4, T8.4)
Are Emergency Response Plans based on the information on technological threats developed in the plant risk assessment?RINA InfraStress project (D3.4, T8.4)
Are Emergency Response Plans updated after the experience of a certain hazardous event, according to the consequences level experience by the facility?RINA InfraStress project (D3.4, T8.4)
Are emergency tasks & responsibilitiespracticed in table-top exercises?German Federal Ministry of the Interior. (2008) Prot
Are emergency trainings and drills conducted including volunteers?SMR CWA91:2018
Are employees receiving extra training after crisis? Jovanovic. A., et. al. (2017). T5.1: Report from the
Are enough resources allocated for Business continuity management system?International organization for Standardization(2012)
Are enough resources allocated for Business continuity management system?International organization for Standardization(2012)
Are enough skilled workers available? 
Are Equipment malfunctions (pumps, valves, instruments, sensors, logical solvers, actuators, interlocks) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are Equipment malfunctions (pumps, valves, instruments, sensors, logical solvers, actuators, interlocks) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are equipments and supplies available? 
Are executives given data analysis in real-time?Jovanovic. A., et. al. (2017). T5.1: Report from the
Are external communications required for facility core operations?Adapted from the US:DHS Infrastructure Survey Tool (
Are external organizations informed about the current situation?German Federal Ministry of the Interior. (2008) Prot
Are extreme temperatures a critical risk for the country?Organisation for Economic Co-operation and Developme
Are facilities within the building sufficiently anchored?German Federal Ministry of the Interior. (2008) Prot
Are floods a critical risk for the country?Organisation for Economic Co-operation and Developme
Are food and daily tools for incident response provided?German Federal Ministry of the Interior. (2008) Prot
Are foreign/ external investors involved with the control energy suppliers? 
Are foreign/external investors involved with the energy producing company? 
Are foreign/external investors involved with the transmission grid company? 
Are frequency and demage of threats determined? 
Are fulfilment of security conditions required to gain acces?Regulation 300/2008/EC
Are geophysical hazards a critical risk for the country?Organisation for Economic Co-operation and Developme
Are heat exchangers operational? 
Are Human errors (errors, slips and lapses in design, construction, operations, maintenance, testing and inspection) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are Human errors (errors, slips and lapses in design, construction, operations, maintenance, testing and inspection) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are important storage media, files and containers labelled?German Federal Ministry of the Interior. (2008) Prot
Are important storage media/filesremoved from any damage zone?German Federal Ministry of the Interior. (2008) Prot
Are Indirect effects in terms of loss of provided service / disrupt to be expected among the negative consequences of the Physical Security hazards?RINA InfraStress project (D3.4, T8.4)
Are indirect effects of the events to the products/services of the SIPS under analysis (scope, functionality, services, duration) evaluated?RINA InfraStress project (D3.4, T8.4)
Are indirect effects of the events to the products/services of the SIPS under analysis (scope, functionality, services, duration) evaluated?RINA InfraStress project (D3.4, T8.4)
Are indirect effects of the events to the products/services of the SIPS under analysis (scope, functionality, services, duration) evaluated?RINA InfraStress project (D3.4, T8.4)
Are industrial accidents a critical risk for the country?Organisation for Economic Co-operation and Developme
Are infectious diseases a critical risk for the country?Organisation for Economic Co-operation and Developme
Are infor ational announcementspublished?German Federal Ministry of the Interior. (2008) Prot
Are inlets in the outer shell of the buildings flood-proof?German Federal Ministry of the Interior. (2008) Prot
Are inspection visits measures classified?SD-03.05.11 - Inspection Of The Equipment Standard
Are inspection visits measures docummented?SD-03.05.11 - Inspection Of The Equipment Standard
Are inspection visits measures realized?SD-03.05.11 - Inspection Of The Equipment Standard
Are internal and external alert and information processes clearly defined?German Federal Ministry of the Interior. (2008) Prot
Are internal audits and management reviews conducted regularly? 
Are internal audits and management reviews conducted regularly?InfraStress Pilot 3
Are internal audits for EMS and management reviews conducted regularly?InfraStress - CARMA
Are internal audits for Occupational health and safety management system (OH&S) and management reviews conducted regularly?InfraStress - CARMA
Are internal continuity plans and continuity management in place?German Federal Ministry of the Interior. (2008) Prot
Are landslides a critical risk for the country?Organisation for Economic Co-operation and Developme
Are laptops/notebooks and PDAs available in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Are learning points identified?CEC
Are means of communicationtested in table-top exercises?German Federal Ministry of the Interior. (2008) Prot
Are measures taken by the entity sufficient to protect identifiable EU/EEA bound air cargo/air mail from unauthorised interference or tampering during the despatch process?Commission Implementing Regulation (EU) 2015/1998 of
Are monitored events being correlated in real time with other security information?InfraStress D5.2
Are necessary communication channels with external parties activated?German Federal Ministry of the Interior. (2008) Prot
Are new alternates and backups for communication systems added?Petit, F. et. al (2013). Resilience measurement inde
Are new alternates and backups for Electric power added?Petit, F. et. al (2013). Resilience measurement inde
Are new alternates and backups for IT systems added?Petit, F. et. al (2013). Resilience measurement inde
Are new buildings planned to be elevated, if possible, to prevent flooding?German Federal Ministry of the Interior. (2008) Prot
Are new resources allocated to the maintenance of critical services?Petit, F. et. al (2013). Resilience measurement inde
Are online analysis of the end-product conducted? 
Are overall reviews required after crisis situations?Jovanovic. A., et. al. (2017). T5.1: Report from the
Are personal, office and company ID cards checked in crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Are personnel trained on the Emergency Operations/Action Plan?Adapted from the US:DHS Infrastructure Survey Tool (
Are personnel trained on the usiness continuity plan for resilience ops.?Adapted from the US:DHS Infrastructure Survey Tool (
Are persons other than passengers screened before entering CSRA?Regulation 300/2008/EC
Are persons other than passengers screened before entering SRA?Regulation 300/2008/EC
Are precautions taken for buildings, equipment, data and files?German Federal Ministry of the Interior. (2008) Prot
Are precautions taken for staff, visitors and clients?German Federal Ministry of the Interior. (2008) Prot
Are press conferences held?German Federal Ministry of the Interior. (2008) Prot
Are press releases published?German Federal Ministry of the Interior. (2008) Prot
Are press releases related to a crisis/serious incident published?German Federal Ministry of the Interior. (2008) Prot
Are priorities established following a crisis incident?German Federal Ministry of the Interior. (2008) Prot
Are procedures in case of security incident defined? 
Are process control & security systems separate (separate networks)?German Federal Ministry of the Interior. (2008) Prot
Are Process upsets (process parameter deviations) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are Process upsets (process parameter deviations) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Are processed and stored data defined? 
Are pumps operational? 
Are relevant rooms and installations protected via access restrictions?IEEE Recommended Practice for Protecting Publicly Ac
Are resilience-related responsibilities clearly defined?American Petroleum Institute RP 581 (2000). (3rd ed.
Are resilience-related responsibilities clearly defined?American Petroleum Institute RP 581 (2000). (3rd ed.
Are risk maps generated? 
Are roofs sufficientlyanchored to the buildings?German Federal Ministry of the Interior. (2008) Prot
Are scanners available in the crisis management center?German Federal Ministry of the Interior. (2008) Prot
Are searchlights or high intensity lights used for waterside areas?Adapted from the US:DHS Infrastructure Survey Tool (
Are security and surveillance measures being updated post event? 
Are security controls in place to prevent tampering during screening?Commission Implementing Regulation (EU) 2015/1998 of
Are security personnel armed?InfraStress Pilot 3
Are security personnel trained and certified?Regulation 300/2008/EC
Are security scans performed?Adapted from the US:DHS Infrastructure Survey Tool (
Are servers/systems credentials protected? 
Are services software Modules working? 
Are spare ICT components available? 
Are spare parts available? 
Are spare parts for HVDC transmission available? 
Are spare power switches available? 
Are spare reactive power compensation components/ systems available? 
Are spare substation components available? 
Are spare tele-control units available? 
Are spare transformer substation components available? 
Are specific recovery budget allocated? 
Are staff equipped with mobile phones for crisis situations?German Federal Ministry of the Interior. (2008) Prot
Are staff informed about the facility’scrisis management?German Federal Ministry of the Interior. (2008) Prot
Are staff informed when a serious incident occurs?German Federal Ministry of the Interior. (2008) Prot
Are staff made aware of pandemic-related issues or incidents?German Federal Ministry of the Interior. (2008) Prot
Are staff members trained before provided access to SRA?Regulation 300/2008/EC
Are staff trained for their assigned roles during crisis?German Federal Ministry of the Interior. (2008) Prot
Are staff trained on how to behave during a pandemic incident?German Federal Ministry of the Interior. (2008) Prot
Are staff with access to and handle secured air cargo recurrently trained?Commission Implementing Regulation (EU) 2015/1998 of
Are staff with access to secured air cargo properly assigned and trained?Commission Implementing Regulation 2015/1998
Are staff, visitors and clients warned when a serious incident occurs?German Federal Ministry of the Interior. (2008) Prot
Are staff’s families informed about the serious incident when one occurs?German Federal Ministry of the Interior. (2008) Prot
Are storms a critical risk for the country?Organisation for Economic Co-operation and Developme
Are sufficient resources allocated to the maintenance of critical services?International organization for Standardization (2016
Are surveillance, patrols and other physical controls provided?GRI G4 (2013) Global Reporting Initiative, Amsterdam
Are surveillance, patrols and other physical controls provided?GRI G4 (2013) Global Reporting Initiative, Amsterdam
Are surveillance, patrols and other physical controls provided?GRI G4 (2013) Global Reporting Initiative, Amsterdam
Are surveillance, patrols and other physical controls provided?GRI G4 (2013) Global Reporting Initiative, Amsterdam
Are technical plants secured with perimeter fences? 
Are terrorist attacks a critical risk for the country?Organisation for Economic Co-operation and Developme
Are the activities done to adapt itself when needed?International organization for Standardization (2016
Are the activities done to adapt itself when needed?International organization for Standardization (2016
Are the activities for resilience built in the existing the vision?International organization for Standardization (2016
Are the activities for resilience built in the existing the vision?International organization for Standardization (2016
Are the activities undertaken for situational awareness?International organization for Standardization (2016
Are the activities undertaken for situational awareness?International organization for Standardization (2016
Are the base processes updated in BAM/BPM mapping post event?InfraStress D5.2
Are the BCMS requirements integrated into the other business processes?International organisation for Standardization(2012)
Are the BCMS requirements integrated into the other business processes?International organisation for Standardization(2012)
Are the business-related (specific) demands on the SCADA..Swedish Water and Wastewater Association. Blåa lista
Are the control and monitoring software Modules working? 
Are the critical assets defined? 
Are the current countermeasures put in place working correctly? (i.e. all security means are working 100% fine and correctly maintained)RINA InfraStress project (D3.4, T8.4)
Are the dependencies and supporting resources for CI operations identified?International organization for Standardization(2012)
Are the dependencies and supporting resources for CI operations identified?International organization for Standardization(2012)
Are the employees trained in emergency plans?American Petroleum Institute RP 581 (2000). (3rd ed.
Are the employees trained in emergency plans?American Petroleum Institute RP 581 (2000). (3rd ed.
Are the end-users data protected? 
Are the external and internal relavent issues determined for defining BCMS?International organization for Standardization(2012)
Are the external and internal relavent issues determined for defining BCMS?International organization for Standardization(2012)
Are the facades, including windows and doors, reinforced?German Federal Ministry of the Interior. (2008) Prot
Are the geotechnical related problem (landslide, mudslide, debrisflow) occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Are the images of the CCTV recorded?European Commission (2015). Commission Implementing
Are the incident investigation procedures followed?American Petroleum Institute RP 581 (2000). (3rd ed.
Are the information system Servers working? 
Are the interested parties alerted about the vital information?International organization for Standardization(2012)
Are the interested parties alerted about the vital information?International organization for Standardization(2012)
Are the LAN switches working? 
Are the main natural gas service lines collocated with other utilities?Adapted from the US:DHS Infrastructure Survey Tool (
Are the main wastewater laterals collocated with other utilities?Adapted from the US:DHS Infrastructure Survey Tool (
Are the main water service lines collocated with other utilities?Adapted from the US:DHS Infrastructure Survey Tool (
Are the management discipline identified and aligned?International organization for Standardization (2016
Are the management discipline robust & effective?International organization for Standardization (2016
Are the management discipline robust & effective?International organization for Standardization (2016
Are the measures sufficient to ensure proper recruitment?European Commission (2015). Commission Implementing
Are the necessary plans for incident response provided?German Federal Ministry of the Interior. (2008) Prot
Are the negative consequences of the Physical Security hazards estimated for each asset?RINA InfraStress project (D3.4, T8.4)
Are the objectives of the different stakeholders aligned so to set up a common understanding of resilience?SMR CWA91:2018
Are the police informed about any bomb threats?German Federal Ministry of the Interior. (2008) Prot
Are the potential risks for the electricity supply grid identified?International organization for Standardization(2012)
Are the potential risks for the electricity supply grid identified?International organization for Standardization(2012)
Are the regular checks of security measures performed?Federal Ministry of the Interior. (2011). Cyber Secu
Are the relevant assets values determined? 
are the reported incidents used in the continous improvement work?Swedish Water and Wastewater Association. Blåa lista
Are the resilience related operating procedures periodically reviewed?American Petroleum Institute RP 581 (2000). (3rd ed.
Are the resilience related operating procedures periodically reviewed?American Petroleum Institute RP 581 (2000). (3rd ed.
Are the responses / remedial actions effective?HELEN
Are the responses / remedial actions effective?HELEN
Are the responses / remedial actions effective?HELEN
Are the results of the evaluation of BCMS presented for management review?International organization for Standardization(2012)
Are the results of the evaluation of BCMS presented for management review?International organization for Standardization(2012)
Are the results of the Risk Analysis available on line to Operators/Emergency Team to help manage emergencies?RINA InfraStress project (D3.4, T8.4)
Are the results of the Risk Analysis available on line to Operators/Emergency Team to help manage emergencies?RINA InfraStress project (D3.4, T8.4)
Are the results of the Risk Analysis available on line to Operators/Emergency Team to help manage emergencies?RINA InfraStress project (D3.4, T8.4)
Are the sensor array, surveilance system and other security systems connected to one secure location? 
Are the servic electric connections co-located with other utilities?Adapted from the US:DHS Infrastructure Survey Tool (
Are the SIP operational areas monitored for fires?Draft proposal on possible resilience or functionali
Are the storage tanks equipped with process parameters related sensor array?InfraStress Pilot 4
Are the storage tanks equipped with SiS related sensor array? 
Are the surveillance means endowed with automatic alarm system thus avoiding the need of constant operator presence?RINA InfraStress project (D3.4, T8.4)
Are the time frames for resuming the services to minimum level identified?International organization for Standardization(2012)
Are the time frames for resuming the services to minimum level identified?International organization for Standardization(2012)
Are the treatment options for the identified risks elaborated?International organization for Standardization(2012)
Are the treatment options for the identified risks elaborated?International organization for Standardization(2012)
Are there formal partnerships between academic and scientific entities to improve the resilience building process?SMR CWA91:2018
Are there resources allocated for systematic risk analysis?Swedish Water and Wastewater Association. Blåa lista
Are there a cross-departmental coordination board and procedures in place?SMR CWA91:2018
Are there additional measures to enhance the security of the premises in general?Commission Implementing Regulation 2015/1998
Are there additional small meeting rooms in the crisis management center?German Federal Ministry of the Interior. (2008) Prot
Are there adequate resources allocated for incident managementSwedish Water and Wastewater Association. Blåa lista
Are there adequate resources allocated for follow-up of security guidelineSwedish Water and Wastewater Association. Blåa lista
Are there adequate resources allocated for guidance and instructionsSwedish Water and Wastewater Association. Blåa lista
Are there adequate resources allocated for training, information and communication about information security?Swedish Water and Wastewater Association. Blåa lista
Are there agreements for external supply of resourcesSwedish Civil Contingencies Agency. (2015). Indikato
Are there alert strategies for single-person workplaces?German Federal Ministry of the Interior. (2008) Prot
Are there alternative sensors (e.g. CCTV) that can provide feedback?Draft proposal on possible resilience or functionali
Are there any exemptions that do not comply with the Union list?Commission Implementing Regulation 2015/1998
Are there any governmental plans and procedures for developing the power gr 
Are there any mitigation measures for specific issues?RINA InfraStress project (D3.4, T8.4)
Are there any redundancies among security means?RINA InfraStress project (D3.4, T8.4)
Are there any studies/research in the topic of pandemics and their impacts done by or brought to the attention of the government? 
Are there appropriate security controls on cargo and mail?Regulation 300/2008/EC
Are there automatic functioning shut-down mechanisms? Jovanovic. A., et. al. (2017). T5.1: Report from the
Are there backup communication means for substations and control rooms? 
Are there backup systems/redundancies in place for critical system elements? 
Are there continuity plans where it is clear who do what to mitigate..Swedish Water and Wastewater Association. Blåa lista
Are there continuity plans where it is clear who do what to mitigate..Swedish Water and Wastewater Association. Blåa lista
Are there cooperation/collaboration agreements between the local government and critical infrastructure operators in place?SMR CWA91:2018
Are there coordination procedures in place between the facility and its neighbours? 
Are there cyber security solutions (ISO 27032) to ensure protection?ISO (27032). Guideline for cyber security. Internati
Are there dedicated persons for measuring adaptation/transformation?ISO 22316: 2017 Security and resilience -- Organizat
Are there developed contingency plans for critical infrastructures?SMR CWA91:2018
Are there drills in place in case of emergency?Jovanovic. A., et. al. (2017). T5.1: Report from the
Are there emergency communication channels?Swedish Civil Contingencies Agency. (2015). Indikato
Are there enough employed ICT specialists? 
Are there established alliances with cities facing similar risks?SMR CWA91:2018
Are there forms to compile information to be communicated to the public?German Federal Ministry of the Interior. (2008) Prot
Are there forms to record incoming and outgoing information?German Federal Ministry of the Interior. (2008) Prot
Are there ground floor windows in the facility or the SAA?Adapted from the US:DHS Infrastructure Survey Tool (
Are there HVDC transmission technologies available in the grid? 
Are there implemented monitoring systems for identifying risk, shocks and long-term stresses? Evaluate their functionalitySMR CWA91:2018
Are there institutionalized regular debriefing meetings?SMR CWA91:2018
Are there Interoperable Communication with any first responder(s)?Adapted from the US:DHS Infrastructure Survey Tool (
Are there maintenances routines to ensure functionality..Swedish Civil Contingencies Agency. (2015). Indikato
are there mechanisms in place to quickly enact laws empowering governments to take measures to best mitigate the event? 
Are there new suspicious signals coming from situational awareness system (ST.APP.2.1)?R-Tech Infrastress
Are there new suspicious signals coming from the business continuity monitoring system (e.g. SAP or other internal systems)?R-Tech Infrastress
Are there periodical maintenance procedures for critical infrastructures in place?SMR CWA91:2018
Are there plans for communication in times of shut-down?Jovanovic. A., et. al. (2017). T5.1: Report from the
Are there procedures in place to coordinate the incident recovery efforts between LK and Petrol? 
are there procedures in place to provide travel recommendations/restrictions? 
Are there protected areas for staff and other persons?German Federal Ministry of the Interior. (2008) Prot
Are there redundant separated critical servers or network components?Adapted from the US:DHS Infrastructure Survey Tool (
Are there resources for measures to increase information security?Swedish Water and Wastewater Association. Blåa lista
Are there restricted access areas in the buildings?German Federal Ministry of the Interior. (2008) Prot
Are there restricted access zones on the organization’s grounds?German Federal Ministry of the Interior. (2008) Prot
Are there routines and continuity plans as a means to uphold..Swedish Civil Contingencies Agency. (2015). Indikato
Are there routines for communication to the public?Swedish Civil Contingencies Agency. (2015). Indikato
Are there routines for external supply?Swedish Civil Contingencies Agency. (2015). Indikato
Are there routines to identify critical dependenciesSwedish Civil Contingencies Agency. (2015). Indikato
Are there routines to identify deficiences in SCADA systemsSwedish Civil Contingencies Agency. (2015). Indikato
Are there several power feeds, and do they belong to independent grids?German Federal Ministry of the Interior. (2008) Prot
Are there SHE related sensors dedicated to monitor post event impacts? 
Are there skylights or openings on the ceiling/roof that would allow entry?Adapted from the US:DHS Infrastructure Survey Tool (
Are there software packages for integrated real time monitoring?EU-VRi (2018). SmartResilience project. Stuttgart Ge
Are there spare overhead power line for the distribution grid? 
Are there spare overhead power line for the supply grid? 
Are there spare overhead power line for the transmission grid? 
Are there spare overhead power lines for the supply grid? 
Are there spare power cable for the distribution grid? 
Are there spare power cable for the transmission grid? 
Are there spare power poles for the distribution grid? 
Are there spare power poles for the supply grid? 
Are there spare power poles for the transmission grid? 
Are there spare transformers for the distribution grid? 
Are there spare transformers for the supply grid? 
Are there spare transformers for the transmission grid? 
Are there specific procedures issued for managing the security aspects?RINA InfraStress project (D3.4, T8.4)
Are there steering documents that guides work that may influence..Swedish Water and Wastewater Association. Blåa lista
Are there substitute staff for emergencies?German Federal Ministry of the Interior. (2008) Prot
Are there sufficient guidelines for internal and external communication?VTT. (2017). Presentation for SmartResilience case f
Are there sufficient office supplies?German Federal Ministry of the Interior. (2008) Prot
Are there third-party organizations allowed to enter inside the facility?RINA InfraStress project (D3.4, T8.4)
Are train services to Satellite towns affected? 
Are trainings and drills performed with the emergency teams and critical infrastructure providers?SMR CWA91:2018
Are vehicles examined before introduced into restricted areas?Regulation 300/2008/EC
Are video recordings evaluated?German Federal Ministry of the Interior. (2008) Prot
Are wildfires a critical risk for the country?Organisation for Economic Co-operation and Developme
Areas which business continuity plan for resilience ops. has procedures forAdapted from the US:DHS Infrastructure Survey Tool (
Aspects that the business continuity plan for resilience ops. includesAdapted from the US:DHS Infrastructure Survey Tool (
Assessed profit margin per hour (on-line value, recalculated constantly) 
Assessed profit margin per hour (on-line value, recalculated constantly) 
Assessment of impact over time of not implementing alternatives done?International organization for Standardization(2012)
Assessment of impact over time of not implementing alternatives done?International organization for Standardization(2012)
Asset Classification and LabellingCloud Computing Compliance Controls Catalogue (C5) -
Asset InventoryCloud Computing Compliance Controls Catalogue (C5) -
Asset replacement valueAdapted from the US:DHS Infrastructure Survey Tool (
Assistance government-coordinated spending planAnnex of the resolution adopted by the General Assem
At-home testing kitsDeep Knowledge Group (2020) COVID-19 ranking framewo
Atmospheric pressure 
Attempts to access known file transfer and email exfiltration websitesThe Center for Internet Security, A Measurement Comp
Audit logs validationThe Center for Internet Security, Critical Security
Authenticated vulnerability scansThe Center for Internet Security, Critical Security
AuthorizationCWA16649
Authorization training of personnel ?American Petroleum Institute RP 581 (2000). (3rd ed.
Authorization training of personnel ?American Petroleum Institute RP 581 (2000). (3rd ed.
Authorized software listThe Center for Internet Security, Critical Security
Automated monitoringThe Center for Internet Security, Critical Security
Automated monitoringThe Center for Internet Security, Critical Security
Automated patch managementThe Center for Internet Security, Critical Security
Automated port scansThe Center for Internet Security, Critical Security
Automatic log off after inactivityThe Center for Internet Security, Critical Security
Automatic updated of inventoryThe Center for Internet Security, Critical Security
Availability of 100% long lead itemsCCPS (2007). Guidelines for risk based process safet
Availability of 100% parts for critical equipmentCCPS (2007). Guidelines for risk based process safet
Availability of 30% of standard spare partsCCPS (2007). Guidelines for risk based process safet
Availability of back-up servers 
Availability of engineer occupations at the local market 
Availability of engineers in the emergency situations 
Availability of flood protection equipmentCCC
Availability of fluvial and tidal gauges in place?GOLF, CCC
Availability of gas reservesPAP Serbia
Availability of gel & sand bags available for deployment and appropriate trGOLF, CCC
Availability of relevant hazard sensors in risk areInfraStress Pilot 4
Availability of replacement for key managing positions at the units 
Availability of services for all processing equipment 
Availability of weather forecast dataGOLF, CCC
Available transport units?National Food Agency, Sweden. (2011). Strategi vid v
Ave. cap. of the electric power backup to support the continued operations?Petit, F. et. al (2013). Resilience measurement inde
Ave. cap. of the electric power backup to support the continued operations?Petit, F. et. al (2013). Resilience measurement inde
Average amount of resilience related training imparted to operators?American Petroleum Institute RP 581 (2000). (3rd ed.
Average amount of resilience related training imparted to operators?American Petroleum Institute RP 581 (2000). (3rd ed.
Average damages due to disasters (1980-2016)OFDA/CRED International Disaster Database (www.emdat
Average damages due to disasters as a percentage of GDP (1995-2015)OFDA/CRED International Disaster Database (www.emdat
Average income of small-scale food producersAnnex of the resolution adopted by the General Assem
Average number of disasters per year (1980-2016)OFDA/CRED International Disaster Database (www.emdat
Average SCAP scoreThe Center for Internet Security, A Measurement Comp
Average share of the built-up area of citiesAnnex of the resolution adopted by the General Assem
Average shutdown time in minutesSWH (2018)
Average tariffs faced by developing countriesAnnex of the resolution adopted by the General Assem
Average time of Websites downtime due to malfunctions or unintentional security incidentsETSI GS ISI 001-1 V1.1.2
Average time of Websites downtime due to successful malicious attacksETSI GS ISI 001-1 V1.1.2
Average time taken to clear findings from auditsInternational Atomic energy Agency (2000), Operation
Average time taken to fully implement a change once approvedOGP Process safety - Recommended Practice on Key Per
Average time to remove rogue wireless access pointsThe Center for Internet Security, A Measurement Comp
Avg. disaster-related annual damageOrganisation for Economic Co-operation and Developme
Avg. disaster-related annual damage vs. OECD avgOrganisation for Economic Co-operation and Developme
Avg. disaster-related annual deathsOrganisation for Economic Co-operation and Developme
Avg. disaster-related annual deaths vs. OECD avg.Organisation for Economic Co-operation and Developme
Awareness levels validation and improvementThe Center for Internet Security, Critical Security
B1.Mines, metal smelting and other enterprises,production and operation sites that produce, manage, transport, store and use hazardous substances or dispose of discarded hazardous substances.RiskRadar China - Emergency Ability Asessment
B10.Whether the professional rescue team is equipped with rescue vehicles, communication, fire fighting, reconnaissance, gas analysis, personal protection and other rescue equipment, and has buit exercises and training facilities(2).RiskRadar China - Emergency Ability Asessment
B11.Whether the escape routes is cleared.(1)RiskRadar China - Emergency Ability Asessment
B2.Whether it is equipped with emergency rescue apparatus, equipment and materials as required(1).RiskRadar China - Emergency Ability Asessment
B3.Whether an emergency rescue equipment account has been established and is in conformity with the actual situation?(2)RiskRadar China - Emergency Ability Asessment
B4.Whether an emergency rescue materials account has been established and is in conformity with the actual situation?(2)RiskRadar China - Emergency Ability Asessment
B5.Whether there are regular inspection and maintenance records of emergency rescue equipment in key positions(2).RiskRadar China - Emergency Ability Asessment
B6.Whether to set up obvious safety warning signs on production and operation sites and related equipment and facilities with greater risk factors, indicating risk content, risk degree, safety distance, prevention and control measures, emergency measures, etc(2).RiskRadar China - Emergency Ability Asessment
B7.Whether various alarm devices and emergency rescue equipment and facilities are in good condition and can operate normally(2).RiskRadar China - Emergency Ability Asessment
B8.Whether the key position staff will correctly use the emergency rescue equipment(2).RiskRadar China - Emergency Ability Asessment
B9.Whether risk monitoring communication is effective, accurate and sustainable.(On random inspection the monitoring instruments and operaters)(2).RiskRadar China - Emergency Ability Asessment
Back-channel connections scanningThe Center for Internet Security, Critical Security
Backup available onlineThe Center for Internet Security, A Measurement Comp
Backup failure notificationThe Center for Internet Security, A Measurement Comp
Backup for key systemsThe Center for Internet Security, Critical Security
Backup generators operated without any difficulty in crisis situations?German Federal Ministry of the Interior. (2008) Prot
Backup IMCC can operate indep. of outside utilities for min. 72 hours?Adapted from the US:DHS Infrastructure Survey Tool (
Back-up malfunctionETSI GS ISI 001-1 V1.1.2
Backup protectionThe Center for Internet Security, Critical Security
Backup scheduleThe Center for Internet Security, Critical Security
Backup testingThe Center for Internet Security, A Measurement Comp
Baggage Delivery TimeWyman, O. (2012). Guide to Airport Performance Measu
Baggage Delivery TimeWyman, O. (2012). Guide to Airport Performance Measu
Big Data analysed?[12]Jovanovic. A., et al. (2016). SmartResilience D1
Big Data analysed?[12]Jovanovic. A., et al. (2016). SmartResilience D1
Binaries backupThe Center for Internet Security, A Measurement Comp
Blocked hardware devicesThe Center for Internet Security, A Measurement Comp
Blocked unauthorized configuration changesThe Center for Internet Security, A Measurement Comp
Bodies of water with good ambient water qualityAnnex of the resolution adopted by the General Assem
Bribe paymentAnnex of the resolution adopted by the General Assem
Bribe payment to a public official Annex of the resolution adopted by the General Assem
Browser configurationsThe Center for Internet Security, Critical Security
Business continuity procedures in place?Petit, F. et. al (2013). Resilience measurement inde
Business continuity procedures in place?Petit, F. et. al (2013). Resilience measurement inde
Business continuity manager appointed?Petit, F. et. al (2013). Resilience measurement inde
Business continuity manager appointed?Petit, F. et. al (2013). Resilience measurement inde
Business continuity plan exists?Petit, F. D. P.et. al (2013). Resilience measurement
Business continuity plan exists?Petit, F. D. P.et. al (2013). Resilience measurement
Business continuity plan for resilience ops. approved by senior management?Adapted from the US:DHS Infrastructure Survey Tool (
Business continuity plan for resilience ops. coordinated with stakeholders?Adapted from the US:DHS Infrastructure Survey Tool (
Business continuity plan for resilience ops. exercised at least once/year?Adapted from the US:DHS Infrastructure Survey Tool (
Business continuity training conducted for personnel?Petit, F. D. P.et. al (2013). Resilience measurement
Business continuity training conducted for personnel?Petit, F. D. P.et. al (2013). Resilience measurement
Business continuity Training/exercises?Petit, F. D. P.et. al (2013). Resilience measurement
Business continuity Training/exercises?Petit, F. D. P.et. al (2013). Resilience measurement
Business Interruption valueAdapted from the US:DHS Infrastructure Survey Tool (
C1.Whether the principal person in charge shall fulfill the responsibility of organizing the formulation and implementation of the emergency plan of the unit.RiskRadar China - Emergency Ability Asessment
C10.Whether emergency plans are filed with relevant departments as required(1).RiskRadar China - Emergency Ability Asessment
C11.Whether to carry out emergency plan assessment regularly,including assessing the adaptability of emergency procedures and disposal measures to the enterprise's emergency response capability(3).RiskRadar China - Emergency Ability Asessment
C12.Whether the emergency plan is revised and filed in time(1).RiskRadar China - Emergency Ability Asessment
C2.Whether the enterprise compiles comprehensive emergency plans, major hazards, special emergency plans for major safety risks, on-site disposal plans and emergency disposal cards for key posts(3).RiskRadar China - Emergency Ability Asessment
C3.Whether comprehensive emergency plan covers emergency organization and its responsibilities, emergency plan system, accident risk description, early warning and information report, emergency response, safeguard measures, emergency plan management, etc. (2)RiskRadar China - Emergency Ability Asessment
C4.Whether the emergency disposal plan specify measures to prevent accidents and avoid the expansion of casualties.(On random inspection the emergency disposal (2).RiskRadar China - Emergency Ability Asessment
C5.Whether the emergency plan shall be signed and promulgated by the principal person in charge of the unit,and it is issued to relevant departments, posts and emergency rescue teams of the unit(2).RiskRadar China - Emergency Ability Asessment
C6.Emergency plans are issued to relevant departments, posts and emergency rescue teams of the unit(2).RiskRadar China - Emergency Ability Asessment
C7.Whether the emergency plans of the units are linked up with those of the territorial governments and their departments, emergency rescue teams and other units involved(2).RiskRadar China - Emergency Ability Asessment
C8.Whether to demonstrate or evaluate the plan before it is released(3).RiskRadar China - Emergency Ability Asessment
C9.Whether the mines,metal smelting and other enterpr.,prod. and oper. units of that prod.,oper.,transport,store, use dang. goods or dispose of discarded dang. goods,and any other prod.n and business operation unit above the medium-sized scale have formed a written review sum. of emergency plans.RiskRadar China - Emergency Ability Asessment
Can appropriate security controls requested in any case?Commission Implementing Regulation (EU) 2015/1998 of
Can buildings sufficiently withstand earthquakes?German Federal Ministry of the Interior. (2008) Prot
Can changes weakening the structure of supporting elements be ruled out?German Federal Ministry of the Interior. (2008) Prot
Can flooding of planned or existingfacilities be ruled out?German Federal Ministry of the Interior. (2008) Prot
Can onsite services handle full facility wastewater load?Adapted from the US:DHS Infrastructure Survey Tool (
Can operations be restored?German Federal Ministry of the Interior. (2008) Prot
Can rooms in the crisis management center be darkened for presentations?German Federal Ministry of the Interior. (2008) Prot
Can security data be analysed in real time?Jovanovic. A., et. al. (2017). T5.1: Report from the
Can the air conditioning be partly switched off if needed during pandemic?German Federal Ministry of the Interior. (2008) Prot
Can the IMCC operate independent of outside utilities for min. 72 hours?Adapted from the US:DHS Infrastructure Survey Tool (
Can we access personnel from others?National Food Agency, Sweden. (2011). Strategi vid v
Capability of CCTVAdapted from the US:DHS Infrastructure Survey Tool (
Capacity for accelerated clnical trialsDeep Knowledge Group (2020) COVID-19 ranking framewo
Capacity Management - Controlling of ResourcesCloud Computing Compliance Controls Catalogue (C5) -
Capacity Management – MonitoringCloud Computing Compliance Controls Catalogue (C5) -
Capacity Management - PlanningCloud Computing Compliance Controls Catalogue (C5) -
Capacity of the reservoirGOLF, ESB, OPW
Cargo payload from the bills of materials database 
Cargo payload from the bills of materials database 
Cargo volumeWyman, O. (2012). Guide to Airport Performance Measu
Cargo volumeWyman, O. (2012). Guide to Airport Performance Measu
Categorized inventory of critical processes with performance guidelines?German Federal Ministry of the Interior. (2008) Prot
CCTV cameras data ("expert evaluation") 
CCTV cameras data ("expert evaluation") 
Census in the last 10 yearsAnnex of the resolution adopted by the General Assem
Centralized file reputationThe Center for Internet Security, Critical Security
Centralized logsThe Center for Internet Security, A Measurement Comp
Centralized points of authenticationThe Center for Internet Security, Critical Security
Characterize the construction of the weakest door that provides accessAdapted from the US:DHS Infrastructure Survey Tool (
Characterize the external IDS alarm enunciatorsAdapted from the US:DHS Infrastructure Survey Tool (
Characterize the facility’s assessment of exterior IDS alarmsAdapted from the US:DHS Infrastructure Survey Tool (
Characterize the facility’s assessment of interior IDS alarmsAdapted from the US:DHS Infrastructure Survey Tool (
Characterize the facility’s monitoring of the external IDSAdapted from the US:DHS Infrastructure Survey Tool (
Characterize the facility’s monitoring of the interior IDSAdapted from the US:DHS Infrastructure Survey Tool (
Characterize the interior IDS alarm enunciatorsAdapted from the US:DHS Infrastructure Survey Tool (
Characterize the protective measures on the weakest ground floor window(s)Adapted from the US:DHS Infrastructure Survey Tool (
Characterize weakest exterior/perimeter wall at the facility or SAAAdapted from the US:DHS Infrastructure Survey Tool (
Check-in to Gate TimeWyman, O. (2012). Guide to Airport Performance Measu
Check-in to Gate TimeWyman, O. (2012). Guide to Airport Performance Measu
Child labourAnnex of the resolution adopted by the General Assem
Clear goals and blended attacks in penetration testsThe Center for Internet Security, Critical Security
Clear roles and responsibilities defined for a flood eventGOLF, CCC
Client machines access only authorised wireless networksThe Center for Internet Security, Critical Security
Clone CoverageEU-VRi
Close or authorize newly detected servicesThe Center for Internet Security, A Measurement Comp
CO2 emission per unit of value addedAnnex of the resolution adopted by the General Assem
Commissioning of HardwareCloud Computing Compliance Controls Catalogue (C5) -
Commitment to Permissible Use, Safe Handling and Return of AssetsCloud Computing Compliance Controls Catalogue (C5) -
CommunicationCWA16649
CommunicationCWA16649
Communication system for public health and healthcare workers during a public health emergency?GHS 4.4.1a (www.ghsindex.org)
Communication with customersVTT
Company’s information systems accessible in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Company’s radio & radio technology accessible in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Company’s video surveillance system accessible in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Completed and published a report on a Joint External Evaluation (JEE) or other evaluation in the last five years?GHS 5.4.1a (www.ghsindex.org)
Completeness of investigation proceduresAmerican Petroleum Institute RP 581 (2000). (3rd ed.
Compliance with budget in previous business periods  
Components of the natural gas supply inside the building are protectedAdapted from the US:DHS Infrastructure Survey Tool (
Components of the natural gas supply outside the building are protectedAdapted from the US:DHS Infrastructure Survey Tool (
Components of the water supply inside the building are protectedAdapted from the US:DHS Infrastructure Survey Tool (
Components of the water supply outside the building are protectedAdapted from the US:DHS Infrastructure Survey Tool (
Components of wastewater service inside the building are protectedAdapted from the US:DHS Infrastructure Survey Tool (
Components of wastewater service outside the building are protectedAdapted from the US:DHS Infrastructure Survey Tool (
Comprehensive loggingThe Center for Internet Security, A Measurement Comp
Confidentiality agreementsCloud Computing Compliance Controls Catalogue (C5) -
Configuration change detectionThe Center for Internet Security, A Measurement Comp
Configuration change reversalThe Center for Internet Security, A Measurement Comp
Configuration monitoringThe Center for Internet Security, Critical Security
Configuration vulnerability exploitationETSI GS ISI 001-1 V1.1.2
Conflicts about interest, values and scienceCWA16649
Conservation and sustainable use of biodiversity and ecosystemsAnnex of the resolution adopted by the General Assem
Conservation and sustainable use of biodiversity and ecosystemsAnnex of the resolution adopted by the General Assem
Constitutional, statutory and/or policy guarantees for public access to informationAnnex of the resolution adopted by the General Assem
Contact with Relevant Government Agencies and Interest GroupsCloud Computing Compliance Controls Catalogue (C5) -
Container/pipe protection against mechanical damage from floating debris?German Federal Ministry of the Interior. (2008) Prot
Content of the resilience related training module?American Petroleum Institute RP 581 (2000). (3rd ed.
Content of the resilience related training modules adequate?American Petroleum Institute RP 581 (2000). (3rd ed.
Continuity plan for resilience ops. Identifies critical processes & assetsAdapted from the US:DHS Infrastructure Survey Tool (
Continuity plan with wastewater discharge provider for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Contracted services versus installed equipmentCompany's Stadard SD-03.05.03 Preventive maintenanc
ContradictionCWA16649
Control and monitoring of accounts used for penetration testsThe Center for Internet Security, Critical Security
Convenient access to public transportAnnex of the resolution adopted by the General Assem
Cooperation with local health authorities on preliminary pandemic planning?German Federal Ministry of the Interior. (2008) Prot
Cork City Council activates Flood Emergency Plan (Y/N)GOLF, CCC
Corrective actions completed from incident investigationCCPS. (2011). Process safety leading and lagging met
Cost of flood damage to commercial premises and stock destroyedIrish Examiner
Could the land on which buildings are located b eaffected by washouts?German Federal Ministry of the Interior. (2008) Prot
Countries that have implemented well-managed migration policiesAnnex of the resolution adopted by the General Assem
Country can ensure function of critical infrastructure following a shock?Organisation for Economic Co-operation and Developme
Country population density per km2Deep Knowledge Group (2020) COVID-19 ranking framewo
Country requires first responders stationed at critical infrastructure?Organisation for Economic Co-operation and Developme
Country shares information on protective measures for imminent hazards?Organisation for Economic Co-operation and Developme
Country shares information to stimulate investment in self-protection?Organisation for Economic Co-operation and Developme
Coupling Between Object classesEU-VRi
Coverage of critical events monitoredResolute Assessment Methodology
Coverage of essential health servicesAnnex of the resolution adopted by the General Assem
Coverage of monitored infrastructure/elements at risk 
Coverage of protected areas in relation to marine areasAnnex of the resolution adopted by the General Assem
Coverage of sensors in risk area Resolute Assessment methodology
Coverage of treatment interventions for substance use disordersAnnex of the resolution adopted by the General Assem
COVID-19 vaccination policy.(Highest level of availability attained for the particular year)Hale et. al. (2021). “A global panel database of pan
CPU requests 
CPU requests (breakdown per pod) 
CPU utilisation (%) 
Credibility or good image affected? 
Criminal penalties for violating the quarantineDeep Knowledge Group (2020) COVID-19 ranking framewo
Crisis management center located inprotected area or alternate site?German Federal Ministry of the Interior. (2008) Prot
Crisis mgmt. center has a press center with necessary equipment?German Federal Ministry of the Interior. (2008) Prot
Critical areas identified which need backup power supply in case of crisis?German Federal Ministry of the Interior. (2008) Prot
Critical chemical source lost (no backup), % functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Critical chemical source lost (with backup), % functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Critical fuel source lost (no backup), % functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Critical fuel source lost (with backup), % functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Critical products /service available during an event?Petit, F. et. al (2013). Resilience measurement inde
Critical products /service available during an event?Petit, F. et. al (2013). Resilience measurement inde
Critical raw material source lost (has backup), % functions lost/degradedAdapted from the US:DHS Infrastructure Survey Tool (
Critical raw material source lost (no backup), % functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Critical staff informed about isolation during a pandemic incident?German Federal Ministry of the Interior. (2008) Prot
Critical supply chain is assured. Supply chain maintained to cotractual le 
Critical waste disposal service lost (has backup), % function lost/degradedAdapted from the US:DHS Infrastructure Survey Tool (
Critical waste disposal service lost (no backup), % functions lost/degradedAdapted from the US:DHS Infrastructure Survey Tool (
Cross-border agreements with neighbouring countries concerning public health emergencies?GHS 5.2.1a (www.ghsindex.org)
Culture specifics and socieal disciplineDeep Knowledge Group (2020) COVID-19 ranking framewo
Current receive bandwidth (Bytes) (by pod) (last 5 minutes) 
Current receive bandwidth (Bytes) (last 5 minutes) 
Current transmit bandwidth (Bytes) (by pod) (last 5 minutes)  
Current transmit bandwidth (Bytes) (last 5 minutes) 
Cyber physical risk assessment doneVTT
Cyber security management review done?VTT
Cyclomatic ComplexityEU-VRi
D1.Whether the emergency drill plan has been made and whether the whole staff has been covered(3).RiskRadar China - Emergency Ability Asessment
D2.Whether comprehensive emergency plans and special emergency plans can be practiced at least once a year(5).RiskRadar China - Emergency Ability Asessment
D3.Whether the on-site disposal plan should be practiced at least once every six months(8).RiskRadar China - Emergency Ability Asessment
D4.Spot check desktop walkthrough and draw evaluation conclusions.The scope includes major hazard sources, special plans for major safety risks and on-site disposal plans for key posts(5).RiskRadar China - Emergency Ability Asessment
D5.Whether the emergency drill should be evaluated and summarized in writing(2).RiskRadar China - Emergency Ability Asessment
D6.Whether the improvement Suggestions of emergency plan have been implemented in the drill evaluation report(2).RiskRadar China - Emergency Ability Asessment
Dangerous or illicit servicesETSI GS ISI 001-1 V1.1.2
Dangerous protocols used (laptop)ETSI GS ISI 001-1 V1.1.2
Dangerous protocols used (other)ETSI GS ISI 001-1 V1.1.2
Dangerous protocols used (outbound setup)ETSI GS ISI 001-1 V1.1.2
Dangerous protocols used (P2P)ETSI GS ISI 001-1 V1.1.2
Dangerous protocols used (P2P)ETSI GS ISI 001-1 V1.1.2
Dangerous protocols used (unsecure protocols)ETSI GS ISI 001-1 V1.1.2
Dangerous protocols used (VoIP)ETSI GS ISI 001-1 V1.1.2
Dangerous protocols used (VoIP)ETSI GS ISI 001-1 V1.1.2
Data assessment for encryptionThe Center for Internet Security, Critical Security
Data Backup and Recovery - Regular TestingCloud Computing Compliance Controls Catalogue (C5) -
Data Backup and Recovery - StorageCloud Computing Compliance Controls Catalogue (C5) -
Data distribution architecture protected? 
Data Protection and Recovery – ConceptCloud Computing Compliance Controls Catalogue (C5) -
Data restoration processThe Center for Internet Security, Critical Security
Data sets backupThe Center for Internet Security, A Measurement Comp
Database systems not scanned by database specific vulnerability scannerThe Center for Internet Security, A Measurement Comp
Deactivated accounts monitoringThe Center for Internet Security, Critical Security
Deactivating of logs recordingETSI GS ISI 001-1 V1.1.2
Death rate due to road traffic injuriesAnnex of the resolution adopted by the General Assem
Debrief and review reports on exercises and real flood eventsGOLF, CCC
Debt service as a proportion of exports of goods and servicesAnnex of the resolution adopted by the General Assem
Decommissioning of HardwareCloud Computing Compliance Controls Catalogue (C5) -
Dedicated admin machineThe Center for Internet Security, Critical Security
Dedicated machine for network administrative tasksThe Center for Internet Security, Critical Security
Default passwordsThe Center for Internet Security, Critical Security
Default passwordsThe Center for Internet Security, Critical Security
Defined time period for critical area connection to backup power supply?German Federal Ministry of the Interior. (2008) Prot
Denial of ServiceETSI GS ISI 001-1 V1.1.2
Density of transportation networkDeep Knowledge Group (2020) COVID-19 ranking framewo
Deny communicationThe Center for Internet Security, Critical Security
Depth of Inheritance TreeEU-VRi
Desinfioinnin onnistuminen - Success of disinfectionVTT workshop 16.4.2018
Detail of surge modelling predictionsGOLF, MET, OPW
Detailed audit loggingThe Center for Internet Security, Critical Security
Details of wind speed and directionhttps://www.windows2universe.org/earth/Atmosphere/wi
Details of wind speed and directionGOLF, CCC
Detect dormant accountsThe Center for Internet Security, Critical Security
Detection of configuration changes to network systemThe Center for Internet Security, A Measurement Comp
Developed and operationalized national strategy for youth employmentAnnex of the resolution adopted by the General Assem
DHCP LoggingThe Center for Internet Security, Critical Security
DHCP LoggingThe Center for Internet Security, Critical Security
Did the country already go through similar situations/events in the past and were necessary measures taken to be better prepared for future events? 
Did the organization implement any related industry sector specific standard/recommendations in its management system?InfraStress Pilot 4
Did the price of alternative energy products increase?PAP Serbia
DIF-PerceptionCWA16649
Digital/printed plans: building layout, supply/return lines, access routes?German Federal Ministry of the Interior. (2008) Prot
Direct economic loss attributed to disasters Annex of the resolution adopted by the General Assem
Direct line in crisis mgmt. center to important companies and authorities?German Federal Ministry of the Interior. (2008) Prot
Direct participation structure of civil society in urban planningAnnex of the resolution adopted by the General Assem
Disabled or obsolete anti-malwareThe Center for Internet Security, A Measurement Comp
Disabled peer-to-peer on clientsThe Center for Internet Security, Critical Security
Disabled wireless peripheralsThe Center for Internet Security, Critical Security
Discharge levels at river damGOLF, CCC, ESB, OPW
Disciplinary measuresCloud Computing Compliance Controls Catalogue (C5) -
Discovery of attacksETSI GS ISI 001-1 V1.1.2
Disposable household income per capitaOECD Statistics (2018), http://data.oecd.org
Disruption air transport would cause significant operations disruptionAdapted from the US:DHS Infrastructure Survey Tool (
Disruption of rail transport would cause significant operations disruptionAdapted from the US:DHS Infrastructure Survey Tool (
Disruption of road transport would cause significant operations disruptionAdapted from the US:DHS Infrastructure Survey Tool (
DMZ recordingThe Center for Internet Security, Critical Security
DNS query loggingThe Center for Internet Security, Critical Security
DNS query loggingThe Center for Internet Security, Critical Security
Do all systems, including an explicit SCADA system..Swedish Water and Wastewater Association. Blåa lista
Do backup generators meet the current capacity and quality requirements?German Federal Ministry of the Interior. (2008) Prot
Do BSI propose councils activities and issue of CI providers?Project Group LÜKEX Bund, Federal Office of Civil Pr
Do building entrances and delivery areas have illumination?Adapted from the US:DHS Infrastructure Survey Tool (
Do CI providers share information about IT-threats/attacks?Project Group LÜKEX Bund, Federal Office of Civil Pr
Do external companies have access to control centers/ control rooms? 
Do external companies have access to grid operation buildings? 
Do external companies have access to HVDC converter stations? 
Do external companies have access to substations/ transformer substations? 
Do fences, gates, and parking areas have illumination?Adapted from the US:DHS Infrastructure Survey Tool (
Do onsite water sources produce enough water to handle full facility load?Adapted from the US:DHS Infrastructure Survey Tool (
Do staff receive refresher training?European Commission (2015). Commission Implementing
Do staff working at the organization have sufficient local knowledge?German Federal Ministry of the Interior. (2008) Prot
Do Standard Operating Procedures (SOP) exist? 
Do surveillance systems for (transformer) substations exist? 
Do surveillance systems for control center/ control rooms exist? 
Do surveillance systems for grid operation buildings exist? 
Do surveillance systems for HVDC converter stations exist? 
Do the above ground tanks have secondary containment?Draft proposal on possible resilience or functionali
Do the availble medical personal equipment quantities take into consideration excess workload? 
Do the municipality have a systematic process for information security..Swedish Civil Contingencies Agency. (2015). Indikato
Do the storage tanks have a fluid level management in place?Draft proposal on possible resilience or functionali
Do the underground tanks have leak detection?InfraStress Pilot 3
Do these authorities know who is responsible for what in the organization?German Federal Ministry of the Interior. (2008) Prot
Do waterside areas have illumination?Adapted from the US:DHS Infrastructure Survey Tool (
Do you continuously control that reset and configuration data..Swedish Water and Wastewater Association. Blåa lista
Do you continuously control that that your security-related instructions..Swedish Water and Wastewater Association. Blåa lista
Do you have a flood emergency response plan?GOLF, CCC
Do you have access to competence in automation and control during vacation?Svenskt Vatten (2016). Resultatrapport för hållbarhe
Do you have access to competence in process engineering during vacation?Svenskt Vatten (2016). Resultatrapport för hållbarhe
Do you have an Inter-Agency Office to enhance co-ordination?GOLF, CCC
Do you have continuity goals related to the business that require..Swedish Water and Wastewater Association. Blåa lista
Do you have continuous power to critical parts of your SCADA systems..Swedish Water and Wastewater Association. Blåa lista
Do you have routines for when and how SCADA systems may be taken down..Swedish Water and Wastewater Association. Blåa lista
Do you have routines to protect SCADA systems from unintentional import..Swedish Water and Wastewater Association. Blåa lista
Do you have routines to protect suppliers coupling their..Swedish Water and Wastewater Association. Blåa lista
Do you monitor and perform analysis of potential new threats against..Swedish Water and Wastewater Association. Blåa lista
Do you monitor network status for SCADA systems so that unwanted..Swedish Water and Wastewater Association. Blåa lista
Document TemplateEU-VRi template
Documentation, communication and provision of policies and instructionsCloud Computing Compliance Controls Catalogue (C5) -
Documenting of new configuration rulesThe Center for Internet Security, Critical Security
Documenting of Red Team resultsThe Center for Internet Security, Critical Security
Does the crisis strategy emphasizes on the user? AISIS – Automatisierte Informationsgewinnung und Sch
Does the crisis strategy emphasizes on the user? AISIS – Automatisierte Informationsgewinnung und Sch
Does a boil notice procedure exist?GOLF, CCC
Does a civic emergency plan exist?GOLF, CCC
Does a Flood Risk Assessment and Management Study exist?GOLF, OPW, CCC
Does a Flood Traffic Management Plan exist?GOLF, CCC
Does a framework to deal with social unrest exist in the company governance?O. Renn, A. Jovanovic, R. Schröter. (2011). OECD/IFP
Does a housing sub plan exist. Can venerable people be quickly identified?GOLF, CCC
Does a Housing Sub Plan Exist? 
Does a register of homeless people exist?GOLF, CCC
Does a severe weather leaflet for citizen preparedness exist?GOLF, CCC
Does a sound security concept for grid components exist? 
Does a standardized training program exist?  
Does an IT risks in the catalogue exist?EU-VRi (2018) SmartResilience project database, Smar
Does management ask for risk/safety/resilience performance data & follow-upInspired by Annex 1 - Generic resilience indicators
Does management have an explicit focus on SCADA security work?Swedish Water and Wastewater Association. Blåa lista
Does organisation has procedure for investigation of HSE events?Company's Standard SD-09.01.15 HSE incident manageme
Does site geometry adequately shield crucial electronics from IEMI?IEC (2014) Electromagnetic compatibility (EMC) –Part
Does staff development take security aspects into account?German Federal Ministry of the Interior. (2008) Prot
Does the above ground equipment have leak detection?Draft proposal on possible resilience or functionali
Does the building have an effective alarm system?European Commission (2015). Commission Implementing
Does the building have an effective CCTV system?European Commission (2015). Commission Implementing
Does the building have an effective surveillance system?European Commission (2015). Commission Implementing
Does the CI have an effective Physical monitoring system?European Commission (2015). Commission Implementing
Does the CI Register risks?The Association of Insurance and Risk Managers (2009
Does the city have a Risk Catalog?SMR CWA91:2018
Does the communication plan build consistency across management discipline?International organization for Standardization (2016
Does the communication plan build consistency across management discipline?International organization for Standardization (2016
Does the company employ security personnel for grid operation buildings? 
Does the company employ security personnel for HVDC converter stations? 
Does the company engage in social media activities?InfraStress - CARMA
Does the company evaluate the effectiveness of training sessions?InfraStress - CARMA
Does the Company evaluate work related stress risk?InfraStress Pilot 3
Does the company have a radio communications system?German Federal Ministry of the Interior. (2008) Prot
Does the company have insurance policies?InfraStress - CARMA
Does the company instruct visitors about Seveso related emergency procedures?InfraStress - CARMA
Does the Company periodically test the internal emergency plan?InfraStress - CARMA
Does the company periodically update the insurance policy?InfraStress - CARMA
Does the company provide an ICT security concept? 
Does the company recognise ICT security issues? 
Does the Company respect the periodicity?InfraStress Pilot 3
Does the Company respect the prescribed adjustment periodicity?InfraStress Pilot 3
Does the Company take into account corrective actions in the management of non-compliance?InfraStress Pilot 3
Does the company train external personnel about Seveso related emergency procedures?InfraStress - CARMA
Does the company update the Internal Emergency Plan?InfraStress - CARMA
Does the company use ICT security components? 
Does the company use secured internet connections? 
Does the contingency plan list the authorities to be notified?German Federal Ministry of the Interior. (2008) Prot
Does the country conduct emergency response exercises?Organisation for Economic Co-operation and Developme
Does the country conduct horizon scanning exercises?Organisation for Economic Co-operation and Developme
Does the country conduct local risk assessment?Organisation for Economic Co-operation and Developme
Does the country conduct media briefings regarding risks?Organisation for Economic Co-operation and Developme
Does the country conduct national risk assessment?Organisation for Economic Co-operation and Developme
Does the country conduct research on emerging risks?Organisation for Economic Co-operation and Developme
Does the country conduct research on risk interlinkages?Organisation for Economic Co-operation and Developme
Does the country have a critical infrastructure protection program?Organisation for Economic Co-operation and Developme
Does the country have a public education system regarding risks?Organisation for Economic Co-operation and Developme
Does the country have mandatory emergency preparedness reqs. for CIs?Organisation for Economic Co-operation and Developme
Does the country have mandatory vulnerability information sharing for CIs?Organisation for Economic Co-operation and Developme
Does the country have standards/toolkits for business continuity?Organisation for Economic Co-operation and Developme
Does the country have voluntary vulnerability information sharing for CIs?Organisation for Economic Co-operation and Developme
Does the country provide information on CI exposure terrorist threats?Organisation for Economic Co-operation and Developme
Does the country provide information on CI exposure to natural hazards?Organisation for Economic Co-operation and Developme
Does the country target vulnerable populations with risk information?Organisation for Economic Co-operation and Developme
Does the country use platforms for two-way communication about risks?Organisation for Economic Co-operation and Developme
Does the crisis management center have rooms for retreat, rest, eating?German Federal Ministry of the Interior. (2008) Prot
Does the crisis mgmt. center have computers and external storage media?German Federal Ministry of the Interior. (2008) Prot
Does the facility exchange information with an Emergency Operation Center?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have a backup generator for electricity?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have a control and business network?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have a written Emergency Operation/Action plan?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have an alternate or backup if loss of external source?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have an Incident Management and Command Center (IMCC)?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have an internal electric power source?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have an internal wastewater discharge service?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have doors?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility have IBCDRP?Sahebjamnia, N., Torabi, AS., Mansouri, SA. (2015).
Does the facility have Uninterrupted Power System (UPS)/Battery backup?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility or SAA have a high-speed avenue(s) of approach?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility report cybersecurity incidents to outside organizations?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility require specialized items to recover full operations?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility use Backup Data Storage?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility utilize closed circuit television (CCTV?)Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility/SAA have access ports to SAAs other than a building?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility/SAA have an air handling system?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility/SAA have windows?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility/SAA utilize an exterior intrusion detection system (IDS)?Adapted from the US:DHS Infrastructure Survey Tool (
Does the facility/SAA utilize an interior intrusion detection system?Adapted from the US:DHS Infrastructure Survey Tool (
Does the fence indicate a breach?IEC 61508, IEC 61511, PSMS
Does the firewall indicate a breach?IEC 61508, IEC 61511, PSMS
Does the grid provide earth fault compensation systems? 
Does the grid provide robust HVDC converter technologies? 
Does the grid use an earth fault robust grounding scheme?  
Does the ICT network topology provide secured networks for grid components? 
Does the industry change production to meet the current equipment requirements? 
Does the insurance company revaluate the extent of the damage following an accident? 
Does the insurance policy cover the refund 100% of the damage?InfraStress Pilot 3
Does the insurance policy cover the refund 100% of the damage?InfraStress - CARMA
Does the interior IDS system include door sensors?Adapted from the US:DHS Infrastructure Survey Tool (
Does the interior IDS system include window sensors?Adapted from the US:DHS Infrastructure Survey Tool (
Does the Local Response Centre (LRC) exist?  
Does the municipality convene a cooperative forum forSwedish Civil Contingencies Agency. (2015). Indikato
Does the municipality have a designated emergency preparedness officer?Swedish Civil Contingencies Agency. (2015). Indikato
Does the municipality have a plan for training and exercizeSwedish Civil Contingencies Agency. (2015). Indikato
Does the municipality have a plan to reduce risk or..Swedish Civil Contingencies Agency. (2015). Indikato
Does the municipality have an emergency plan for how to organize..Swedish Civil Contingencies Agency. (2015). Indikato
Does the municipality have an emergency plan for how to safely communicateSwedish Civil Contingencies Agency. (2015). Indikato
Does the municipality have an emergency plan for how to..Swedish Civil Contingencies Agency. (2015). Indikato
Does the municipality have routines for participating in regional..Swedish Civil Contingencies Agency. (2015). Indikato
Does the municipality have routines to evaluate events and exercizes?Swedish Civil Contingencies Agency. (2015). Indikato
Does the organisation have a Business continuity Manager? International organization for Standardization(2012)
Does the organisation have a Business continuity Manager? International organization for Standardization(2012)
Does the organisation hold a ISO 14000 series certification or similar?InfraStress - CARMA
Does the organisation hold a ISO 9000 series certification or similar? 
Does the organisation hold a valid ISO 14000 series certification or similar?InfraStress Pilot 3
Does the organisation hold a valid ISO 14000 series/EMAS certification or similar?InfraStress Pilot 4
Does the organisation hold a valid ISO 45000 series certification or similar?InfraStress Pilot 3
Does the organisation hold a valid ISO 45001 or OHSAS 8001 certification or similar?InfraStress Pilot 4
Does the organization appoint liaison officers to crisis task forces?German Federal Ministry of the Interior. (2008) Prot
Does the organization conduct exercises as per BCMS?International organisation for Standardization(2012)
Does the organization conduct exercises as per BCMS?International organisation for Standardization(2012)
Does the organization consider the context while planning for resilience?International organization for Standardization (2016
Does the organization consider the context while planning for resilience?International organization for Standardization (2016
Does the organization have a Cybersecurity Plan?Adapted from the US:DHS Infrastructure Survey Tool (
Does the organization hold a valid certificate related to the possible above mentioned standards/codes?InfraStress Pilot 4
Does the organization hold a valid environmental permit for its operations as specific SIPS?InfraStress - CARMA
Does the organization maintain a supply of antiviral medicines?German Federal Ministry of the Interior. (2008) Prot
Does the organization monitor events for loss of primary containment?CCPS. (2011). Process safety leading and lagging met
Does the organzation conduct exercises as per BCMS?International organisation for Standardization(2012)
Does the power grid operator also own their ICT network? 
Does the power grid provide enough black start capability? 
Does the power grid provide reactive power compensation sites? 
Does the power grid provide sufficient control energy? 
Does the process exist for establishing minimum technical expertise of the individual board members?CEC
Does the process exist for establishing minimum technical expertise of the response/BCM teams?CEC
does the regulation support actions such as travel restrictions, closing borders and personal quarantine?https://www.gesetze-im-internet.de/ifsg/__5.html Ges
Does the risk management follow specifically defined work processes?German Federal Ministry of the Interior. (2008) Prot
Does the RTU/PLC report good connection?IEC 61508, IEC61511, PSMS
Does the Safety and/or Security Risk Registry exist in the organization? 
Does the security service consists of internal or external personnel?InfraStress Pilot 3
Does the sensor detect access to confined spaces?InfraStress Pilot 3
Does the sensor detect the access to confidential spaces? (e.g. access points to the underground plants)InfraStress - CARMA
Does the smart surveillance system equipped to detect object removal?Hampapur. A. et.al. (2003). Smart surveillance: appl
Does the smart surveillance system equipped to do motion detection?Hampapur. A. et.al. (2003). Smart surveillance: appl
Does the social media contents covering safety/security topics?InfraStress - CARMA
Does the system have outside air intakes?Adapted from the US:DHS Infrastructure Survey Tool (
Does your facility use some standard to guide risk management activities?Adapted from the US:DHS Infrastructure Survey Tool (
Does your organization have the requisite and relevant..Swedish Water and Wastewater Association. Blåa lista
Domestic material consumptionAnnex of the resolution adopted by the General Assem
Domestic material consumptionAnnex of the resolution adopted by the General Assem
DreadCWA16649
Drills for the firefighters fulfilled according to the planSD-09.02.01 - Protection From Fire and Explosion Sta
Duration CWA16649
Duration of electricity backup generation without refuelingAdapted from the US:DHS Infrastructure Survey Tool (
Duration of SAA backup (if employed)Adapted from the US:DHS Infrastructure Survey Tool (
Duration of the alternative backup IT serviceAdapted from the US:DHS Infrastructure Survey Tool (
Duration of the communication service backupAdapted from the US:DHS Infrastructure Survey Tool (
Duration of the natural gas backupAdapted from the US:DHS Infrastructure Survey Tool (
Duration of the water alternativeAdapted from the US:DHS Infrastructure Survey Tool (
Duration of UPS/Battery backupAdapted from the US:DHS Infrastructure Survey Tool (
During/after an incident, is the backup power supply switched on?German Federal Ministry of the Interior. (2008) Prot
E1.Whether the main person in charge has received training and passed the examination(2).RiskRadar China - Emergency Ability Asessment
E2.Whether the emergency management personnel of production safety have been trained and passed the examination(2).RiskRadar China - Emergency Ability Asessment
E3.Whether to carry out safety education and training for employees(2).RiskRadar China - Emergency Ability Asessment
E4.Whether to include the knowledge of emergency response and self-rescue and mutual rescue into the content and training plan of enterprise safety production education and training(2).RiskRadar China - Emergency Ability Asessment
E5.Conduct emergency plan training and keep records(2).RiskRadar China - Emergency Ability Asessment
E6.Whether front-line staff grasp the disposal plan for position of the site and the content on emergency disposal card (3).RiskRadar China - Emergency Ability Asessment
E7.Whether the professional rescue teams have provided training to the relevant persons in charge, rescue management personnel, mine rescue teams and part-time mine rescue team commanders and fighters on schedule(2).RiskRadar China - Emergency Ability Asessment
Ec1. Asset losses and cost of copingFederal Office for Civil Protection (FOCP) (2020): N
Ec1. Capacity to improve how to handle asset losses and cost of copingFederal Office for Civil Protection (FOCP) (2020): N
Ec1. Preparedness to handle asset losses and cost of copingFederal Office for Civil Protection (FOCP) (2020): N
Ec1. Susceptibility to have asset losses and cost of copingFederal Office for Civil Protection (FOCP) (2020): N
Ec2. Capacity to improve how to handle reduction of economic performanceFederal Office for Civil Protection (FOCP) (2020): N
Ec2. Preparedness to handle reduction of economic performanceFederal Office for Civil Protection (FOCP) (2020): N
Ec2. Reduction of economic performanceFederal Office for Civil Protection (FOCP) (2020): N
Ec2. Susceptibility to have reduction of economic performanceFederal Office for Civil Protection (FOCP) (2020): N
Economic and supply chain freezingDeep Knowledge Group (2020) COVID-19 ranking framewo
Economic inoperability between the Example Oil Refinery headquater and Angola (€/day)NIS (2016). Financial figures, NIS refinary, Serbia
Economic inoperability between the NIS serbia and Angola (€/day)NIS (2016). Financial figures, NIS refinary, Serbia
Economic support for quarantined citizensDeep Knowledge Group (2020) COVID-19 ranking framewo
Educational measurementAnnex of the resolution adopted by the General Assem
Educational measurementAnnex of the resolution adopted by the General Assem
Efficiency of dyagnotics technologyDeep Knowledge Group (2020) COVID-19 ranking framewo
Efficiency of Government StructureDeep Knowledge Group (2020) COVID-19 ranking framewo
Efficient IT management in place? (procurement, development , maintenance)German Federal Ministry of the Interior. (2008) Prot
EMA Appruval Process Demo IndicatorR-Tech
E-mail attachmentsThe Center for Internet Security, Critical Security
Emergency Backup Power of CCTVAdapted from the US:DHS Infrastructure Survey Tool (
Emergency control centre designated & operational?American Petroleum Institute RP 581 (2000). (3rd ed.
Emergency control centre designated & operational?American Petroleum Institute RP 581 (2000). (3rd ed.
Emergency control centre designated & operational?Petit, F. et. al (2013). Resilience measurement inde
Emergency Management Manager appointed?Petit, F. D. P.et. al (2013). Resilience measurement
Emergency Management Manager appointed?Petit, F. D. P.et. al (2013). Resilience measurement
Emergency measure mobilization capabilitiesDeep Knowledge Group (2020) COVID-19 ranking framewo
Emergency plan defined?American Petroleum Institute RP 581 (2000). (3rd ed.
Emergency plan defined?American Petroleum Institute RP 581 (2000). (3rd ed.
Emergency plan inclusions?American Petroleum Institute RP 581 (2000). (3rd ed.
Emergency plan inclusions?American Petroleum Institute RP 581 (2000). (3rd ed.
Emergency reporting system method Resolute Methodology
Emergency Response and Mitigation actions identified in Internal Emergency Plan (IEP)Section B.6 Emergency Response and Mitigation, OECD
Employees working very long hoursOECD Statistics (2018), http://data.oecd.org
Employment of security personnel for control center/ control rooms? 
Employment of security personnel for substations/ transformer substations? 
Employment rateOECD Statistics (2018), http://data.oecd.org
Employment terms and conditionsCloud Computing Compliance Controls Catalogue (C5) -
En1. Capacity to improve how to handle damage area environmentFederal Office for Civil Protection (FOCP) (2020): N
En1. Damage area environmentFederal Office for Civil Protection (FOCP) (2020): N
En1. Preparedness to handle damage area environmentFederal Office for Civil Protection (FOCP) (2020): N
En1. Susceptibility to have damage area environmentFederal Office for Civil Protection (FOCP) (2020): N
Encryption and hashing of authentication filesThe Center for Internet Security, Critical Security
Encryption of communicationThe Center for Internet Security, Critical Security
Energy intensity Annex of the resolution adopted by the General Assem
Enough parking space in the immediate vicinity of crisis management center?German Federal Ministry of the Interior. (2008) Prot
Enough pumping capacity to empty tunnel?HELEN
Enough rerouting capacity for heat flow?HELEN
Ensitiedotteen lähtönopeus - Time to initial communicationVTT - Workshop 16.4.2018
Epidemiology system level of developmentDeep Knowledge Group (2020) COVID-19 ranking framewo
Error checking for in-house developed softwareThe Center for Internet Security, Critical Security
Establishment or operationalization of an integrated policy/strategy/planAnnex of the resolution adopted by the General Assem
Evaluate: how comprehensive are the measures to increase critical infrastructure redundancy and reliability?SMR CWA91:2018
Evaluate: how effective are the city's adaptability measures?SMR CWA91:2018
Evaluate: how well is resources/tool sharing promoted among critical infrastructure operators within the region during crises?SMR CWA91:2018
Events due to deficiency in procedures recorded?International Atomic energy Agency (2000), Operation
Events due to deficiency in procedures recorded?International Atomic energy Agency (2000), Operation
Evolution in timeCWA16649
Exceptions from Existing Policies and InstructionsCloud Computing Compliance Controls Catalogue (C5) -
Exercises to practice internal & external alert and information processes?German Federal Ministry of the Interior. (2008) Prot
Existance Emergency exercise PlanCCPS (2007). Guidelines for risk based process safet
Existence of Flood Plain MapsGOLF, CCC
Existence of national laws on IT security for energy network providers? 
Expenditure spent on the preservation of all cultural and natural heritageAnnex of the resolution adopted by the General Assem
Experience of public servicesAnnex of the resolution adopted by the General Assem
Experimental treatment for lethal casesDeep Knowledge Group (2020) COVID-19 ranking framewo
Exports (thousand tons/day)NIS (2016). Operational figures, NIS refinary, Serbi
Exports (thousand tons/day)NIS (2016). Operational figures, NIS refinery, Serbi
Exports (thousand tons/day)NIS (2016). Operational figures, NIS refinary, Serbi
Exports (thousand tons/day)NIS (2016). Operational figures, NIS refinery, Serbi
Extent of flood defences in place?GOLF, CCC
Extent of negativity and complaints expressed in social/other mediaVTT
External and internal penetration testingThe Center for Internet Security, Critical Security
External contextual factors accounted in the resilience policy/ strategy?ISO (2012). Societal security Business continuity ma
External contextual factors accounted in the resilience policy/ strategy?ISO (2012). Societal security Business continuity ma
External regulations mandate facility shut down after chemical supply lossAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after communications lossAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after fuel supply lossAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after loss of air serviceAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after loss of natural gasAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after loss of rail serviceAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after loss of road serviceAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after loss of waterAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after maritime service lossAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate facility shut down after pipeline service lossAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate shut down after raw material supply lossAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate shut down after waste removal service lossAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandate shut down after wastewater service lossAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandating facility shut down after loss of IT serviceAdapted from the US:DHS Infrastructure Survey Tool (
External regulations mandating facility shut down after total electric lossAdapted from the US:DHS Infrastructure Survey Tool (
External resilience management system review conducted?International Atomic energy Agency (2000), Operation
External resilience management system review conducted?International Atomic energy Agency (2000), Operation
External wastewater discharge service outages in last 5 yearsAdapted from the US:DHS Infrastructure Survey Tool (
Extraordinary repair budget available?  
Extrapolation of past data.Steinbeis EU-Vri
Extreme intensity.Steinbeis EU-Vri
Extreme weather in the countries on the the main supply routePAP Serbia
Extreme weather in the countries on the the main supply routeN/A
F1.Has an emergency rescue team been established and equipped according to regulations and risk characteristics?F2.Did smaller production units designate part-time emergency rescue personnel?F3.Did those whose emergency force is insufficient sign a rescue agreement with the adjacent rescue team.RiskRadar China - Emergency Ability Asessment
Facility constructed/modified/retrofitted to mitigate high windsAdapted from the US:DHS Infrastructure Survey Tool (
Facility constructed/modified/retrofitted to mitigate impact of earthquakesAdapted from the US:DHS Infrastructure Survey Tool (
Facility constructed/modified/retrofitted to mitigate impact of floodsAdapted from the US:DHS Infrastructure Survey Tool (
Facility constructed/modified/retrofitted to mitigate impact of hurricanesAdapted from the US:DHS Infrastructure Survey Tool (
Facility constructed/modified/retrofitted to mitigate impact of tornadoesAdapted from the US:DHS Infrastructure Survey Tool (
Facility constructed/modified/retrofitted to mitigate impact of wildefiresAdapted from the US:DHS Infrastructure Survey Tool (
Facility constructed/modified/retrofitted to mitigate lightning strikesAdapted from the US:DHS Infrastructure Survey Tool (
Facility constructed/modified/retrofitted to mitigate severe winter stormsAdapted from the US:DHS Infrastructure Survey Tool (
Facility containers & pipes sufficiently anchored/secured against lifting?German Federal Ministry of the Interior. (2008) Prot
Facility has a continuity plan with communications provider for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility has a continuity plan with natural gas provider for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility has a continuity plan with water provider for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility has a written business continuity plan for resilience operationsAdapted from the US:DHS Infrastructure Survey Tool (
Facility has an internal source of waterAdapted from the US:DHS Infrastructure Survey Tool (
Facility has deployable mitigation measures for earthquakesAdapted from the US:DHS Infrastructure Survey Tool (
Facility has deployable mitigation measures for floodsAdapted from the US:DHS Infrastructure Survey Tool (
Facility has deployable mitigation measures for high windsAdapted from the US:DHS Infrastructure Survey Tool (
Facility has deployable mitigation measures for hurricanesAdapted from the US:DHS Infrastructure Survey Tool (
Facility has deployable mitigation measures for lightning strikesAdapted from the US:DHS Infrastructure Survey Tool (
Facility has deployable mitigation measures for severe winter stormsAdapted from the US:DHS Infrastructure Survey Tool (
Facility has deployable mitigation measures for tornadoesAdapted from the US:DHS Infrastructure Survey Tool (
Facility has deployable mitigation measures for wildefiresAdapted from the US:DHS Infrastructure Survey Tool (
Facility has experienced communication service outages in the last 5 yearsAdapted from the US:DHS Infrastructure Survey Tool (
Facility has experienced natural gas service outages in the last 5 yearsAdapted from the US:DHS Infrastructure Survey Tool (
Facility has experienced water service outages in the last 5 yearsAdapted from the US:DHS Infrastructure Survey Tool (
Facility participates in any emergency preparedness working groupsAdapted from the US:DHS Infrastructure Survey Tool (
Facility participates in chemical provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility participates in electric provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility participates in fuel provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility participates in natural gas provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility participates in water provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility participation in an IT provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Facility receives or provides hazard/ threat information with other agencyAdapted from the US:DHS Infrastructure Survey Tool (
Facility uses byproducts/wastes (e.g., sulfur, garbage) for core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Facility uses chemicals (e.g., nitrogen, chlorine) for its core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Facility uses fuels (e.g., diesel, gasoline) for its core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Facility uses raw materials for its core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Facility/SAA sits above underground facilities not within its controlAdapted from the US:DHS Infrastructure Survey Tool (
Fair and equitable sharing of benefitsAnnex of the resolution adopted by the General Assem
False negatives CWA16649
False positives CWA16649
Features included in the resilience training program?American Petroleum Institute RP 581 (2000). (3rd ed.
Features included in the resilience training program?American Petroleum Institute RP 581 (2000). (3rd ed.
Feeling safe walking alone at nightOECD Statistics (2018), http://data.oecd.org
File illicit transfer with outside (download)ETSI GS ISI 001-1 V1.1.2
File illicit transfer with outside (IM)ETSI GS ISI 001-1 V1.1.2
File illicit transfer with outside (Public messaging)ETSI GS ISI 001-1 V1.1.2
File integrity checkThe Center for Internet Security, Critical Security
File transfer websitesThe Center for Internet Security, Critical Security
financial and technical assistance committed to developing countriesAnnex of the resolution adopted by the General Assem
Financial Soundness IndicatorsAnnex of the resolution adopted by the General Assem
Financial support to the least developed countriesAnnex of the resolution adopted by the General Assem
Fire risk assessment conducted?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Firewall session trackingThe Center for Internet Security, Critical Security
Firewall, router and switch configuration reviewThe Center for Internet Security, Critical Security
First responder services provided by any Agency or supporting agencyAdapted from the US:DHS Infrastructure Survey Tool (
Fixed Internet broadband subscriptions Annex of the resolution adopted by the General Assem
Flood Categorisation and expected impact modelGOLF, CCC
Flood gauges and rainfall monitoring dataGOLF, CCC
Floor plans include and mark allinformation necessary in a crisis?German Federal Ministry of the Interior. (2008) Prot
Footfall at retail units in the flooded area.Cork Chamber of commerce
For any alternate business continuity site, which of the following exist?Adapted from the US:DHS Infrastructure Survey Tool (
For processes and assets, has the facility conducted an impact evaluation?Adapted from the US:DHS Infrastructure Survey Tool (
For which does the facility have immediate onsite response capability?Adapted from the US:DHS Infrastructure Survey Tool (
Foreign direct investmentAnnex of the resolution adopted by the General Assem
Forest areaAnnex of the resolution adopted by the General Assem
Forman on call procedure in placeGOLF, CCC
Forman on-call procedure in placeCCC
Forms, protocols, templates been prepared for the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Fossil-fuel subsidies per unit of GDPAnnex of the resolution adopted by the General Assem
Frameworks existCWA16649
Frameworks in place to promote and monitor equality on the basis of sex Annex of the resolution adopted by the General Assem
Frequency in op. disturbances caused by disturbance in barrier effeiciency?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Frequency in op. disturbances caused by lack in quality of raw water?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Frequency in op. disturbances caused by the human factor?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Frequency of communication about the incidents to the external sitesCompany's standard SD-09.02.05 Emergency response an
Frequency of communication with units about an occured incidentsCompany's standard SD-09.01.15 HSE incident manageme
Frequency of evaluation of compliance with the safe work practices?American Petroleum Institute RP 581 (2000). (3rd ed.
Frequency of evaluation of compliance with the safe work practices?American Petroleum Institute RP 581 (2000). (3rd ed.
Frequency of regular drills/ emergency preparedness exercises conductedAmerican Petroleum Institute RP 581 (2000). (3rd ed.
Frequency of regular drills/ emergency preparedness exercises conductedAmerican Petroleum Institute RP 581 (2000). (3rd ed.
Frequency of review of resilience related standard operating proceduresAmerican Petroleum Institute RP 581 (2000). (3rd ed.
Frequency of revision of Safety Risk registry defined ?CCPS (2007). Guidelines for risk based process safet
Frequency of the cleaning the drainage ditches across the city 
Frequency of training for operations employees?American Petroleum Institute RP 581 (2000). (3rd ed.
Frequency of training for operations employees?American Petroleum Institute RP 581 (2000). (3rd ed.
Frequency of unbaised evaluation of the level of compliance?American Petroleum Institute RP 581 (2000). (3rd ed.
Frequency of unbaised evaluation of the level of compliance?American Petroleum Institute RP 581 (2000). (3rd ed.
Fresh steam flow to the rec. charge 
Fuel used by the electric power plant/cogeneration unitAdapted from the US:DHS Infrastructure Survey Tool (
Fuels and technologyAnnex of the resolution adopted by the General Assem
Full documentation of continuity plan for resilience ops. exercises?Adapted from the US:DHS Infrastructure Survey Tool (
Full documentation of Emergency Plan exercises?Adapted from the US:DHS Infrastructure Survey Tool (
Functionality of CCTVAdapted from the US:DHS Infrastructure Survey Tool (
Furnishings and use of indoor space adapted to possible threat of a flood?German Federal Ministry of the Interior. (2008) Prot
G4 26: Frequency of engagement by type and by stakeholdergroupGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 26: Frequency of engagement by type and by stakeholdergroupGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 26: Frequency of engagement by type and by stakeholdergroupGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 26: Stakeholders engagement maintainedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 26: Stakeholders engagement maintainedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN 21: Amount of air pollutant i.e. NO2 emitted in tons/ dayGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN 21: Amount of air pollutant i.e. NO2 emitted in tons/ dayGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN 21: Amount of air pollutant i.e. NO2 emitted in tons/ dayGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN13: The size and location of all habitat protected or restored areasGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN13: The size and location of all habitat protected or restored areasGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN13: The size and location of all habitat protected or restored areasGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN21: Amount of air pollutant i.e. SO2 emitted (tons/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN21: Amount of air pollutant i.e. SO2 emitted (tons/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN21: Amount of air pollutant i.e. SO2 emitted (tons/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN22: Total volume of planned and unplanned water dischargesGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN22: Total volume of planned and unplanned water dischargesGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN22: Total volume of planned and unplanned water dischargesGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN24: Total number and total volume of recorded significant spillsGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN24: Total number and total volume of recorded significant spillsGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN24: Total number and total volume of recorded significant spillsGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN25: Total weight of hazardous waste disposedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN25: Total weight of hazardous waste disposedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN25: Total weight of hazardous waste disposedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN27: Environmental Impacts Of Transporting Products And Other GoodsNIS (2015) Sustainability report, Serbia
G4 EN27: Environmental Impacts Of Transporting Products And Other GoodsNIS (2015) Sustainability report, Serbia
G4 EN29:Monteray value-fines and sanctions for environmental non-complianceGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN29:Monteray value-fines and sanctions for environmental non-complianceGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN29:Monteray value-fines and sanctions for environmental non-complianceGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN3: Energy consumption within the organization (GJ/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN3: Energy consumption within the organization (GJ/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN3: Energy consumption within the organization (GJ/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN31: Current environmental protection expenses (in EURO/year)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN31: Current environmental protection expenses (in EURO/year)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN31: Current environmental protection expenses (in EURO/year)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN31: Current environmental protection expenses (in EURO/year)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN8: Total volume of water withdrawn from sourceGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN8: Total volume of water withdrawn from sourceGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN8: Total volume of water withdrawn from sourceGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN8: Total volume of water withdrawn from sourceGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN9: Number of water sources significantly affected by withdrawalGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN9: Number of water sources significantly affected by withdrawalGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 EN9: Number of water sources significantly affected by withdrawalGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA16: Total number of grievances addressed and resolvedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA16: Total number of grievances addressed and resolvedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA16: Total number of grievances addressed and resolvedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA16:Total number of grievances about labor practices filed formallyGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA16:Total number of grievances about labor practices filed formallyGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA16:Total number of grievances about labor practices filed formallyGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA6: Injury rateGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA6: Injury rateGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA6: Injury rateGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA6: Lost day rateGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA6: Lost day rateGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA6: Lost day rateGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 LA6: Workplace injuriesNIS (2015) Sustainability report, Serbia
G4 LA6: Workplace injuriesNIS (2015) Sustainability report, Serbia
G4 PR9:Monetary value-fines for non-compliance on use of products&servicesGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 PR9:Monetary value-fines for non-compliance on use of products&servicesGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 PR9:Monetary value-fines for non-compliance on use of products&servicesGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 SO11:No. of grievances for impacts on society filed, addressed, resolvedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 SO11:No. of grievances for impacts on society filed, addressed, resolvedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 SO11:No. of grievances for impacts on society filed, addressed, resolvedGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 SO3: Total number of operations assessed for risks such as corruptionGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 SO3: Total number of operations assessed for risks such as corruptionGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4 SO3: Total number of operations assessed for risks such as corruptionGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-4: Domestic gas production (million m3/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-4: Domestic gas production (million m3/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-4: Domestic gas production (million m3/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-4: Domestic oil production (thousand tons/day)NIS (2016) Annual Report 2016, NIS Refinery, Serbia
G4-4: Domestic oil production (thousand tons/day)NIS (2016) Annual Report 2016, NIS Refinery, Serbia
G4-9: Revenues (% of production at full capacity)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-9: Revenues (% of production at full capacity)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-9: Revenues (% of production at full capacity)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-9: Revenues (mio €/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-9: Revenues (mio €/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-9: Revenues (mio €/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-9:Net sales (mio €/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-9:Net sales (mio €/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-9:Net sales (mio €/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-EN10: Total volume of water recycled and reused by the organization.GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-EN10: Total volume of water recycled and reused by the organization.GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4-EN10: Total volume of water recycled and reused by the organization.GRI G4 (2013) Global Reporting Initiative, Amsterdam
G4EN6: Reduction in energy consumption in GJ/day or KJ/yearGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4EN6: Reduction in energy consumption in GJ/day or KJ/yearGRI G4 (2013) Global Reporting Initiative, Amsterdam
G4EN6: Reduction in energy consumption in GJ/day or KJ/yearGRI G4 (2013) Global Reporting Initiative, Amsterdam
General & specific resilience training procedures exist?American Petroleum Institute RP 581 (2000). (3rd ed.
General & specific resilience training procedures exist?American Petroleum Institute RP 581 (2000). (3rd ed.
General flexibility of drug regulatory frameworkDeep Knowledge Group (2020) COVID-19 ranking framewo
Global economic indicators - Exchange Rates 
Global economic indicators - Interest rates  
Global economic indicators - Interest rates  
Global exportsAnnex of the resolution adopted by the General Assem
Global food loss indexAnnex of the resolution adopted by the General Assem
Goal 3. Ensure healthy lives and promote well-being for all at all agesAnnex of the resolution adopted by the General Assem
Goal 3. Ensure healthy lives and promote well-being for all at all agesAnnex of the resolution adopted by the General Assem
Goal 3. Ensure healthy lives and promote well-being for all at all agesAnnex of the resolution adopted by the General Assem
Government revenue as a proportion of GDPAnnex of the resolution adopted by the General Assem
Government Surveillance Technology for MonitoringDeep Knowledge Group (2020) COVID-19 ranking framewo
Grid supply (KwH)Stadtwerke Heildelberg. (2016). Business & sustainab
Grid supply (KwH) annuallyStadtwerke Heildelberg. (2016). Business & sustainab
Growth rate of real GDP per capitaAnnex of the resolution adopted by the General Assem
Growth rate of real GDP per employed personAnnex of the resolution adopted by the General Assem
Growth rates of household expenditureAnnex of the resolution adopted by the General Assem
Häiriökustannukset - Cost of disturbanceVTT
Häiriön leviämisen estäminen - Preventing incident escalationVTT Workshop 16.4.2018
Häiriötilanteen opetukset - Lessons learned VTT Workshop 16.4.2018
Häiriötilanteiden harjoittelu - Emergency trainingVTT
Hardening configuration templates for applications relying on a databaseThe Center for Internet Security, Critical Security
Harmful use of alcoholAnnex of the resolution adopted by the General Assem
Has HAZOP Analysis been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has HAZOP Analysis been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has a cybersecurity assessment been completed?Adapted from the US:DHS Infrastructure Survey Tool (
Has a facility backwater protection been installed in the canalization?German Federal Ministry of the Interior. (2008) Prot
Has a formal procedure been developed to identify and manage the risks related to physical security hazards of the plant?RINA InfraStress project (D3.4, T8.4)
Has a formal procedure been developed to identify and manage the risks related to technological hazards of the plant?RINA InfraStress project (D3.4, T8.4)
Has a formal procedure been developed to identify and manage the risks related to technological hazards of the plant?RINA InfraStress project (D3.4, T8.4)
Has a formal procedure been developed to identify and manage the risks related to technological hazards of the plant?RINA InfraStress project (D3.4, T8.4)
Has a simplified GDP been carried out within the last 5 years?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Has a working team responsible for resilience in the city been established?SMR CWA91:2018
Has an extensive adversary characterization been done?RINA InfraStress project (D3.4, T8.4)
Has any organized crime occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Has Bow-Tie Analysis been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Bow-Tie Analysis been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Brainstorming been adopted to identify Hazards?RINA InfraStress project (D3.4, T8.4)
Has Brainstorming been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Brainstorming been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has BSCAT method been used? 
Has Check List been adopted to identify Hazards?RINA InfraStress project (D3.4, T8.4)
Has Check List been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Check List been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Codes or Standards directive been adopted to identify Hazards?RINA InfraStress project (D3.4, T8.4)
Has essential equipment been subjected to HPEM immunity testing? 
Has Fault Tree (FTA) Analysis / Event Tree (ETA) Analysis been adopted to identify Hazards?RINA InfraStress project (D3.4, T8.4)
Has Fault Tree (FTA) Analysis / Event Tree (ETA) Analysis been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Fault Tree (FTA) Analysis / Event Tree (ETA) Analysis been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Hazards Maps (e.g. raster hazard map) been adopted to identify Hazards?RINA InfraStress project (D3.4, T8.4)
Has HAZID Analysis been adopted to identify Hazards?RINA InfraStress project (D3.4, T8.4)
Has HAZID Analysis been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has HAZID Analysis been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Historical data analysis (e.g. from databases) been adopted to identify Hazards?RINA InfraStress project (D3.4, T8.4)
Has Historical data analysis (e.g. from databases) been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has Historical data analysis (e.g. from databases) been adopted to identify Technological Hazards?RINA InfraStress project (D3.4, T8.4)
Has it been identified who to inform and how within the organization?National Food Agency, Sweden. (2011). Strategi vid v
Has priority network access been requested for landline telephones?German Federal Ministry of the Interior. (2008) Prot
Has the affected column been replaced? 
Has the company appointed a person to communicate with the Authorities?InfraStress - CARMA
Has the country submitted IHR reports to the WHO for the previous calendar year?GHS 5.1.1a (www.ghsindex.org)
Has the Emergency Plan been approved by senior management?Adapted from the US:DHS Infrastructure Survey Tool (
Has the Emergency Plan been coordinated with emergency responders?Adapted from the US:DHS Infrastructure Survey Tool (
Has the entity a management system (e.g. instruments, instructions, etc.) in place to ensure that the required security controls are implemented?Commission Implementing Regulation (EU) 2015/1998 of
Has the event calculus been developed?InfraStress D5.2
Has the facility as a whole been evaluated by IEMI experts? 
Has the facility experienced electric service outages within the last year?Adapted from the US:DHS Infrastructure Survey Tool (
Has the IMCC been activated in the previous year?Adapted from the US:DHS Infrastructure Survey Tool (
Has the management review of preventive /remedial capacity been conducted? HELEN
Has the municapility participated in a cooperative regional or national..Swedish Civil Contingencies Agency. (2015). Indikato
Has the municipality analyzed/investigatedSwedish Civil Contingencies Agency. (2015). Indikato
Has the municipality carried out a cooperative exercize with external..Swedish Civil Contingencies Agency. (2015). Indikato
Has the municipality cooperated with neighboring municipalities andSwedish Civil Contingencies Agency. (2015). Indikato
Has the municipality evaluated emergency exercizes?Swedish Civil Contingencies Agency. (2015). Indikato
Has the necessary clean-up work been initiated following a crisis incident?German Federal Ministry of the Interior. (2008) Prot
Has the performance assessment of response and recovery been conducted?HELEN
Has the review on absorbing/withstanding incidents been conducted? HELEN
Has the situation been analyzed?German Federal Ministry of the Interior. (2008) Prot
Has there been a follow-up of samples with a remark "Unfit for drinking"?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Has there been a supervision from controlling authority within last year?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Has there been adequate communication with owner & service providers on remedies?HELEN
Have access controls been established to enter the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Have all your IT systems, including SCADA, been classified with regard..Swedish Water and Wastewater Association. Blåa lista
Have any cyber attacks occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any droughts occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any extreme temperatures occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any floods occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any geophysical hazards occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any industrial accidents occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any infectious diseases occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any landslides occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any storms occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any terrorist attacks occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have any wildfires occurred in the last 20 years?Organisation for Economic Co-operation and Developme
Have assets and vulnerabilities within the facility been analysed for dependencies, including their impacts? 
Have clients concerned been contacted following a crisis incident?German Federal Ministry of the Interior. (2008) Prot
Have critical staff been identified for a pandemic incident?German Federal Ministry of the Interior. (2008) Prot
Have emergency actions from drills been implemented?  
Have external events been identified? 
Have internal events been identified? 
Have laboratory tests been conducted? 
Have measures been taken to protect the facility against floods?German Federal Ministry of the Interior. (2008) Prot
Have measures been taken to reduce the effects of unintentionally imported Swedish Water and Wastewater Association. Blåa lista
Have partial pressure been checked? 
Have physical and functional interdependencies with external assets been identified for each critical asset?RINA InfraStress project (D3.4, T8.4)
Have physical and functional interdependencies with other facility assets been identified for each critical asset?RINA InfraStress project (D3.4, T8.4)
Have potential security vulnerabilities that threaten the critical asset’s service or integrity been identified?RINA InfraStress project (D3.4, T8.4)
Have restricted areas been identified within the facility?RINA InfraStress project (D3.4, T8.4)
Have sensors been checked and calibrated according to guidelines?Helen Ltd. Meeting between VTT & Helen representativ
Have staff worked in different areas of the organization (on rotation)?German Federal Ministry of the Interior. (2008) Prot
Have strategic protection aims been defined for risk management?German Federal Ministry of the Interior. (2008) Prot
Have the company activities ever been subject to public petitions or protests?InfraStress - CARMA
Have the demands within the SCADA systems been updated the last three yearsSwedish Water and Wastewater Association. Blåa lista
Have the infrastructure critical assets been identified?RINA InfraStress project (D3.4, T8.4)
Have the potential conflicts between safety and security been assessed?RINA InfraStress project (D3.4, T8.4)
Have the probabilities of adverse events been assessed? 
Have the relevant threats been identified for each critical asset?RINA InfraStress project (D3.4, T8.4)
Have the SIPS potential cascading effects been analysed?Draft proposal on possible resilience or functionali
Have the temperature of fluid been checked? 
Have there been onsite visit(s) with any first responder(s)?Adapted from the US:DHS Infrastructure Survey Tool (
Have you assured that consultants and other cooperating partners..Swedish Water and Wastewater Association. Blåa lista
Have you during the last five years had any security audits?Swedish Water and Wastewater Association. Blåa lista
Have you had security audits of the own organization and admin- systems?Swedish Water and Wastewater Association. Blåa lista
Have you had any security audits of consultants and cooperating partners?Swedish Water and Wastewater Association. Blåa lista
Have you made it clear that sanctions will be made if someone..Swedish Water and Wastewater Association. Blåa lista
Have you separated your SCADA systems from other data networks?Swedish Water and Wastewater Association. Blåa lista
Have you, during the last three years, controlled if..Swedish Water and Wastewater Association. Blåa lista
Have you, with the objectives to raise security awareness within..Swedish Water and Wastewater Association. Blåa lista
Hazard identification plan in place?Collins, M. J.et. al. (2012). Developing an operatio
Hazard identification plan in place?Collins, M. J.et. al. (2012). Developing an operatio
Hazardous waste generatedAnnex of the resolution adopted by the General Assem
HD cameras with image analysis software (face recognition, person counting) 
HD cameras with image analysis software (face recognition, person counting) 
Health coverage indicatorWorld Health Organization (2012). Health Indicators
Help provided to injured, stranded or lost staff during a serious incident?German Federal Ministry of the Interior. (2008) Prot
Henkilöresurssit - Personnel resourcesVTT
Henkilöstön osaaminen - Expertise of personnelVTT
Henkilöstön osaamistaso - Expertise of personnelVTT
High sea water level/flooding predicted?HELEN
Homicide rateOECD Statistics (2018), http://data.oecd.org
Host of critical servicesThe Center for Internet Security, Critical Security
Host-based DLPThe Center for Internet Security, Critical Security
Host-based firewallsThe Center for Internet Security, Critical Security
Hourly earnings of female and male employeesAnnex of the resolution adopted by the General Assem
Hours of electricity backup supply in hospital 
How available are resources by means of import?PAP Serbia
How big is the partnership network?InfraStress Pilot 3
How clearly defined are the constraints and conditions for use with the BAM/BPM process?InfraStress D5.2
How complete is the risk assessement process?International organization for Standardization(2012)
How complete is the risk assessment process?International organization for Standardization(2012)
How comprehensive are the responsibilities incident response personnel?International organization for Standardization(2012)
How comprehensive are the responsibilities incident response personnel?International organization for Standardization(2012)
How does the organization continuously update its threat assessment?Inspired by Annex 1 - Generic resilience indicators
How efficiently can the borders be closed? 
How extensive are the procedures for monitoring performance of BCMS?International organization for Standardization(2012)
How extensive are the procedures for monitoring performance of BCMS?International organization for Standardization(2012)
How extensive are the warning and communication procedures?International organization for Standardization(2012)
How extensive are the warning and communication procedures?International organization for Standardization(2012)
How extensive is business impact analysis (BIA) set by the organization?International organization for Standardization(2012)
How extensive is business impact analysis (BIA) set by the organization?International organization for Standardization(2012)
How extensive is the awareness plan for BCMS?International organization for Standardization(2012)
How extensive is the awareness plan for BCMS?International organization for Standardization(2012)
How extensive is the plan to foster a organizational resilience culture?International organization for Standardization (2016
How extensive is the plan to foster a organizational resilience culture?International organization for Standardization (2016
How fast can the organization repair equipment in unplanned situations?Inspired by Annex 1 - Generic resilience indicators
How feasible is it to switch to alternatives such as oil heating?PAP Serbia
How formalized is the learning process?SMR CWA91:2018
How frequent is the Big Data analyst available? 
How frequent online analysis of the column water quality are conducted? 
How frequently do the same root causes appear in incident reports?ISO 9001:2015
How frequently does the company update social media contents?InfraStress - CARMA
How good is the organization in assessing risk and re-start operation?Inspired by Annex 1 - Generic resilience indicators
How high is the infrastructure's geographical risk rated?PAP Serbia
How high is the infrastructure's geographical risk rated?N/A
How high is the infrastructure's overall risk following RBI?PAP Serbia
How high is the water level? 
How is learning from other's events and experiences followed-up?Inspired by Annex 1 - Generic resilience indicators
How is the audit system organized?Inspired by Annex 1 - Generic resilience indicators
How is the early warning organization organized?Inspired by Annex 1 - Generic resilience indicators
How is the organization vigilant with respect to emerging risks?Inspired by Annex 1 - Generic resilience indicators
How is the Security Force organized?Petit, F. D. P.et. al (2013). Protective Measurement
How is the separation of the infrastructure for wastewater and stormwater?van Leeuwen, C.J. et al. 2012. City Blueprints: 24In
How likely is a flash flood?Jovanovic. A., et. al. (2017). T5.1: Report from the
How long ago was the last national drill? [number of years] 
How long are the downtimes & repair times for malfunctioning component? 
How long can we process raw water before next transport arrives?National Food Agency, Sweden. (2011). Strategi vid v
How long did it take to extinguish the fire?Helen Ltd. & VTT. Meeting between VTT & Helen repres
How long does a full system restart require? Jovanovic. A., et. al. (2017). T5.1: Report from the
How long does full grid restoration take?Jovanovic. A., et. al. (2017). T5.1: Report from the
How long does it take for the first responders to get the area?Pilot 4: Petrol & Luka Koper internal scale
How long does it take to enact the governmental financial support program? 
How long does it take to establish additional first response centers/hospitals and are there supportive actions/procedures in place? 
How long does it take to mobilize additional medical resources and are there supportive procedures in place? 
How long is the recorded information stored?Adapted from the US:DHS Infrastructure Survey Tool (
How long was the batch stored that initiated fire?1. Sipilä. (2013).Emerging risk issues in undergroun
How many activities to increase resilience has been identified..Swedish Civil Contingencies Agency. (2015). Indikato
How many additional medical support resources are expected to be mobilzed during the event? 
How many breaches have been averted?Jovanovic. A., et. al. (2017). T5.1: Report from the
How many connections/ customers depend on the malfunctioning component  
How many crisis response reports were issued per crisis? Jovanovic. A., et. al. (2017). T5.1: Report from the
How many cyber security breaches have occurred in the past year?Jovanovic. A., et. al. (2017). T5.1: Report from the
How many departments have been involved in developing the RSA?Swedish Civil Contingencies Agency. (2015). Indikato
How many electric service connections are there for the facility?Adapted from the US:DHS Infrastructure Survey Tool (
How many external companies are necessary for restoration 
How many fires were extinguished?Helen Ltd. & VTT. Meeting between VTT & Helen repres
How many have access to portable drinking water?van Leeuwen, C.J. et al. 2012. City Blueprints: 24In
How many hours can other producers supply us with water for distribution?National Food Agency, Sweden. (2011). Beredskapsplan
How many hours can we supply people with emergency water..National Food Agency, Sweden. (2011). Operativa åtgä
How many households, during disruption, revieved drinking water?Swedish Civil Contingencies Agency. (2014). Resultat
How many incidents required alternative fuel?Helen Ltd. & VTT. Meeting between VTT & Helen repres
How many listed security measures were found without any deficiency during prescribed checks procedure within recent period of time (e.g., 3 months)?Federal Ministry of the Interior. (2011). Cyber Secu
How many locations is the operations data being held?Jovanovic. A., et. al. (2017). T5.1: Report from the
How many meetings were provided to stakeholders per crisis situation?Jovanovic. A., et. al. (2017). T5.1: Report from the
How many natural gas service connections are there for the facility?Adapted from the US:DHS Infrastructure Survey Tool (
How many new employees are trained for involvement in emergency response?InfraStress Pilot 4
How many of the contextual issues does the organization for defining BCMS?International organization for Standardization(2012)
How many of the contextual issues does the organization for defining BCMS?International organization for Standardization(2012)
How many of the following functions or employees have been trained in..Swedish Civil Contingencies Agency. (2015). Indikato
How many of the following functions or employees have exercized in order..Swedish Civil Contingencies Agency. (2015). Indikato
How many participants/sectors have taken part in training and/or excerzice Swedish Civil Contingencies Agency. (2015). Indikato
How many paths for each scenario have been identified?Inspired by Annex 1 - Generic resilience indicators
How many people can be available to assist in affected areas?National Food Agency, Sweden. (2011). Strategi vid v
How many pre-Incident plans exist for high-risk complexes?GOLF, CCC
How many remarks from supervision this year?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
How many safety education and awareness trainings are done yearly?Jovanovic. A., et. al. (2017). T5.1: Report from the
How many samples with a remark are there/Total number of samples?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
How many scenarios are included in the training program?Inspired by Annex 1 - Generic resilience indicators
How many staff on duty for each shift? 
How many unplanned shutdowns have occurred in the past year?Jovanovic. A., et. al. (2017). T5.1: Report from the
How many wastewater laterals are there for the facility?Adapted from the US:DHS Infrastructure Survey Tool (
How many water service connections are there for the facility?Adapted from the US:DHS Infrastructure Survey Tool (
How much  (in euros) is the loss of physical infrastructure?Jovanovic. A., et. al. (2017). T5.1: Report from the
How much ability to make correct decisions has been identified?Inspired by Annex 1 - Generic resilience indicators
How much flexibility has been identified?Inspired by Annex 1 - Generic resilience indicators
How much gas does Srbijagas holds in stock in Banatski DvorPAP Serbia
How much gas does Srbijagas holds in stock in Banatski DvorN/A
How much imported gas might remain in the routing country?PAP Serbia
How much imported gas might remain in the routing country?N/A
how much is society expected to object to curfew and/or required social distancing? 
How much of the drinking water are meeting WHO water quality guidelines?van Leeuwen, C.J. et al. 2012. City Blueprints: 24In
How much of the infrastructure is for wastewater collection?van Leeuwen, C.J. et al. 2012. City Blueprints: 24In
How much of the municipality raw water source are water protection area?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
How much of the population is covered by App tracking? 
How much of the supply is dependant on the compressor station?PAP Serbia
How much of the supply is dependant on the compressor station?N/A
How much of the supply is produced domestically?PAP Serbia
How much of the supply is produced domestically?N/A
How much redundency does the system have?PAP Serbia
How much redundency does the system have?N/A
How much reserve water are to be supplied to users?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
How much supply from storage complements total supply in winter?PAP Serbia
How much supply from storage complements total supply in winter?N/A
How much time does it take to get first reponders to the affected area?SmartResilience. (2017). D5.1 Report on the results
How often and to which extent is triage required during operation? 
How often are audits for critical infrastructure operators carried out? [number of years]SMR CWA91:2018
How often are chemical analyses carried out on samples from the raw water? Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
How often are exercises organised to test for speedy recovery?International organization for Standardization(2012)
How often are information about risk/safety/resilience discussed?Inspired by Annex 1 - Generic resilience indicators
How often are major drills conducted? [number of years]SMR CWA91:2018
How often are microbiological analyses carried out from raw water?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
How often do representatives (drinking water) assess data from healthcare?National Food Agency, Sweden. (2011). Strategi vid v
How often do representatives for the drinking water organization meet..Swedish Civil Contingencies Agency and Swedish Water
How often do you carry out emergency exercizes in the field..Swedish Civil Contingencies Agency. (2015). Indikato
How often do you conduct risk assessments for your energy network? 
How often does the average customer experience power interruptions?IEEE Guide for Electric Power - Distribution Reliabi
How often does the management group receive event reports?Inspired by Annex 1 - Generic resilience indicators
How often is the contribution of each management discipline reviewed?International organization for Standardization (2016
How often is the contribution of each management discipline reviewed?International organization for Standardization (2016
How often is the response plan tested every year?Jovanovic. A., et. al. (2017). T5.1: Report from the
How often is the response plan tested every year? 
How old is our current grid system?Jovanovic. A., et. al. (2017). T5.1: Report from the
How old is our current grid system?Jovanovic. A., et. al. (2017). T5.1: Report from the
How quickly and efficiently can travel restrictions be applied?https://www.auswaertiges-amt.de/de/ReiseUndSicherhei
How quickly and extensively are quarantine instructions applied and enforced to infected cases in the community? 
How quickly and extensively are quarantine instructions applied and enforced to travelers from risk areas? 
How readily do the national industry leaders accommodate the new production requirements? 
How reliable is the delivery of required medical equipment to its designated recipiant? 
How robust is the communication technology against IEMI? 
How robust is the organization in the response and recovery phase?Inspired by Annex 1 - Generic resilience indicators
How stable is the local economy?Jovanovic. A., et. al. (2017). T5.1: Report from the
How strict are the measures related to school closures, workplace closures, and travel bans?ourworldindata.org
How thoroughly are the business processes implemented into an IT system?InfraStress D5.2
How timely is the information on cyber attacks exchanged?Project Group LÜKEX Bund, Federal Office of Civil Pr
How timely is the information on cyber attacks exchanged?Project Group LÜKEX Bund, Federal Office of Civil Pr
How timely is the information on cyber attacks exchanged?Project Group LÜKEX Bund, Federal Office of Civil Pr
How timely is the information on cyber attacks exchanged?Project Group LÜKEX Bund, Federal Office of Civil Pr
How to describe the lessons on expected impact? HELEN
How to describe the lessons on expected impact? HELEN
How well are citizens informed about volunteering opportunities in the local community?SMR CWA91:2018
How well did the last exercize fullfill the goals?National Food Agency, Sweden. (2011). Strategi vid v
How well do the currently available physical resources for response correspond to the risk analysis?SMR CWA91:2018
How well is a culture of resilience promoted?SMR CWA91:2018
How well is persons presence monitored in the facility? 
How well is the resilience action plan aligned, integrated and connected with national plans?SMR CWA91:2018
How well known is the public website with emergency information? [percent penetration]SMR CWA91:2018
How wide would you assess the risk analysis' range of topics to be?SMR CWA91:2018
How would you assess current initiatives and funding opportunities for the development of resilience?SMR CWA91:2018
How would you evaluate the understanding of the resilience approach among stakeholders?SMR CWA91:2018
Human traffickingAnnex of the resolution adopted by the General Assem
Human weakness (exchanges)ETSI GS ISI 001-1 V1.1.2
Human weakness (spear phishing)ETSI GS ISI 001-1 V1.1.2
I1. Capacity to improve how to handle fatalitiesFederal Office for Civil Protection (FOCP) (2020): N
I1. FatalitiesFederal Office for Civil Protection (FOCP) (2020): N
I1. Preparedness to handle fatalitiesFederal Office for Civil Protection (FOCP) (2020): N
I1. Susceptibility to have fatalitiesFederal Office for Civil Protection (FOCP) (2020): N
I2. Injured / sick peopleFederal Office for Civil Protection (FOCP) (2020): N
I2. Preparedness to handle injured / sick peopleFederal Office for Civil Protection (FOCP) (2020): N
I2. Susceptibility to have injured / sick peopleFederal Office for Civil Protection (FOCP) (2020): N
I2.Capacity to improve how to handle injured / sick peopleFederal Office for Civil Protection (FOCP) (2020): N
I3. Capacity to improve how to handle people in need of assistanceFederal Office for Civil Protection (FOCP) (2020): N
I3. People in need of assistanceFederal Office for Civil Protection (FOCP) (2020): N
I3. Preparedness to handle people in need of assistanceFederal Office for Civil Protection (FOCP) (2020): N
I3. Susceptibility to have people in need of assistanceFederal Office for Civil Protection (FOCP) (2020): N
Identification of contamination sources? (5.1.F)SmartResilience (2017) Task 5.1 Report from the inte
Identification of contamination sources? (5.1.F)SmartResilience (2017) Task 5.1 Report from the inte
Identification of existing Business continuity management competencies for personnel?Petit, F. D. P.et. al (2013). Resilience measurement
Identification of existing Business continuity management competencies for personnel?Petit, F. D. P.et. al (2013). Resilience measurement
Identification of Protected Critical facilitiesGOLF, CCC
Identify better Flood/Water Management Information SystemsGOLF, CCC
IDS/IPS malfunctionETSI GS ISI 001-1 V1.1.2
If >1 electric connection, can each handle the entire facility load?Adapted from the US:DHS Infrastructure Survey Tool (
If a natural hazard has caused a business interruption, how long was it?Adapted from the US:DHS Infrastructure Survey Tool (
If all air service lost (with no backup), time until severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If all maritime service lost (with no backup), time until severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If all pipeline service lost (with no backup), time until severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If all rail service lost (with no backup), time until severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If all road service lost (with no backup), time until severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If barrier effect is too low has actions been planned?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
If barrier effect is too low has extra monitoring been installed?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
If critical chemical source lost (without backup), time until severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If critical fuel source lost (without backup), time until severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If critical raw material source lost (no backup), time until severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If critical waste disposal service lost (no backup), time to severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If cybersecurity plan exercises are held, which type are they?Adapted from the US:DHS Infrastructure Survey Tool (
If cybersecurity plan exercises held, are results documented & reported?Adapted from the US:DHS Infrastructure Survey Tool (
If external communication service lost, how soon facility severely impactedAdapted from the US:DHS Infrastructure Survey Tool (
If external electric service lost, how soon facility is severely impactedAdapted from the US:DHS Infrastructure Survey Tool (
If external natural gas service lost, how soon facility severely impactedAdapted from the US:DHS Infrastructure Survey Tool (
If external wastewater discharge service lost, time to severe impactAdapted from the US:DHS Infrastructure Survey Tool (
If external waters service lost, how soon facility severely impactedAdapted from the US:DHS Infrastructure Survey Tool (
If high speed avenue of approach present, barriers used for mitigation?Adapted from the US:DHS Infrastructure Survey Tool (
If IT service is lost, is there an alternative or backup mode?Adapted from the US:DHS Infrastructure Survey Tool (
If IT system completely lost, time until severe impact on the facilityAdapted from the US:DHS Infrastructure Survey Tool (
If multiple natural gas service lines, where do they enter the facility?Adapted from the US:DHS Infrastructure Survey Tool (
If multiple water service lines, where do they enter the facility?Adapted from the US:DHS Infrastructure Survey Tool (
If primary mode of communication service is lost, is there a backup mode?Adapted from the US:DHS Infrastructure Survey Tool (
If SAA is lost, how long would to replace and return to full operations?Adapted from the US:DHS Infrastructure Survey Tool (
If SAA lost (no backup/alternative), time to severe impact on facilityAdapted from the US:DHS Infrastructure Survey Tool (
If storage fails during high demand, how much production is lost?PAP Serbia
If storage fails during high demand, how much production is lost?N/A
If there are >1 electric service connections, where do the lines enter?Adapted from the US:DHS Infrastructure Survey Tool (
If there are multiple wastewater laterals, where do thex exit the facility?Adapted from the US:DHS Infrastructure Survey Tool (
If there is a cybersecurity plan, approved by senior management?Adapted from the US:DHS Infrastructure Survey Tool (
If there is a cybersecurity plan, are exercises conducted?Adapted from the US:DHS Infrastructure Survey Tool (
If there is a cybersecurity plan, are personnel trained on the plan?Adapted from the US:DHS Infrastructure Survey Tool (
If there is a cybersecurity plan, is it required by regulation?Adapted from the US:DHS Infrastructure Survey Tool (
If there is a cybersecurity plan, is it reviewed at least annually?Adapted from the US:DHS Infrastructure Survey Tool (
If there is a cybersecurity plan, key personnel aware of and have access?Adapted from the US:DHS Infrastructure Survey Tool (
If there is a cybersecurity plan, which areas does it address?Adapted from the US:DHS Infrastructure Survey Tool (
If there is illumination for entrance and delivery areas, has backup power?Adapted from the US:DHS Infrastructure Survey Tool (
If there is illumination for entrance and delivery areas, is it uniform?Adapted from the US:DHS Infrastructure Survey Tool (
If there is illumination for fences, gates, parking areas, is it uniform?Adapted from the US:DHS Infrastructure Survey Tool (
If there is illumination in waterside areas, does it have backup power?Adapted from the US:DHS Infrastructure Survey Tool (
If there is illumination in waterside areas, is it uniform?Adapted from the US:DHS Infrastructure Survey Tool (
If this SAA is lost, is there a backup or an alternative mode?Adapted from the US:DHS Infrastructure Survey Tool (
If yes, does the facility have immediate access to such specialized items?Adapted from the US:DHS Infrastructure Survey Tool (
If yes, is the internal electric power source the primary source?Adapted from the US:DHS Infrastructure Survey Tool (
If yes, is there a policy for review of recorded informationAdapted from the US:DHS Infrastructure Survey Tool (
If you can access your systems over distance is that always made..Swedish Water and Wastewater Association. Blåa lista
If your facility uses some standard, which standard(s) do you use?Adapted from the US:DHS Infrastructure Survey Tool (
Illegal, unreported and unregulated fishingAnnex of the resolution adopted by the General Assem
Illicit access to InternetETSI GS ISI 001-1 V1.1.2
Illicit armsAnnex of the resolution adopted by the General Assem
Illicit network connectionsETSI GS ISI 001-1 V1.1.2
Illicit remote accessETSI GS ISI 001-1 V1.1.2
Illicit Wi-Fi access pointsETSI GS ISI 001-1 V1.1.2
Illumination for fences, gates, parking areas, has backup power?Adapted from the US:DHS Infrastructure Survey Tool (
Image storeThe Center for Internet Security, Critical Security
Impact mitigation measures undertaken?Petit, F. D. P.et. al (2013). Resilience measurement
Impact mitigation measures undertaken?Petit, F. D. P.et. al (2013). Resilience measurement
Impact of lost fuel value 
Impact of lost revenue 
Impact of repair cost 
Impact on high priority customersVTT. (2017). Presentation for SmartResilience case f
Impacts amplified by inadequate communication.Steinbeis EU-Vri
Impacts of partial or complete facility shut-down recorded and considered?German Federal Ministry of the Interior. (2008) Prot
Important storage media/files always in water- and fireproof containers?German Federal Ministry of the Interior. (2008) Prot
In partial & full-scale exercises: are buildings evacuated?German Federal Ministry of the Interior. (2008) Prot
In partial & full-scale exercises: is a head count taken after evacuation?German Federal Ministry of the Interior. (2008) Prot
In partial & full-scale exercises: is all equipment tested?German Federal Ministry of the Interior. (2008) Prot
in silico treatment validationDeep Knowledge Group (2020) COVID-19 ranking framewo
In the absence of main personnel, are the backup personnel available?SmartResilience (2018) D3.2 Resilience Assessment Me
in vitro human tissue testingDeep Knowledge Group (2020) COVID-19 ranking framewo
In what ways are risks and hazards systematically identified? 
In what ways are risks and hazards systematically identified? 
In what ways does the organization learn from own events and experiences?Inspired by Annex 1 - Generic resilience indicators
In what ways is the organization prepared for certain situations/conditionsInspired by Annex 1 - Generic resilience indicators
IncertitudeCWA16649
Incident at facility would cause immediate mass evacuation at the facilityAdapted from the US:DHS Infrastructure Survey Tool (
Incident frequency?Helen Ltd. Meeting between VTT & Helen representativ
Incident handling key decision-making rolesThe Center for Internet Security, Critical Security
Incident investigation procedures include?American Petroleum Institute RP 581 (2000). (3rd ed.
Incident related communication exchanged with other relevant sites?American Petroleum Institute RP 581 (2000). (3rd ed.
Incident response proceduresThe Center for Internet Security, Critical Security
Incidents handling rolesThe Center for Internet Security, Critical Security
Incidents on not addressed assetsETSI GS ISI 001-1 V1.1.2
IncoherenceCWA16649
Income (£) 
Increase in the economic value of the Company(in Euros/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
Increase in the economic value of the Company(in Euros/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
Increase in the economic value of the Company(in Euros/day)GRI G4 (2013) Global Reporting Initiative, Amsterdam
IncreasingCWA16649
Index of coastal eutrophication and floating plastic debris densityAnnex of the resolution adopted by the General Assem
Indicator of food price anomaliesAnnex of the resolution adopted by the General Assem
Indicator TemplateSteinbeis EU-VRi
Informal employment in non‑agriculture employmentAnnex of the resolution adopted by the General Assem
Information asymmetriesCWA16649
Information collected in Standard accident/incident investigation form?American Petroleum Institute RP 581 (2000). (3rd ed.
Information collected in Standard accident/incident investigation form?American Petroleum Institute RP 581 (2000). (3rd ed.
Information for personnel regarding anomaliesThe Center for Internet Security, Critical Security
Information on third-party contactsThe Center for Internet Security, Critical Security
Information Security Management System (ISMS)Cloud Computing Compliance Controls Catalogue (C5) -
Information Security PolicyCloud Computing Compliance Controls Catalogue (C5) -
Infrastructure for Rapid Equipment ProductionDeep Knowledge Group (2020) COVID-19 ranking framewo
Infrastructure for test production and deliveryDeep Knowledge Group (2020) COVID-19 ranking framewo
Ingérence (intervention)CWA16649
Installation of alarm & warning system independent of public power supply?German Federal Ministry of the Interior. (2008) Prot
Installation of emergency lighting independent of the public power supply?German Federal Ministry of the Interior. (2008) Prot
Integrated mitigation, adaptation, impact reduction and early warningAnnex of the resolution adopted by the General Assem
Interfaces and DependenciesCloud Computing Compliance Controls Catalogue (C5) -
Interior IDS is maintained according to recommended specificationsAdapted from the US:DHS Infrastructure Survey Tool (
Interior IDS is tested periodicallyAdapted from the US:DHS Infrastructure Survey Tool (
Internal & external communication channels tested in table-top exercises?German Federal Ministry of the Interior. (2008) Prot
Internal contextual factors accounted in the resilience policy/ strategy?ISO (2012). Societal security Business continuity ma
Internal contextual factors accounted in the resilience policy/ strategy?ISO (2012). Societal security Business continuity ma
Internal deviant behavioursETSI GS ISI 001-1 V1.1.2
Internal deviant behavioursETSI GS ISI 001-1 V1.1.2
Internal natural gas or other fuel source can serve as a backupAdapted from the US:DHS Infrastructure Survey Tool (
Internal or external team responsible for immediate cyber incident responseAdapted from the US:DHS Infrastructure Survey Tool (
Internal systems not on dedicated VLANsThe Center for Internet Security, A Measurement Comp
Internal unit generates enough electricity to handle full facility loadAdapted from the US:DHS Infrastructure Survey Tool (
International financial flows to developing countriesAnnex of the resolution adopted by the General Assem
International Health Regulations (IHR) capacity Annex of the resolution adopted by the General Assem
International multilateral environmental agreements on hazardous wasteAnnex of the resolution adopted by the General Assem
International support to infrastructureAnnex of the resolution adopted by the General Assem
Internet illicit access (anonymization)ETSI GS ISI 001-1 V1.1.2
Internet illicit access (control bypass)ETSI GS ISI 001-1 V1.1.2
Internet-visible serversThe Center for Internet Security, Critical Security
Interrupted supply at the point of highest volume exit?PAP Serbia
Interrupted supply at the point of highest volume exit?N/A
Intrusion attempts (external)ETSI GS ISI 001-1 V1.1.2
Intrusions (external)ETSI GS ISI 001-1 V1.1.2
Intrusions (internal)ETSI GS ISI 001-1 V1.1.2
Inventory of boats and tractors available to aid with evacuationsGOLF, CCC
Inventory of River Channel ScreensGOLF, CCC
Investigation team qualifications?American Petroleum Institute RP 581 (2000). (3rd ed.
Investigation team qualifications?Company's Standard SD-09.01.15 HSE incident manageme
Investigation team qualifications?American Petroleum Institute RP 581 (2000). (3rd ed.
Investments in energy efficiencyAnnex of the resolution adopted by the General Assem
Involvement of childrenCWA16649
Involvement of/risk for future generationsCWA16649
Is transparency pyramid of all incidents developed ?SD-09.01.15 - HSE Incident Management Standard
Is 24-7 service for critical systems based on shift operation or on-call procedures? 
Is a 24-hour security service present?InfraStress - CARMA
Is a backup control center available? 
Is a check of people / vehicle foreseen before allowing the access to the facility?RINA InfraStress project (D3.4, T8.4)
Is a crisis response plan in place?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is a crisis response plan in place?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is a data storage and backup system available? 
Is a Decision Tool based on the plant risk analysis available to help in decision under emergency conditions? (e.g. identification of incipient threats, assessment of expected damages)RINA InfraStress project (D3.4, T8.4)
Is a Decision Tool based on the plant risk analysis available to help in decision under emergency conditions? (e.g. identification of incipient threats, assessment of expected damages)RINA InfraStress project (D3.4, T8.4)
Is a Decision Tool based on the plant risk analysis available to help in decision under emergency conditions? (e.g. identification of incipient threats, assessment of expected damages)RINA InfraStress project (D3.4, T8.4)
Is a flood threat on the Corporate Risk Register of all key stakeholders?GOLF, CCC
Is a head count taken at the building evacuation assembly area?German Federal Ministry of the Interior. (2008) Prot
Is a maintenance concept available? 
Is a power supply backup (UPS) available? 
Is a Resilience policy defined (status)?American Petroleum Institute RP 581 (2000). (3rd ed.
Is a Resilience policy defined (status)?American Petroleum Institute RP 581 (2000). (3rd ed.
Is a risk assessment plan available to plant Operators and Managers?RINA InfraStress project (D3.4, T8.4)
Is a risk assessment plan available to plant Operators and Managers?RINA InfraStress project (D3.4, T8.4)
Is a risk assessment plan available to plant Operators and Managers?RINA InfraStress project (D3.4, T8.4)
Is a risk parameter calculated to rank hazards? RINA InfraStress project (D3.4, T8.4)
Is a risk parameter calculated to rank hazards? RINA InfraStress project (D3.4, T8.4)
Is a risk parameter calculated to rank hazards?RINA InfraStress project (D3.4, T8.4)
Is a risk parameter calculated to rank hazards? RINA InfraStress project (D3.4, T8.4)
Is a task force convened in case of crisis at the organization?German Federal Ministry of the Interior. (2008) Prot
Is access of staff from external organizations controlled?German Federal Ministry of the Interior. (2008) Prot
Is access to any damage zones controlled?German Federal Ministry of the Interior. (2008) Prot
Is access to control/computer rooms and remote equipment controlled?Adapted from the US:DHS Infrastructure Survey Tool (
Is access to emergency zones controlled?German Federal Ministry of the Interior. (2008) Prot
Is access to the organization’s grounds controlled?German Federal Ministry of the Interior. (2008) Prot
Is all material damage during and after a crisis incident recorded?German Federal Ministry of the Interior. (2008) Prot
Is all personnel, including entrepreneurs, subject to continuous..Swedish Water and Wastewater Association. Blåa lista
Is an anomaly detector/aggregator implemented in the system? 
Is an established quality control and/or testing regime in place?Commission Implementing Regulation (EU) 2015/1998 of
Is an extended chemical analysis carried out each year?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Is an ICT maintenance and update concept established? 
Is an Internal Emergency Plan available?InfraStress - CARMA
Is Analytical Methods (Fault Tree, Event Tree, Reliability Calculation) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Analytical Methods (Fault Tree, Event Tree, Reliability Calculation) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Analytical Methods (Fault Tree, Event Tree, Reliability Calculation) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is any partial or complete shut down controlled?German Federal Ministry of the Interior. (2008) Prot
Is background material on the facility available for media response?German Federal Ministry of the Interior. (2008) Prot
Is CCTV system maintained according to recommended specifications?Adapted from the US:DHS Infrastructure Survey Tool (
Is centralised control implemented for coordination of critical resources and activities during shocks and stresses?SMR CWA91:2018
Is compliance with legal obligations monitored?German Federal Ministry of the Interior. (2008) Prot
Is crisis management in place? (incident management)German Federal Ministry of the Interior. (2008) Prot
Is Damage probability evaluation adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is electricityy backup generator routinely tested under load?Adapted from the US:DHS Infrastructure Survey Tool (
Is everyone trained about what is sensitive information and..Swedish Water and Wastewater Association. Blåa lista
Is external electric power required for Facility core operations?Adapted from the US:DHS Infrastructure Survey Tool (
Is external natural gas required for Facility core operations?Adapted from the US:DHS Infrastructure Survey Tool (
Is external wastewater discharge required for Facility core operations?Adapted from the US:DHS Infrastructure Survey Tool (
Is external water required for Facility core operations?Adapted from the US:DHS Infrastructure Survey Tool (
Is Flooding on you corporate risk register?CCC
Is fuel from the coal storage of another plant available?VTT. (2017). Presentation for SmartResilience case f
Is grid nodes protection prioritized by number of connections/customers? 
Is hardware of the computer where the software running? 
Is heat loss tolerable at indicated incident?HELEN
Is high fuel temperature being indicated?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Is Individual Risk (LSIR maps and/or IRPA) adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is Individual Risk (LSIR maps and/or IRPA) adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is information about suspicious activities recorded and passed on?German Federal Ministry of the Interior. (2008) Prot
Is information about suspicious items recorded and passed on?German Federal Ministry of the Interior. (2008) Prot
Is information communicated if a backup generator needs refuelling?German Federal Ministry of the Interior. (2008) Prot
Is information distributed via radio and TV?German Federal Ministry of the Interior. (2008) Prot
Is information technology required for facility core operations?Adapted from the US:DHS Infrastructure Survey Tool (
Is Interdependency effects with other SIPS/CIs evaluated?RINA InfraStress project (D3.4, T8.4)
Is Interdependency effects with other SIPS/CIs evaluated?RINA InfraStress project (D3.4, T8.4)
Is Interdependency effects with other SIPS/CIs evaluated?RINA InfraStress project (D3.4, T8.4)
Is it announced when a building evacuation is completed?German Federal Ministry of the Interior. (2008) Prot
Is it possible that a flood could lead to loss of data?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is it sufficient to implement rerouting or other quick fix?HELEN
Is J-factor positive? 
Is maintenance plan based on recorded events?CCPS (2007). Guidelines for risk based process safet
Is maintenance plan executed ?CCPS (2007). Guidelines for risk based process safet
Is Management systems failure (e.g., safety management system ineffective) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Is Management systems failure (e.g., safety management system ineffective) currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Is Markov modelling adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Markov modelling adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Markov modelling adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Numerical indicator adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is Numerical indicator adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is Numerical Simulation (Monte Carlo) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Numerical Simulation (Monte Carlo) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Numerical Simulation (Monte Carlo) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is organizational crime a critical risk for the country?Organisation for Economic Co-operation and Developme
Is periodic training foreseen for security related issues?RINA InfraStress project (D3.4, T8.4)
Is Procedure for Management of change established ?CCPS (2007). Guidelines for risk based process safet
Is protection prioritized by importance of a specific hardware component? 
Is protective equipment available in the crisis mgmt. center for all staff?German Federal Ministry of the Interior. (2008) Prot
Is public accessibility to (transformer) substations limited? 
Is public accessibility to control centers/ control rooms limited? 
Is public accessibility to grid operation buildings limited? 
Is public accessibility to HVDC converter stations limited? 
Is Qualitative assessment based on engineering judgement adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is refueling necessary for the electricity backup generator?Adapted from the US:DHS Infrastructure Survey Tool (
Is relevant training needs part of the annual training need analysis?CEC
Is remote work generally supportet by the authorities? 
Is resilience integrated into policies?prCWA 91:2018 City Resilience Maturity Model
Is review of lessons-learned conducted?HELEN
Is risk and resilience information communicated to all relevant levels?Inspired by Annex 1 - Generic resilience indicators
Is risk and resilience information communicated to all relevant levels?ISO 22396. Guidelines for information exchange betwe
Is Risk Assessment conducted? 
Is risk management inplace?German Federal Ministry of the Interior. (2008) Prot
Is Risk Matrix adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is Risk Matrix adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is Risk Matrix adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is risk ranking adopted for identifying prevention/protection measures?RINA InfraStress project (D3.4, T8.4)
Is risk ranking adopted for identifying prevention/protection measures?RINA InfraStress project (D3.4, T8.4)
Is risk ranking adopted for identifying prevention/protection measures?RINA InfraStress project (D3.4, T8.4)
Is risk ranking adopted for identifying prevention/protection measures?RINA InfraStress project (D3.4, T8.4)
Is risk ranking adopted to identify additional countermeasures (both technical and/or operational)?RINA InfraStress project (D3.4, T8.4)
Is risk ranking adopted to identify most critical countermeasures (Safety Critical Elements) and related Operation and Maintenance needs?RINA InfraStress project (D3.4, T8.4)
Is risk ranking adopted to identify most critical countermeasures (Safety Critical Elements) and related Operation and Maintenance needs?RINA InfraStress project (D3.4, T8.4)
Is risk ranking adopted to identify most critical countermeasures (Safety Critical Elements) and related Operation and Maintenance needs?RINA InfraStress project (D3.4, T8.4)
Is risk reduction implemented to define actuation plan? 
Is safe accommodation provided to staff, visitors, and clients?German Federal Ministry of the Interior. (2008) Prot
Is safe accommodation provided to task force members?German Federal Ministry of the Interior. (2008) Prot
Is security data tracked automatically?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is sensitive fuel quality indicated for the batch?1. Sipilä. (2013).Emerging risk issues in undergroun
Is spontaneous chemical reaction currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Is spontaneous chemical reaction currently considered in the plant Risk Assessment?RINA InfraStress project (D3.4, T8.4)
Is staff aware through training of the IEMI phenomenology? 
Is Statistical data (historical analysis) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Statistical data (historical analysis) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is Statistical data (historical analysis) adopted for the likelihood assessment?RINA InfraStress project (D3.4, T8.4)
Is the air handling controlled by a building controlAdapted from the US:DHS Infrastructure Survey Tool (
Is the alarm system fully operational?IEC 61508, IEC 61511, PSMS
Is the area exposed to tidal floods?GOLF, CCC
Is the Avalanche occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the BAM-A-IDS connected to real time sensor data/process information?InfraStress D5.2
Is the business continuity plan for resilience ops. required by regulation?Adapted from the US:DHS Infrastructure Survey Tool (
Is the CCTV recorded?Adapted from the US:DHS Infrastructure Survey Tool (
Is the CCTV system tested periodically?Adapted from the US:DHS Infrastructure Survey Tool (
Is the city a member of a major network of European cities?SMR CWA91:2018
Is the city's Risk Catalog updated regularly?SMR CWA91:2018
Is the communication protocols stack optimized? 
Is the Consequence assessment dynamically updated on-line (e.g. on the basis of actual values of process parameters, of combination of alarms etc)?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment dynamically updated on-line (e.g. on the basis of actual values of process parameters, of combination of alarms etc)?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment dynamically updated on-line (e.g. on the basis of actual values of process parameters, of combination of alarms etc)?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment update taking into account the global warming influence?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated at periodic intervals during life of plant?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated at periodic intervals during life of plant?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated at periodic intervals during life of plant?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated during the life of plant? RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated during the life of plant? RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated during the life of plant? RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated when required?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated when required?RINA InfraStress project (D3.4, T8.4)
Is the Consequence assessment updated when required?RINA InfraStress project (D3.4, T8.4)
Is the crisis management center centrally accessible?German Federal Ministry of the Interior. (2008) Prot
Is the crisis management center operational?German Federal Ministry of the Interior. (2008) Prot
Is the crisis management center protected from view & eavesdropping?German Federal Ministry of the Interior. (2008) Prot
Is the data storage system decentralized?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is the data storage system decentralized?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is the earthquake occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the Emergency Plan exercised at least once a year?Adapted from the US:DHS Infrastructure Survey Tool (
Is the Emergency Plan required by a Federal, state, or local regulaton?Adapted from the US:DHS Infrastructure Survey Tool (
Is the Expected Loss evaluation adopted for ranking?RINA InfraStress project (D3.4, T8.4)
Is the exterior IDS maintained according to recommended specifications?Adapted from the US:DHS Infrastructure Survey Tool (
Is the exterior IDS tested periodically?Adapted from the US:DHS Infrastructure Survey Tool (
Is the external source for electric power the primary source?Adapted from the US:DHS Infrastructure Survey Tool (
Is the extreme temperature event occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the extreme weather event occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the facility considered a potentially hazardous* facilityAdapted from the US:DHS Infrastructure Survey Tool (
Is the facility located in an area that experiences earthquakes?Adapted from the US:DHS Infrastructure Survey Tool (
Is the facility located in an area that experiences floods?Adapted from the US:DHS Infrastructure Survey Tool (
Is the facility located in an area that experiences high winds?Adapted from the US:DHS Infrastructure Survey Tool (
Is the facility located in an area that experiences hurricanes?Adapted from the US:DHS Infrastructure Survey Tool (
Is the facility located in an area that experiences lightning strikes?Adapted from the US:DHS Infrastructure Survey Tool (
Is the facility located in an area that experiences severe winter storms?Adapted from the US:DHS Infrastructure Survey Tool (
Is the facility located in an area that experiences tornadoes?Adapted from the US:DHS Infrastructure Survey Tool (
Is the facility located in an area that experiences wildefires?Adapted from the US:DHS Infrastructure Survey Tool (
Is the facility part of a designated systemAdapted from the US:DHS Infrastructure Survey Tool (
Is the floods occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the Frost Heave occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the fuel oil storage available?VTT. (2017). Presentation for SmartResilience case f
Is the fuel redirecting experience satisfactory?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Is the grid node well connected to other adjacent nodes? 
Is the Hazard identification done at periodic intervals during life of plant?RINA InfraStress project (D3.4, T8.4)
Is the Hazard identification done at periodic intervals during life of plant?RINA InfraStress project (D3.4, T8.4)
Is the Hazard identification done at periodic intervals during life of plant?RINA InfraStress project (D3.4, T8.4)
Is the Hazard identification done during the design phase?RINA InfraStress project (D3.4, T8.4)
Is the Hazard identification done during the design phase?RINA InfraStress project (D3.4, T8.4)
Is the Hazard identification done during the design phase?RINA InfraStress project (D3.4, T8.4)
Is the Hazard identification done when required (e.g. by design/operational changes)?RINA InfraStress project (D3.4, T8.4)
Is the Hazard identification done when required (e.g. by design/operational changes)?RINA InfraStress project (D3.4, T8.4)
Is the Hazard identification updates taking into account the global warming influence?RINA InfraStress project (D3.4, T8.4)
Is the information function manned?National Food Agency, Sweden. (2011). Strategi vid v
Is the IT-Security Officer responsible of cybersecurity? 
Is the landline telephone system protected by a backup generator?German Federal Ministry of the Interior. (2008) Prot
Is the Lighting occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the likelihood (expressed as probability, frequency of occurrence, return time) of the Technological hazards estimated? RINA InfraStress project (D3.4, T8.4)
Is the likelihood (expressed as probability, frequency of occurrence, return time) of the Technological hazards estimated? RINA InfraStress project (D3.4, T8.4)
Is the likelihood (probability, frequency of occurrence, return time) of the hazards estimated? RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment a Qualitative assessment based on engineering judgement ?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment a Qualitative assessment based on engineering judgement ?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment dynamically updated on-line (e.g. on the basis of actual values of process parameters, of combination of alarms etc)?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment dynamically updated on-line (e.g. on the basis of actual values of process parameters, of combination of alarms etc)?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment dynamically updated on-line (e.g. on the basis of actual values of process parameters, of combination of alarms etc)?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment update taking into account the global warming influence?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated at periodic intervals during life of plant?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated at periodic intervals during the life of plant?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated at periodic intervals during the life of plant?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated during the life of plant? RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated during the life of plant? RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated during the life of plant? RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated when required?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated when required?RINA InfraStress project (D3.4, T8.4)
Is the likelihood assessment updated when required?RINA InfraStress project (D3.4, T8.4)
Is the likelihood of the Physical Security hazards estimated by any other method?RINA InfraStress project (D3.4, T8.4)
Is the likelihood of the Physical Security hazards estimated by Historical data analysis?RINA InfraStress project (D3.4, T8.4)
Is the likelihood of the Physical Security hazards estimated by Qualitative assessment based on engineering and experts judgement?RINA InfraStress project (D3.4, T8.4)
Is the likelihood of the Physical Security hazards estimated in a Quantitative way?RINA InfraStress project (D3.4, T8.4)
Is the likelihood of the Physical Security hazards estimated?RINA InfraStress project (D3.4, T8.4)
Is the local network where the computer connected? 
Is the main raw water source classified as a water protection area?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Is the management of equipment and instrumentation subject of audits?Draft proposal on possible resilience or functionali
Is the management system ensuring the required security controls?Commission Implementing Regulation (EU) 2015/1998 of
Is the Membrane whole and operating as perscribed?IEC 61508, IEC61511, PSMS
Is the monitoring and security alerts systems advanced? 
Is the monitoring of measures done after the incident investigation?CCPS. (2011). Process safety leading and lagging met
Is the multi-level governance approach to be used in the resilience building process clearly outlined?SMR CWA91:2018
Is the necessary equipment for incident response provided?German Federal Ministry of the Interior. (2008) Prot
Is the negative consequence (safety impacts on people, impact on environment, economic impact) of the Technological hazards estimated? RINA InfraStress project (D3.4, T8.4)
Is the negative consequence (safety impacts on people, impact on environment, economic impact) of the Technological hazards estimated? RINA InfraStress project (D3.4, T8.4)
Is the operator detecting a fire odour?1. Sipilä. (2013).Emerging risk issues in undergroun
Is the outer shell of thebuilding flood-proof?German Federal Ministry of the Interior. (2008) Prot
Is the overall system structured in a mesh?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is the perception on social media positive or negative?InfraStress - CARMA
Is the person responsible for security controls subject to pre-check?Commission Implementing Regulation (EU) 2015/1998 of
Is the plant working with raising awareness of and reduction of risks?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Is the power grid robust by means of the n-1 stability criterion?50hertz Transmission GmbH, Amprion GmbH, Tennet TSO
Is the pump house redesigned for passive protection?CCC
Is the purpose of safety clear in regards of living up to citizens demands?Swedish Water and Wastewater Association. Blåa lista
Is the purpose of safety clear in regards of minimizing need for personel?Swedish Water and Wastewater Association. Blåa lista
Is the purpose of safety clear in regards of the physical installation?Swedish Water and Wastewater Association. Blåa lista
Is the purpose of safety clear regarding demands from customers etc?Swedish Water and Wastewater Association. Blåa lista
Is the purpose of safety work clear regarding fulfilling internal demands?Swedish Water and Wastewater Association. Blåa lista
Is the purpose of safety work clear regarding rules and regulation?Swedish Water and Wastewater Association. Blåa lista
Is the residual threat level after a crisis incident identified?German Federal Ministry of the Interior. (2008) Prot
Is the resilience action plan aligned, integrated and connected to regional plans?SMR CWA91:2018
Is the resilience action plan included in the local government budget?SMR CWA91:2018
Is the risk assessment available to plant Operators and Managers?RINA InfraStress project (D3.4, T8.4)
Is the risk assessment periodically updated?RINA InfraStress project (D3.4, T8.4)
Is the risk assessment procedure developed following a specific Standard? RINA InfraStress project (D3.4, T8.4)
Is the risk assessment procedure developed following a specific Standard? RINA InfraStress project (D3.4, T8.4)
Is the risk assessment procedure developed following a specific Standard? RINA InfraStress project (D3.4, T8.4)
Is the risk assessment procedure developed following a specific Standard? RINA InfraStress project (D3.4, T8.4)
Is the risk assessment procedure reviewed, approved or certified by external authorities?RINA InfraStress project (D3.4, T8.4)
Is the risk assessment procedure reviewed, approved or certified by external authorities?RINA InfraStress project (D3.4, T8.4)
Is the risk assessment procedure reviewed, approved or certified by external Authorities?RINA InfraStress project (D3.4, T8.4)
Is the risk assessment procedure reviewed, approved or certified by external authorities?RINA InfraStress project (D3.4, T8.4)
Is the Rockfall occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the RSA known in relevant parts by various critical groups?Swedish Civil Contingencies Agency. (2015). Indikato
Is the seal whole and holding?IEC 61508, IEC61511, PSMS
Is the Security Officer responsible of physical security? 
Is the security programme conclusive, robust and complete?Commission Implementing Regulation 2015/1998
Is the sensor operational, online and monitored?IEC 61508, IEC61511, PSMS
Is the site protected by adequate physical fences and/or barriers?European Commission (2015). Commission Implementing
Is the smart surveillance able to do motion characteristics detection?Hampapur. A. et.al. (2003). Smart surveillance: appl
Is the smart surveillance system equipped to give abandoned object alert?Hampapur. A. et.al. (2003). Smart surveillance: appl
Is the soil erosion occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the Space weather occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the staff in charge of the security trained? 
Is the staff responsible involved in the risk management process defined? 
Is the storage tanks overflow protection system in place?Draft proposal on possible resilience or functionali
Is the training topic suitable with the company personnel?InfraStress - CARMA
Is the tsunami occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the volcanic eruption occurence currently considered in the plant Risk Assessment?RINA InfraStress project (D2.3)
Is the water supply satifactory in the future (20-30years)?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Is there a autoreclosing mechanism installed in the overhead distribution line? 
Is there a backup IMCC?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a CCTV or similar survailance system in the facility? 
Is there a checklist or a plan for actors to cooperate with?National Food Agency, Sweden. (2011). Strategi vid v
Is there a closed loop corrective action (CLCA) procedure in the SIP?Draft proposal on possible resilience or functionali
Is there a continuity agreement with the IT provider for restoration?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a continuity plan with byproducts/wastes removal providers?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a continuity plan with chemical providers?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a continuity plan with fuel providers?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a continuity plan with raw materials providers?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a continuity plan with the electric provider for restoration?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a continuous audit of SCADA security?Swedish Water and Wastewater Association. Blåa lista
Is there a continuous contact with police and/or local/country Authorities?RINA InfraStress project (D3.4, T8.4)
Is there a cooperation plan with emergency service providers in place?SMR CWA91:2018
Is there a cooperative forum within the organization where..Swedish Water and Wastewater Association. Blåa lista
Is there a data backup plan?German Federal Ministry of the Interior. (2008) Prot
Is there a dedicated security layout available?RINA InfraStress project (D3.4, T8.4)
Is there a defined structured hierarchy of persons responsible for taking decisions? 
Is there a developed resilience culture strategy?prCWA 91:2018 City Resilience Maturity Model
Is there a disaster relief fund for emergencies in place?SMR CWA91:2018
Is there a formal environmental management system adopted in the organization (e.g., ISO 14000 series or EMAS scheme)?InfraStress Pilot 4
Is there a formal list of all currently available physical resources for response?SMR CWA91:2018
Is there a formal occupational health as safety management system adopted in the organization (e.g., OHSAS 18001 or ISO 45001 standards)?InfraStress - CARMA
Is there a formal Safety Management System adopted in the organization (aspect of major accidents prevention)?InfraStress - CARMA
Is there a governmental financial support for Economy/Industry program in place?assumption
Is there a IEP in place to handle cool down period? 
Is there a law/regulation in the country that governs pandemics and their associated risks 
Is there a list of existing plans and response mechanisms and guidelines for shocks and stresses?SMR CWA91:2018
Is there a maintenance regime at water treatment plant and plans for CapitGOLF, CCC
Is there a manager/department in charge of emergency management?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a manager/department in charge of IT security management?Adapted from the US:DHS Infrastructure Survey Tool (
Is there a patrolling service inside the facility?RINA InfraStress project (D3.4, T8.4)
Is there a photocopier in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Is there a physical security system protecting the control room?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there a physical security system protecting the control room?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there a plan for monitoring critical infrastructures’ functionality?SMR CWA91:2018
Is there a plan in place for a multi-level governance approach involving the municipal, regional and national levels of governance?SMR CWA91:2018
Is there a plan in place to encourage stakeholders to have appropriate insurance coverage?SMR CWA91:2018
Is there a plan in place to reach key stakeholders?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there a prioritized list of critical assets and services?SMR CWA91:2018
Is there a prioritized list of key assets? Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there a prioritized list of key assets? Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there a procedure ensuring the competence and background to the staff?Commission Implementing Regulation (EU) 2015/1998 of
Is there a procedure in place to handle quarantine along the border passages? 
Is there a procedure to regulate the communication with the Authorities exist?InfraStress - CARMA
Is there a process in place to enable upscaling of equipment availability? 
Is there a process in place to monitor system access/end-points? 
Is there a promotion and incentives plan for the development of sustainable infrastructures?SMR CWA91:2018
Is there a public platform to interact and communicate with stakeholders?SMR CWA91:2018
Is there a public website with emergency information?SMR CWA91:2018
Is there a questionnaire for checking media representatives?German Federal Ministry of the Interior. (2008) Prot
Is there a recovery procedure after the accident?InfraStress - CARMA
Is there a redundant, physically separate system of process control?German Federal Ministry of the Interior. (2008) Prot
Is there a resilience action plan to respond to shocks and long term stresses in place?SMR CWA91:2018
Is there a seating plan for task force meetings in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Is there a security plan detailing the security organization?RINA InfraStress project (D3.4, T8.4)
Is there a stakeholder engagement plan defining roles and responsibilities in place?SMR CWA91:2018
Is there a sufficent notification of response resources?Inspired by Annex 1 - Generic resilience indicators
Is there a system in place for data analysis after crisis?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there a system to exchange information with city police established?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there a system to exchange information with city police established?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there an access control for control center/ control rooms? 
Is there an access control for grid operation buildings? 
Is there an access control for HVDC converter stations? 
Is there an access control for substations/ transformer substations? 
Is there an access control management based on people / vehicle identification?RINA InfraStress project (D3.4, T8.4)
Is there an alternate site for continuity of business?Adapted from the US:DHS Infrastructure Survey Tool (
Is there an alternate source of chemicals?Adapted from the US:DHS Infrastructure Survey Tool (
Is there an alternate source of fuels?Adapted from the US:DHS Infrastructure Survey Tool (
Is there an alternate source of raw materials?Adapted from the US:DHS Infrastructure Survey Tool (
Is there an alternate source of waste disposal? (e.g. onsite storage)Adapted from the US:DHS Infrastructure Survey Tool (
Is there an alternate to the external source of water?Adapted from the US:DHS Infrastructure Survey Tool (
Is there an alternate to the external wastewater discharge service?Adapted from the US:DHS Infrastructure Survey Tool (
Is there an emergancy water plan respresenting the users actual needs?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Is there an escalation pyramid in place?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there an escalation pyramid in place?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there an established resilience position, department or committee?SMR CWA91:2018
Is there an incentives program for initiatives that contribute to build resilience?SMR CWA91:2018
Is there an independent security department within the organization?RINA InfraStress project (D3.4, T8.4)
Is there an insurance policy?InfraStress Pilot 3
Is there an internal communication platform in place for sharing information with different municipal departments and emergency service providers?SMR CWA91:2018
Is there an organisation's policy for BCMS?International organization for Standardization(2012)
Is there an organisation's policy for BCMS?International organization for Standardization(2012)
Is there an updated map of connections between SCADA and other networks..Swedish Water and Wastewater Association. Blåa lista
Is there an updated map where all the system dependencies are included..Swedish Water and Wastewater Association. Blåa lista
Is there and updated register for SCADA systems with producer/type/product/Swedish Water and Wastewater Association. Blåa lista
Is there and updated register for SCADA systems with versions of installed Swedish Water and Wastewater Association. Blåa lista
Is there any raw water Odour?Swedish Water and Wastewater Association, (2008). Rå
Is there any trace of Calicivirus (Noro- or sapovirus)?Swedish Water and Wastewater Association, (2008). Rå
Is there available excess capacity at the storage units?PAP Serbia
Is there emergency power to the water plant and how long does it last? Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Is there formal knowledge management and access for all relevant stakeholde 
Is there incident related communication exchange with other relevant sites?American Petroleum Institute RP 581 (2000). (3rd ed.
Is there national legislation, plans or equivalent strategy documents on zoonotic disease?GHS 1.2.1a (www.ghsindex.org)
Is there onsite water storage?Adapted from the US:DHS Infrastructure Survey Tool (
Is there physical protection to protect connection of equipment..Swedish Water and Wastewater Association. Blåa lista
Is there redundancy in a remote place?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there redundancy in a remote place?Jovanovic. A., et. al. (2017). T5.1: Report from the
Is there staff appointed to manage incidents?International organization for Standardization(2012)
Is there staff appointed to manage incidents?International organization for Standardization(2012)
Is there sufficient faxing capability in the crisis management center?German Federal Ministry of the Interior. (2008) Prot
Is there sufficient personnel assigned to maintaining the closed border? 
Is there surveillance of the location for water intakes?National Food Agency, Sweden. (2011). Strategi vid v
Is this a period of national holidays?PAP Serbia
Is this system evidenced?CEC
Is training for the response and recovery conducted?CEC
Is visualization technology available in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Is/are there (a) dedicated communication channel(s) for the security?RINA InfraStress project (D3.4, T8.4)
IT connected to public data networks protected against external access?German Federal Ministry of the Interior. (2008) Prot
IT manager appointed?Petit, F. et. al (2013). Resilience measurement inde
Jakeluverkoston seuranta - Monitoring of the distribution networkVTT
Jetty , Secondary indicatorR-Tech 2021
Jetty, Primary indicatorR-Tech 2021
Jobs in sustainable tourism industriesAnnex of the resolution adopted by the General Assem
Juomaveden laatu/kolibakteerit - Drinking water quality coliform bacteriaVTT
Juomaveden laatu/maku....- Quality of drinking water/taste....VTT
Key personnel aware of and have access to copy of the Emergency PlanAdapted from the US:DHS Infrastructure Survey Tool (
Key personnel aware of/can access continuity plan for resilience ops.Adapted from the US:DHS Infrastructure Survey Tool (
Kind of data monitoredResolute Assessment Methodology
Known evidence of research on pathogens with pandemic potential, toxins etc.?GHS 1.5.1a (www.ghsindex.org)
Known-to-scienceCWA16649
Korjaavien toimenpiteiden arviointi - Assessment of corrective measuresVTT Workshop 16.4.2018
Korjauskustannusten vaikutus - Impact of repair costVTT
KPI-Traffic Average queue time in secondsGOLF, NTA, AIA
KPI-Traffic congested speed in km/hGOLF, NTA, AIA
KPI-Traffic public transport flow bus flowsGOLF, NTA, AIA
KPI-Traffic public transport flow rail & light rail train flowsGOLF, NTA, AIA
KPI-Traffic Road Network Vehicle Flows by purpose commuter to workGOLF, NTA, AIA
KPI-Traffic Road Network Vehicle Flows by purpose educationGOLF, NTA, AIA
KPI-Traffic Road Network Vehicle Flows by purpose employers businessGOLF, NTA, AIA
KPI-Traffic Road Network Vehicle Flows by purpose otherGOLF, NTA, AIA
KPI-Traffic Road Network Vehicle Flows by vehicle class car flowsGOLF, NTA, AIA
KPI-Traffic Road Network Vehicle Flows by vehicle class HGV flowsGOLF, NTA, AIA
KPI-Traffic Road Network Vehicle Flows by vehicle class LGV flowsGOLF, NTA, AIA
KPI-Traffic Volume over capacity at junctions in %GOLF, NTA, AIA
Kriisiviestinnän toimivuus - Performance of crisis communicationVTT - workshop 16.4.2018
Kubelet operation error rate (last 5 minutes) 
Kubelet operation error rate per operation (last 5 minutes) 
Kyberuhat - Cyber threats VTT
Labour rights based on International Labour Organization (ILO) Annex of the resolution adopted by the General Assem
Lack of clear benefitsCWA16649
Lack of equityCWA16649
Lack of familiarityCWA16649
Lack of personal controlCWA16649
Lack of possibility for mitigationCWA16649
Lack of possibility to observe/monitorCWA16649
Lack of proportionalityCWA16649
Lack of reversibilityCWA16649
Lack of trustCWA16649
Lack of understan­ding:CWA16649
Lack of voluntarinessCWA16649
Laiteresurssit - Equipment resourcesVTT
Landline telephone system protected by an uninterruptible power supply?German Federal Ministry of the Interior. (2008) Prot
LatencyCWA16649
Law and Order Index Score - 2017Gallup World Poll, 2018 Global Law and Order Report.
Lead risk governance institution addresses competing policy objectives?Organisation for Economic Co-operation and Developme
Lead risk governance institution coordinates actions across levels of gov.?Organisation for Economic Co-operation and Developme
Lead risk governance institution coordinates gov. & NGO cooperation?Organisation for Economic Co-operation and Developme
Lead risk governance institution designs/formulates risk mgmt. policies?Organisation for Economic Co-operation and Developme
Lead risk governance institution disseminates evaluation results to public?Organisation for Economic Co-operation and Developme
Lead risk governance institution evaluates policy implementation?Organisation for Economic Co-operation and Developme
Lead risk governance institution monitors policy implementation?Organisation for Economic Co-operation and Developme
Lead risk governance institution promotes policy coherence?Organisation for Economic Co-operation and Developme
Lead risk governance institution provides policy implementation incentives?Organisation for Economic Co-operation and Developme
Lead risk governance institution sets performance targets?Organisation for Economic Co-operation and Developme
Lead risk governance institution sets priorities & allocates resources?Organisation for Economic Co-operation and Developme
Level Collaboration (data exchange) with other control roomsResolute Assessment methodology
Level of access to personal medical suppliesDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of Corruption Deep Knowledge Group (2020) COVID-19 ranking framewo
Level of education awareness of the public to flood eventsGOLF, CCC
Level of flood protection implemented at water pump houseGOLF, CCC
Level of GovTech developmentDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of GovTech developmentDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of Healthcare ProgressivenessDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of integration with extra urban mobility plans/strategiesResolute assessment methodology
Level of medical doctors' expertiseDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of modern sanitization methodsDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of priority planning on road reopeningGOLF, CCC
Level of proficiency in functional (a) literacy and (b) numeracy skills.Annex of the resolution adopted by the General Assem
Level of security and defense advancementDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of Technological AdvancementDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of tourist flowDeep Knowledge Group (2020) COVID-19 ranking framewo
Level of warning of incremental discharge from DAM.GOLF, CCC
Level of water stressAnnex of the resolution adopted by the General Assem
Liability / asset levels  
Life expectancy at birthOECD Statistics (2018), http://data.oecd.org
Lists of participants prepared for crisis mgmt. center briefings?German Federal Ministry of the Interior. (2008) Prot
Local administrative units with established and operational policiesAnnex of the resolution adopted by the General Assem
Log anomalies reviewThe Center for Internet Security, Critical Security
Log production space eventsETSI GS ISI 001-1 V1.1.2
Log storage spaceThe Center for Internet Security, Critical Security
Logging and Monitoring - Access, Storage and DeletionCloud Computing Compliance Controls Catalogue (C5) -
Logging and Monitoring – ConceptCloud Computing Compliance Controls Catalogue (C5) -
Logging and Monitoring – ConfigurationCloud Computing Compliance Controls Catalogue (C5) -
Logging and Monitoring - Identification of EventsCloud Computing Compliance Controls Catalogue (C5) -
Logging and Monitoring - Metadata Management ConceptCloud Computing Compliance Controls Catalogue (C5) -
Logging malfunction (malfunction)ETSI GS ISI 001-1 V1.1.2
Logging malfunction (no tracking)ETSI GS ISI 001-1 V1.1.2
Logging malfunction (recordings)ETSI GS ISI 001-1 V1.1.2
Logical Lines of CodeEU-VRi
Long passwordsThe Center for Internet Security, Critical Security
Long passwords on user accountsThe Center for Internet Security, Critical Security
Loss of safety marginsCWA16649
Loss or theft of mobile devicesETSI GS ISI 001-1 V1.1.2
Loss or theft of mobile devicesETSI GS ISI 001-1 V1.1.2
Lube oil temperature behind cooler 
Macroeconomic DashboardAnnex of the resolution adopted by the General Assem
Maintenance acitivities planned?Petit, F. D. P.et. al (2013). Resilience measurement
Maintenance acitivities planned?Petit, F. D. P.et. al (2013). Resilience measurement
Maintenance activities conducted?Petit, F. D. P.et. al (2013). Resilience measurement
Maintenance plan developed for each production unit?CCPS (2007). Guidelines for risk based process safet
Maintencance concept/interval for power supply backup (UPS) systems? 
Malaria incidenceAnnex of the resolution adopted by the General Assem
Malicious code detection (Host)The Center for Internet Security, A Measurement Comp
Malicious code detection (Network)The Center for Internet Security, A Measurement Comp
Malicious motives and actsCWA16649
Malicious software removalThe Center for Internet Security, A Measurement Comp
Malicious software trackingThe Center for Internet Security, A Measurement Comp
Malware attempts (servers)ETSI GS ISI 001-1 V1.1.2
Malware attempts (workstations)ETSI GS ISI 001-1 V1.1.2
Malware attempts (workstations)ETSI GS ISI 001-1 V1.1.2
Malware installed (servers)ETSI GS ISI 001-1 V1.1.2
Malware installed (workstations)ETSI GS ISI 001-1 V1.1.2
ManagementCWA16649
Management information analysis to determine probable floodingGOLF, CCC
Management of enterprise devicesThe Center for Internet Security, Critical Security
Management review of continuity plan conducted?1. Helen Ltd. Meeting between VTT & Helen representa
Management review on incidents of interrupted heat delivery conducted?HELEN
Management review on preparedness conducted?HELEN
Manufacturing employmentAnnex of the resolution adopted by the General Assem
Manufacturing value addedAnnex of the resolution adopted by the General Assem
MappingCWA16649
Mapping of water and drainage network leading CCC
Maritime transport disruption would cause significant operations disruptionAdapted from the US:DHS Infrastructure Survey Tool (
Material footprintAnnex of the resolution adopted by the General Assem
Maternal mortality ratioAnnex of the resolution adopted by the General Assem
Max offsite population impacted by a reasonable worst case scenarioAdapted from the US:DHS Infrastructure Survey Tool (
Maximum facility population at any one timeAdapted from the US:DHS Infrastructure Survey Tool (
Mean number of vulnerabilities with CVSS score greater than 7 (high/critical) per containerAssureMOSS D5.1, T6.4 (THALES)
Mean time between alarm activations and operator responsesOGP Process safety - Recommended Practice on Key Per
Mean time between alarm activations and operator responsesOGP Process safety - Recommended Practice on Key Per
Measure social media as a % of total question / inquiry volumeCCC
Mechanisms for raising capacities for effective climate change-relatedAnnex of the resolution adopted by the General Assem
Medium and high-tech industry value added in total value addedAnnex of the resolution adopted by the General Assem
Memory utilisation (%) 
Memory utilisation (breakdown per pod) (bytes) 
Menetetyn liikevaihdon vaikutus - Impact of lost revenueVTT
Menettelyt ajantasaiseen tiedottamiseen - updated communication guidelinesVTT
Met Éireann Severe Weather AlertsGOLF, CCC
Method of event/anomaly detection Resolute Assessment methodology
Methods to verify employee understanding about resilience?American Petroleum Institute RP 581 (2000). (3rd ed.
Methods to verify employee understanding about resilience?American Petroleum Institute RP 581 (2000). (3rd ed.
Minutes of downtime per yearStadtwerke Heidelberg Netze
Minutes taken of all telephone calls during a serious incident response?German Federal Ministry of the Interior. (2008) Prot
Misappropriation of resourcesETSI GS ISI 001-1 V1.1.2
Misdelivery of contentETSI GS ISI 001-1 V1.1.2
MisinterpretationCWA16649
Misperception CWA16649
Mobilization of New Healthcare ResourcesDeep Knowledge Group (2020) COVID-19 ranking framewo
Mobilized amount of United States dollars per yearAnnex of the resolution adopted by the General Assem
Monitor leaving trafficThe Center for Internet Security, Critical Security
Monitoring systems and disaster managementDeep Knowledge Group (2020) COVID-19 ranking framewo
Mortality rate Annex of the resolution adopted by the General Assem
Mortality rate attributed to household and ambient air pollutionAnnex of the resolution adopted by the General Assem
Mortality rate attributed to unintentional poisoningAnnex of the resolution adopted by the General Assem
Mortality rate attributed to unsafe water/sanitation and lack of hygiene Annex of the resolution adopted by the General Assem
Most recent update to CCTV systemAdapted from the US:DHS Infrastructure Survey Tool (
Mountain biodiversityAnnex of the resolution adopted by the General Assem
Move energy supply (Generators) to higher groundGOLF, CCC
Multi-factor authenticationThe Center for Internet Security, Critical Security
Multi-factor authentication on user accountsThe Center for Internet Security, Critical Security
Multiple suppliers proide the most critical fuel for core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Multiple suppliers provide critical raw materials for core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Multiple suppliers provide removal for the most critical byproducts/wastesAdapted from the US:DHS Infrastructure Survey Tool (
Multiple suppliers provide the most critical chemical for core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Name tags/plates in the the crisis mgmt. center for task force members?German Federal Ministry of the Interior. (2008) Prot
National exclusive economic zones managed using ecosystem-based approachesAnnex of the resolution adopted by the General Assem
National human rightsAnnex of the resolution adopted by the General Assem
National statistical legislationAnnex of the resolution adopted by the General Assem
National statistical planAnnex of the resolution adopted by the General Assem
National targetsAnnex of the resolution adopted by the General Assem
Natural disaster threat identified and communicated?VTT
Natural hazard has ever caused an unacceptable interruption to operations?Adapted from the US:DHS Infrastructure Survey Tool (
Neonatal mortality rateAnnex of the resolution adopted by the General Assem
NetFlow analysis eventsThe Center for Internet Security, A Measurement Comp
NetFlow collectionThe Center for Internet Security, Critical Security
Network bandwidth: all processes I/O (bytes) 
Network bandwidth: all processes I/O per pod (bytes) 
Network based URL filtersThe Center for Internet Security, Critical Security
Network based URL filtersThe Center for Internet Security, Critical Security
Network boundary devices configurationThe Center for Internet Security, Critical Security
Network devices not configuredThe Center for Internet Security, A Measurement Comp
Network devices that are not up to dateThe Center for Internet Security, A Measurement Comp
Network devices with not enforced configurationThe Center for Internet Security, A Measurement Comp
Network devices without two-factor authenticationThe Center for Internet Security, A Measurement Comp
Network Level AuthenticationThe Center for Internet Security, A Measurement Comp
Network perimetersThe Center for Internet Security, Critical Security
Network vulnerability scanning tools detect wireless access pointsThe Center for Internet Security, Critical Security
Network-base IPS devicesThe Center for Internet Security, Critical Security
Network-based anti-malwareThe Center for Internet Security, Critical Security
Network-based DLPThe Center for Internet Security, Critical Security
Network-based IDS sensorsThe Center for Internet Security, Critical Security
New Intrusion attemptsOGP Process safety - Recommended Practice on Key Per
New protective/resilience measures or enhancements within the past yearAdapted from the US:DHS Infrastructure Survey Tool (
New software detection timeThe Center for Internet Security, A Measurement Comp
New suspicious signal coming from cyber threats detection tool (ST.CD.1)Infrastress R-Tech
New suspicious signal coming from the business continuity monitoring systemInfrastress R-Tech
No advance warnings.Steinbeis EU-Vri
No of Identified shelters for people to be evacuated 
No of Identified shelters for people to be evacuatedGOLF, CCC
No security configurationThe Center for Internet Security, A Measurement Comp
No. Critical manual checks passed /total number critical manual indicatorsna
No. of measures taken to reduce the impact of contamination? (5.1.F)SmartResilience (2017) Task 5.1 Report from the inte
No. of passengers needed to be evacuatedSmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 1) SmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 2) SmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 3) SmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 4) SmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 5) SmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 6) SmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 7) SmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 8) SmartResilience. (2017). D5.1 Report on the results
No. of passengers needed to be evacuated (sensor no. 9) SmartResilience. (2017). D5.1 Report on the results
No. of passengers not needed to be evacuatedSmartResilience. (2017). D5.1 Report on the results
No. of people available to be deployed in case of emergencyPetit, F. et. al (2013). Resilience measurement inde
No. of sandbags distributed to the people 
Non-patched or poorly patched vulnerability exploitation (no patch)ETSI GS ISI 001-1 V1.1.2
Non-patched or poorly patched vulnerability exploitation (poor patch)ETSI GS ISI 001-1 V1.1.2
Not patched vulnerabilities (rate)ETSI GS ISI 001-1 V1.1.2
Not patched vulnerabilities (time)ETSI GS ISI 001-1 V1.1.2
Not reconfigured systemsETSI GS ISI 001-1 V1.1.2
NoveltyCWA16649
Nr. of cargo flights takeoff rate (flights per hour) 
Nr. of cargo flights takeoff rate (flights per hour) 
Number and rates of disaster-related deathsWorld Health Organization (2012). Health Indicators
Number and rates of disaster-related disabilityWorld Health Organization (2012). Health Indicators
Number and rates of disaster-related illnessWorld Health Organization (2012). Health Indicators
Number and rates of disaster-related injuriesWorld Health Organization (2012). Health Indicators
Number days since last vulnerability scanAssureMOSS D5.1
Number of A&E Hours availableCork city council (2018)
Number of A&E hours lost due to closureHealth Service Executive
Number of access points or clients with unauthorized wireless configurationThe Center for Internet Security, A Measurement Comp
Number of agencies involved in flood management. Number of staff.GOLF, CCC
Number of alternative silos availableVTT. (2017). Presentation for SmartResilience case f
Number of attacks succeededOGP Process safety - Recommended Practice on Key Per
Number of attempts to access password filesThe Center for Internet Security, A Measurement Comp
Number of automatic river level gaugesGOLF, CCC
Number of automatic river level gauges 
Number of available replicas / total number of replicas (%) 
Number of bus routes rerouted or cancelled. 
Number of business parks accessible to public transport, taxis etcCork city council (2018)
Number of cases admitted to hospitalsDeep Knowledge Group (2020) COVID-19 ranking framewo
Number of closed actions against ordered by insurerCompany Standard SD-06.03.03 Standard for insurance
Number of companies publishing sustainability reportsAnnex of the resolution adopted by the General Assem
Number of connectors which are encrypted or obfuscated / total number of connectorsEU-VRi
Number of countries that adopt the national disaster risk reduction Annex of the resolution adopted by the General Asse
Number of crime events 
Number of critical cases in hospitalsDeep Knowledge Group (2020) COVID-19 ranking framewo
Number of critical spare parts available 
Number of currently available first responder vehicles (Fire Brigade, Gardaí, Defence Force, medics) to reach an emergency location in the City 
Number of cyber insurance products offered in the market?CEC
Number of deaths, missing and affected persons attributed to disastersAnnex of the resolution adopted by the General Assem
Number of deaths, missing persons and directly affectedAnnex of the resolution adopted by the General Assem
Number of deaths, missing persons and directly affectedAnnex of the resolution adopted by the General Assem
Number of dedicated administrative enclaves definedEU-VRi
Number of dedicated operational enclaves (i.e., enclaves dedicated to a mission or business function) definedEU-VRi
Number of dedicated security/audit enclaves definedEU-VRi
Number of Defence Force personnel on standby 
Number of deficiencies identified in fire fighters drills performedSD-09.02.01 - Protection From Fire and Explosion Sta
Number of deviations from approved baselinesThe Center for Internet Security, A Measurement Comp
Number of documented information security incidentsThe Center for Internet Security, A Measurement Comp
Number of emergency or temporary MoCsOGP Process safety - Recommended Practice on Key Per
Number of external communications which are encrypted/ total number of external communicationsEU-VRi
Number of external penetration testsThe Center for Internet Security, A Measurement Comp
Number of external reports & complaints on incidents?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Number of external services (exposed to the internet) / Total number of (internal + external) servicesAssureMOSS D5.1
Number of Financial products sold 
Number of Fire Brigade staff on standby 
Number of firefighters at the site in each shiftGOLF, CCC
Number of flights per hour 
Number of flights per hour 
Number of flood prevention workshops help with businessCCC
Number of flood traffic management plansGOLF, CCC
Number of followers on alerting systems. (Cork Now, Social Media etc.)GOLF, CCC
Number of Gardaí personnel on standby 
Number of gully maintenance crews staff availableGOLF, CCC
Number of high priority people supplied with district heatingVTT. (2017). Presentation for SmartResilience case f
Number of high priority people supplied with district heatingVTT. (2017). Presentation for SmartResilience case f
Number of Hospital beds availableCork city council (2018)
Number of hospital beds closed due to flooding.Health Service Executive
Number of hospitals accessible through public or private transportCork city council (2018)
Number of hospitals inaccessible through public or private transport 
Number of host-based firewallsThe Center for Internet Security, A Measurement Comp
Number of hours of drinking water available 
Number of hours water supply availableCork City Council
Number of hours water supply availableCCC
Number of households without Electricity Supply 
Number of houses with blocked evacuation routes 
Number of Houses without GAS Supply 
Number of HSE training/yearNIS (2015) Sustainability report, Serbia
Number of HSE training/yearNIS (2015) The report on sustainable development, Se
Number of HSE training/yearNIS (2015) Sustainability report, Serbia
Number of HSE training/yearNIS (2015) The report on sustainable development, Se
Number of incident handling scenario exercisesThe Center for Internet Security, A Measurement Comp
Number of incidents linked to failure of MoCOGP Process safety - Recommended Practice on Key Per
Number of information stores which are encrypted / total number of information storesEU-VRi
Number of Inspections of river channel screenGOLF, CCC
Number of Intensive Care Beds Per 100,000 populationEU-Vri
Number of interagency steering group meetings heldGOLF, CCC
Number of internal communications which are encrypted / total number of internal communicationsEU-VRi
Number of internal penetration testsThe Center for Internet Security, A Measurement Comp
Number of invalid attempts to access user accountsThe Center for Internet Security, A Measurement Comp
Number of locked out accountsThe Center for Internet Security, A Measurement Comp
Number of loss of primary containment process safety events in yearOGP Process safety - Recommended Practice on Key Per
Number of major business parks inaccessible through public or private transport 
Number of Master nodes/per physical or virtual machineAssureMOSS Deliverable D5.1 (THALES)
Number of medics on standby 
Number of microorganisms?Swedish Water and Wastewater Association, (2008). Rå
Number of new HIV infections Annex of the resolution adopted by the General Assem
Number of new patents registered for new protective measureCEC
Number of new vulnerabilties identified due to changesCEC
Number of nodes in "ready" state / total number of nodes (%) 
Number of objects in the default namespace vs. necessary objects in the default namespace kubectl describe pods/deployments/daemonsets/replica
Number of operating errors due to incorrect/unclear proceduresOGP Process safety - Recommended Practice on Key Per
Number of operating shortcuts made by employeesOGP Process safety - Recommended Practice on Key Per
Number of OPW flood maps availableGOLF, CCC, OPW
Number of passengers Wyman, O. (2012). Guide to Airport Performance Measu
Number of passengers Wyman, O. (2012). Guide to Airport Performance Measu
Number of patients with accidents 
Number of patients with accidents 
Number of patients with accidents 
Number of patients with accidents 
Number of patients with accidents 
Number of patients with poisonings 
Number of people requiring interventions against neglected tropical diseaseAnnex of the resolution adopted by the General Assem
Number of people who can distribute emergency water?National Food Agency, Sweden. (2011). Strategi vid v
Number of persons affected VTT. (2017). Presentation for SmartResilience case f
Number of physical traffic diversion signs availableCCC
Number of plant and animal genetic resources for food and agricultureAnnex of the resolution adopted by the General Assem
Number of pods (containing vulnerabilities at version X) sharing the same base image/number of base images? (%)AssureMOSS D5.1, T6.4 (THALES)
Number of pods containing vulnerabilities which are exposed to the internet / total number of pods (%)AssureMOSS D5.1, T6.4 (THALES)
Number of pods containing vulnerabilities/ total number of podsAssureMOSS D5.1
Number of potential sources of contamination?National Food Agency, Sweden. (2011). Beredskapsplan
Number of privileged containers / the total number of running containerskubectl describe pods/deployments/daemonsets/replica
Number of privileged pods / the total number of running podsAssureMOSS D5.1
Number of public counter monitorsGOLF, CCC
Number of registered incidents per hour 
Number of registered incidents per hour 
Number of remedial works to improve flood defencesGOLF, CCC
Number of replicated pods OR running containers running with a cluster/total number of pods AssureMOSS D5.1
Number of reviews of previous traffic issues due to floodsGOLF, CCC
Number of rogue wireless access pointsThe Center for Internet Security, A Measurement Comp
Number of Safety instrumentations and Alarm tests versus scheduleOGP Process safety - Recommended Practice on Key Per
Number of satisfied benchmark tests / total number benchmark testAssureMOSS D5.1
Number of service request issues raised by the public in relation to floodiGOLF, CCC
Number of service requests logged with emergency helpline 
Number of slow growing microorganisms?Swedish Water and Wastewater Association, (2008). Rå
Number of smart systems in placeSmartResilience. (2017). D 2.1: Understanding “smart
Number of smart systems in placeSmartResilience. (2017). D 2.1: Understanding “smart
Number of staff available for flood crisisGOLF, CCC
Number of stars for a GitHub repository 
Number of stateful replicas available / total number of stateful replicas (%) 
Number of streets inaccessible for vehicles of first responders 
Number of students affected by closure of Universities and schools.Dept of Education and UCC
Number of surgeries cancelled due to flooding 
Number of traffic lights in operable due to flooding. 
Number of traffic lights operableCork city council (2018)
Number of traffic plans activated. 
Number of traffic road signs available.GOLF, CCC
Number of trained specialist graduating from the Universities in the area (catchment area)?CEC
Number of trained specialist graduating from the Universities in the area (catchment area)?CEC
Number of trained specialist graduating from the Universities in the area (catchment area)?CEC
Number of trained specialist graduating from the Universities in the area (catchment area)?CEC
Number of trains cancelled. 
Number of trains operational before, during and after the eventCork city council (2018)
Number of unauthorised servicesThe Center for Internet Security, A Measurement Comp
Number of unauthorized softwareThe Center for Internet Security, A Measurement Comp
Number of verified cases of torture of journalists in the previous monthsAnnex of the resolution adopted by the General Assem
Number of watchers for a GitHub repository 
Number of Worker nodes/per physical or virtual machinedocs.openshift.com/container-platform/4.3/scalabilit
Number of working days lost due to employees being unable to attend work 
Number of working hours lostVTT. (2017). Presentation for SmartResilience case f
Ocean-related instrumentsAnnex of the resolution adopted by the General Assem
Official development assistanceAnnex of the resolution adopted by the General Assem
Oil storage tanks, Primary indicatorR-Tech 2021
Oil storage tanks, Secondary indicatorR-Tech 2021
Oil terminal, Primary indicatorR-Tech 2021
Oil terminal, Secondary indicatorR-Tech 2021
Once air service lost (with backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once air service lost (without backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once air service restored, time until full resumption of operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once chemical supply service restored, time to resume full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once external communication service restored, time full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once external communications lost, % normal function lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once external electric service is restored,time to resume full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once external electric service lost, % of normal function lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once external natural gas lost, percent of normal function lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once external wastewater service restored, time to full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once external water lost, percent of normal function lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once external water service restored, time to resume full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once fuel supply service restored, time to resume full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once IT system lost (if no backup), perccent of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once IT system lost (with backup), perccent of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once maritime service lost (no backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once maritime service lost (with backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once maritime service restored, time until full resumption of operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once natural gas service restored, time to resume full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once pipeline service lost (no backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once pipeline service lost (with backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once pipeline service restored, time until full resumption of operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once rail service lost (with backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once rail service lost (without backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once rail service restored, time until full resumption of operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once raw material supply service restored, time to resume full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once road service lost (with backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once road service lost (without backup), % of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Once road service restored, time until full resumption of operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once waste removal service restored, time to resume full operationsAdapted from the US:DHS Infrastructure Survey Tool (
Once wastewater discharge service lost, % normal function lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
On-time arrival ratePearce, B. (2013), Airlines worldwide: The value the
On-time arrival ratePearce, B. (2013), Airlines worldwide: The value the
Open plan or strategy to address PPE supply issues during a public health emergency?GHS 4.5.1a (www.ghsindex.org)
Operation duration 99th quantile (s) 
Operation duration 99th quantile per node (s) 
Operation duration 99th quantile per node (seconds) 
Operation duration 99th quantile per operation (seconds) 
Operation rate per node (ops/s) 
Operation rate per operation type (ops/s) 
Opetusten vienti käytäntöön - Implementation of lessons learned VTT Workshop 16.4.2018
Organization in contact with authorities responsible for threat prevention?German Federal Ministry of the Interior. (2008) Prot
Organization offers vaccination or inform about vaccination possibilities?German Federal Ministry of the Interior. (2008) Prot
Origin of riskCWA16649
OS Software updateThe Center for Internet Security, A Measurement Comp
OS software vulnerabilitiesETSI GS ISI 001-1 V1.1.2
OS/Software secure configurationThe Center for Internet Security, Critical Security
Output sanitizationThe Center for Internet Security, Critical Security
Overall Equipment Effectiveness (OEE)Anderson, C., Bellgran, M. (2015). On the complexity
Overall Equipment Effectiveness (OEE)Anderson, C., Bellgran, M. (2015). On the complexity
Parity indiceAnnex of the resolution adopted by the General Assem
Partial/full-scale exercises practice controlled shutdown of systems/areas?German Federal Ministry of the Interior. (2008) Prot
Partial/full-scale exercises: alternate sites/equipment activation tested?German Federal Ministry of the Interior. (2008) Prot
Partial/full-scale exercises: emergency op. of redundant system tested?German Federal Ministry of the Interior. (2008) Prot
Partial/full-scale exercises: restoration of regular operations practiced?German Federal Ministry of the Interior. (2008) Prot
Participation in air transport provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Participation in byproduct/waste removal provider priority restoration planAdapted from the US:DHS Infrastructure Survey Tool (
Participation in communications provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Participation in maritime transport provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Participation in pipeline transport provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Participation in rail transport provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Participation in raw material provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Participation in road transport provider priority plan for restorationAdapted from the US:DHS Infrastructure Survey Tool (
Participation in wastewater discharge provider priority restoration planAdapted from the US:DHS Infrastructure Survey Tool (
Password file access attemptsThe Center for Internet Security, A Measurement Comp
Passwords illicitly handled or managed (admin change)ETSI GS ISI 001-1 V1.1.2
Passwords illicitly handled or managed (change)ETSI GS ISI 001-1 V1.1.2
Passwords illicitly handled or managed (weak)ETSI GS ISI 001-1 V1.1.2
People living below 50 per cent of median incomeAnnex of the resolution adopted by the General Assem
Percentage of application of incident investigation procedures in placeCompany's standard SD-09.01.15 HSE incident manageme
Percentage of companies buying cyber insurance?CEC
Percentage of critical cyber resources to which multiple defenses are appliedEU-VRi
Percentage of cyber resources for which privileges can be modified dynamicallyEU-VRi
Percentage of cyber resources to which access is controlled based on criticalityEU-VRi
Percentage of cyber resources to which access is controlled based on sensitivity EU-VRi
Percentage of cyber resources which can be discovered, accessed or used, or otherwise reached from another enclaveEU-VRi
Percentage of employees present per shift 
Percentage of employees present per shift 
Percentage of employees trained in resilience-related training?International Atomic energy Agency (2000), Operation
Percentage of employees trained in resilience-related training?International Atomic energy Agency (2000), Operation
Percentage of enclaves associated with a single operational functionEU-VRi
Percentage of errors due to deficiency in training?International Atomic energy Agency (2000), Operation
Percentage of errors due to deficiency in training?International Atomic energy Agency (2000), Operation
Percentage of functionality in SCADA and instrumentation 
Percentage of households supplied with electricityStadtwerke Heildelberg. (2016). Business & sustainab
Percentage of households with electricity supplyCork city council (2018)
Percentage of households with gas supplyCork city council (2018)
Percentage of negative test of microorganism in out going water 
Percentage of new protective measures a business has decided not to share?CEC
Percentage of non contaminated water 
Percentage of passengers not using the transport service after an incidentResolute Assessment Methodology
Percentage of population that is symptom free 
Percentage of specialist positions filled with specialists?CEC
Percentage of specialist positions filled with specialists?CEC
Percentage of specialist positions filled with specialists?CEC
Percentage of specialist positions filled with specialists?CEC
Percentage of staff training against planned?CEC
Percentage of such resources for which privileges are modified randomlyEU-VRi
Percentage of such resources for which privileges are modified randomlyEU-VRi
Percentage of such users whose privileges are modified dynamicallyEU-VRi
Percentage of system services for which privileges can be modified randomlyEU-VRi
Percentage of system unavailability Helen Ltd. & VTT. Meeting between VTT & Helen repres
Percentage of trainings conducted against requirements?CEC
Percentage of types of cyber entities for which behaviors are restricted based on assigned degree of trust EU-VRi
Percentage of users for which behaviors are restricted based on assigned degree of trustEU-VRi
Percentage of users for whom privileges can be modified dynamicallyEU-VRi
Percentage of water lost in the distribution system (5.1.F)SmartResilience (2017) Task 5.1 Report from the inte
Percentage of water network functional/in serviceCork city council (2018)
Percentage of Water network out of service 
Performance assessment of responses / recovery measure conducted?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Performance of threat monitoring and/or threat management/remediationAdapted from the US:DHS Infrastructure Survey Tool (
Perimeter ProtectionCloud Computing Compliance Controls Catalogue (C5) -
Periodic incident scenario sessionsThe Center for Internet Security, Critical Security
Periodic performance assessments of the contract employer(in percentage)American Petroleum Institute RP 581 (2000). (3rd ed.
Periodic performance assessments of the contract employer(in percentage)American Petroleum Institute RP 581 (2000). (3rd ed.
Periodic performance assessments of the contract employer?American Petroleum Institute RP 581 (2000). (3rd ed.
Periodic performance assessments of the contract employer?American Petroleum Institute RP 581 (2000). (3rd ed.
Periodic Red Team exercisesThe Center for Internet Security, Critical Security
PersistenceCWA16649
Personal riskCWA16649
Personalized treatment designDeep Knowledge Group (2020) COVID-19 ranking framewo
Personnel assigned to contact for emergency plan?American Petroleum Institute RP 581 (2000). (3rd ed.
Personnel assigned to contact for emergency plan?American Petroleum Institute RP 581 (2000). (3rd ed.
Perverse incentivesCWA16649
Phishing (customers)ETSI GS ISI 001-1 V1.1.2
Phishing (registered users)ETSI GS ISI 001-1 V1.1.2
Phishing testThe Center for Internet Security, A Measurement Comp
Phones available in crisis management center if loss of power supply?German Federal Ministry of the Interior. (2008) Prot
Physical access controlETSI GS ISI 001-1 V1.1.2
Physical intrusion or actionETSI GS ISI 001-1 V1.1.2
Physical punishment and/or psychological aggression Annex of the resolution adopted by the General Assem
Physical Security and Environmental Control RequirementsCloud Computing Compliance Controls Catalogue (C5) -
Physical site access controlCloud Computing Compliance Controls Catalogue (C5) -
Physical well-being of people affected 
Physical, psychological and sexual violence Annex of the resolution adopted by the General Assem
Piers equipment, Primary indicatorR-Tech 2021
Piers equipment, Secondary indicatorR-Tech 2021
Pipeline transport disruption would cause significant operations disruptionAdapted from the US:DHS Infrastructure Survey Tool (
Pipeline, Primary indicatorR-Tech 2021
Pipeline, Secondary indicatorR-Tech 2021
Plaintext instances of sensitive dataThe Center for Internet Security, A Measurement Comp
Plans for short and long term mitigation measures concerning earthquakesAdapted from the US:DHS Infrastructure Survey Tool (
Plans for short and long term mitigation measures concerning tornadoesAdapted from the US:DHS Infrastructure Survey Tool (
Plans for short and long term mitigation measures concerning wildefiresAdapted from the US:DHS Infrastructure Survey Tool (
Plans for short and long term mitigation measures concerning floodsAdapted from the US:DHS Infrastructure Survey Tool (
Plans for short and long term mitigation measures concerning hurricanesAdapted from the US:DHS Infrastructure Survey Tool (
Plans for short and long term mitigation measures for high windsAdapted from the US:DHS Infrastructure Survey Tool (
Plans for short and long term mitigation measures for lightning strikesAdapted from the US:DHS Infrastructure Survey Tool (
Plans for short and long term mitigation measures for severe winter stormsAdapted from the US:DHS Infrastructure Survey Tool (
Pod anti-affinity: Number of pod replicas on the same node/ total number of nodes access.redhat.com/documentation/en-us/openshift_cont
Pod start rate per node (ops/s) 
Pods with executive permission /total number of pods requiring permissionkubectl get serviceaccount --all-namespaces kubectl
Pohjaveden laadun seuranta - Monitoring of groundwater qualityVTT
Pohjaveden laadun seuranta - Monitoring of gwater quality versus risk assesVTT
Pohjaveden pinnankorkeuden seuranta - Monitoring of groundwater levelVTT
Population covered by a mobile network, by technologyAnnex of the resolution adopted by the General Assem
Population living in cities that implement urban development plansAnnex of the resolution adopted by the General Assem
Population living in slumsAnnex of the resolution adopted by the General Assem
Population reporting having personally felt discriminated againstAnnex of the resolution adopted by the General Assem
Population size and demographicsDeep Knowledge Group (2020) COVID-19 ranking framewo
Population that feel safe walking alone around the area they liveAnnex of the resolution adopted by the General Assem
Population-Wide Testing vs. In-Hospital TestingDeep Knowledge Group (2020) COVID-19 ranking framewo
Portable lighting available onsite for entrance and delivery areas?Adapted from the US:DHS Infrastructure Survey Tool (
Portable lighting available onsite for fences, gates, parking areas?Adapted from the US:DHS Infrastructure Survey Tool (
Portable lighting available onsite for waterside areas?Adapted from the US:DHS Infrastructure Survey Tool (
Ports & protocols runningThe Center for Internet Security, Critical Security
Positive feedbackCWA16649
Possibility to replace hyperboloid 
Possibility to replace antenna exciter 
Possibility to replace parabolic reflector 
Possibility to replace the Radome  
Post-crisis incident, is the financial damage estimated?German Federal Ministry of the Interior. (2008) Prot
Post-crisis inventory of the damaged buildings, facilities and equipment?German Federal Ministry of the Interior. (2008) Prot
Potential earthquake burden accounted for when laying pipes underground?German Federal Ministry of the Interior. (2008) Prot
Precautions during pandemic for gradual shut down if serious lack of staff?German Federal Ministry of the Interior. (2008) Prot
Precautions for only necessary connections emergency backup power supply?German Federal Ministry of the Interior. (2008) Prot
Pre-contract specifications provided?American Petroleum Institute RP 581 (2000). (3rd ed.
Pre-contract specifications provided?American Petroleum Institute RP 581 (2000). (3rd ed.
Predicted Astronomical Levels (PAL)GOLF, CCC
Presence of vulnerability analysis Resolute assessment methodology
Prevalence of malnutrition mong children under 5 years of age Annex of the resolution adopted by the General Asse
Prevalence of undernourishment Annex of the resolution adopted by the General Asse
Prevention or control of invasive alien speciesAnnex of the resolution adopted by the General Assem
Price per shareNIS (2016) Annual Report 2016, NIS Refinery, Serbia
Price per shareNIS (2016) Annual Report 2016, NIS Refinery, Serbia
Primary use, if natural gas is required for facility core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Primary use, if wastewater discharge service required for core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Priority plan for restoration for resource supply in place?Petit, F. D. P.et. al (2013). Resilience measurement
Priority plan for restoration for resource supply in place?Petit, F. D. P.et. al (2013). Resilience measurement
Prison populationAnnex of the resolution adopted by the General Assem
Privacy of people affected 
Proactive closure of Roads prior to floodingGOLF, CCC
Probability of unauthorized accesses based on analysis of RFID big data  
Procedure for cooperation with external companies & authorities activated?German Federal Ministry of the Interior. (2008) Prot
Procedures/equipments for recovery in place?Petit, F. D. P.et. al (2013). Resilience measurement
Procedures/equipments for recovery in place?Petit, F. D. P.et. al (2013). Resilience measurement
Process for revoking system accessThe Center for Internet Security, Critical Security
Profiling of account usageThe Center for Internet Security, Critical Security
Program for additional inspection and monitoring established? 
Progress in stakeholder development effectiveness monitoring frameworksAnnex of the resolution adopted by the General Assem
PropagationCWA16649
Proportion of agricultural area under productive and sustainable agricultureAnnex of the resolution adopted by the General Assem
Proportion of births attended by skilled health personnelAnnex of the resolution adopted by the General Assem
Proportion of children and young peopleAnnex of the resolution adopted by the General Assem
Proportion of domestically generated resources Annex of the resolution adopted by the General Asse
Proportion of fish stocks within biologically sustainable levelsAnnex of the resolution adopted by the General Assem
Proportion of government recurrent and capital spendingAnnex of the resolution adopted by the General Assem
Proportion of health facilitiesAnnex of the resolution adopted by the General Assem
Proportion of individuals using the InternetAnnex of the resolution adopted by the General Assem
Proportion of land that is degraded over total land areaAnnex of the resolution adopted by the General Assem
Proportion of local breeds classified as being at riskAnnex of the resolution adopted by the General Assem
Proportion of local governments that adopt local disaster risk reduction Annex of the resolution adopted by the General Asse
Proportion of men, women and children of all ages living in poverty Annex of the resolution adopted by the General Asse
Proportion of persons victim of physical or sexual harassmentAnnex of the resolution adopted by the General Assem
Proportion of population below the international poverty line Annex of the resolution adopted by the General Asse
Proportion of population covered by social protection floors/systems Annex of the resolution adopted by the General Asse
Proportion of population living below the national poverty line Annex of the resolution adopted by the General Asse
Proportion of population living in households Annex of the resolution adopted by the General Asse
Proportion of population reporting having personally felt discriminated Annex of the resolution adopted by the General Assem
Proportion of population with large household expenditures on healthAnnex of the resolution adopted by the General Assem
Proportion of schools with basic infrastructureAnnex of the resolution adopted by the General Assem
Proportion of seats held by womenAnnex of the resolution adopted by the General Assem
Proportion of sustainable development indicators Annex of the resolution adopted by the General Assem
Proportion of teachersAnnex of the resolution adopted by the General Assem
Proportion of the target population covered by all vaccinesAnnex of the resolution adopted by the General Assem
Proportion of time spent on unpaid domestic and care workAnnex of the resolution adopted by the General Assem
Proportion of total adult population with secure tenure rights to lan Annex of the resolution adopted by the General Asse
Proportion of total government spending Annex of the resolution adopted by the General Asse
Proportion of traded wildlife that was poached or illicitly traffickedAnnex of the resolution adopted by the General Assem
Proportion of women subjected to sexual violenceAnnex of the resolution adopted by the General Assem
Proportion of women in managerial positionsAnnex of the resolution adopted by the General Assem
Proportion of women marriedAnnex of the resolution adopted by the General Assem
Proportion of women of reproductive ageAnnex of the resolution adopted by the General Assem
Proportion of women subjected to physical, sexual or psychological violenceAnnex of the resolution adopted by the General Assem
Proportion of women who have undergone female genital mutilationAnnex of the resolution adopted by the General Assem
Proportions of positions in public institutions compared to national distributionsAnnex of the resolution adopted by the General Assem
Protection against interruptions caused by power failuresCloud Computing Compliance Controls Catalogue (C5) -
Protection Against Malware – ConceptCloud Computing Compliance Controls Catalogue (C5) -
Protection Against Malware – ImplementationCloud Computing Compliance Controls Catalogue (C5) -
Protection against threats from outside and from the environmentCloud Computing Compliance Controls Catalogue (C5) -
Protection level at traffic control unitsGOLF, CCC
Protection/precautionCWA16649
Protective measures employed for the primary external communication serviceAdapted from the US:DHS Infrastructure Survey Tool (
Protective measures in place in the building supporting the electric systemAdapted from the US:DHS Infrastructure Survey Tool (
Protective measures outside the building supporting the electric systemAdapted from the US:DHS Infrastructure Survey Tool (
Provide Interconnector to alternative supply if pump station is floodedGOLF, CCC
Provider of internal electric powerAdapted from the US:DHS Infrastructure Survey Tool (
Provision of food in crisis mgmt. center ensured in case of an incident?German Federal Ministry of the Interior. (2008) Prot
Public testing boothsDeep Knowledge Group (2020) COVID-19 ranking framewo
Public-private and civil society partnershipsAnnex of the resolution adopted by the General Assem
Puhtaan veden saajat (%) - % receiving clean drinking waterVTT
Purpose of the electricity backup generatorAdapted from the US:DHS Infrastructure Survey Tool (
Purpose of UPS/Battery backupAdapted from the US:DHS Infrastructure Survey Tool (
Purpose, if water is required for facility core operationsAdapted from the US:DHS Infrastructure Survey Tool (
Quality of drinking water 
Quality of production equipment 
Quality of the lessons learned process?Inspired by Annex 1 - Generic resilience indicators
Qualtity of protective equipment inventoryDeep Knowledge Group (2020) COVID-19 ranking framewo
Quantity and density of non-hospital clinicsDeep Knowledge Group (2020) COVID-19 ranking framewo
Quantity of anesthesiologistsDeep Knowledge Group (2020) COVID-19 ranking framewo
Quantity of emergency medicine specialistsDeep Knowledge Group (2020) COVID-19 ranking framewo
Quantity of general healthcare workersDeep Knowledge Group (2020) COVID-19 ranking framewo
Quantity of Hospital BedsDeep Knowledge Group (2020) COVID-19 ranking framewo
Quantity of Seasonal Staff and Illegal ImmigrantsDeep Knowledge Group (2020) COVID-19 ranking framewo
Quantity of total and new casesDeep Knowledge Group (2020) COVID-19 ranking framewo
Quantity of Ventilator StockpileDeep Knowledge Group (2020) COVID-19 ranking framewo
Quarantine timelineDeep Knowledge Group (2020) COVID-19 ranking framewo
Raakaveden laatu/käsiteltävyys - Quality of raw water/processingVTT
Raakaveden laatu/maku... - Raw water quality/taste...VTT
Raakaveden lisäkäsittely - Raw water treatmentVTT
Rank to which extent existing data are sufficient 
Rapid emergency mobilizationDeep Knowledge Group (2020) COVID-19 ranking framewo
Rate of investment (ROI) 
Rate of operations (ops/s) 
Rate of operations, broken down by node (ops/s) 
Rate of operations, broken down by operation type (ops/s) 
Rate of received packets dropped (last 5 minutes) 
Rate of received packets dropped per pod (last 5 minutes) 
Rate of transmitted packets dropped (last 5 minutes) 
Rate of transmitted packets dropped per pode (last 5 minutes) 
Rates of fatal and non-fatal occupational injuriesAnnex of the resolution adopted by the General Assem
Ratio (number of civilians in need of help from a medic)/number of currently available medics) 
Ratio (number of civilians in need of help from Defence Forces)/number of currently available Defence Force staff) 
Ratio (number of civilians in need of help from Fire Brigade)/number of currently available Fire Brigade staff) 
Ratio (number of civilians in need of help from Gardaí)/available of currently available Gardaí staff) 
Ratio between preventive and corrective measures from inspection visitsCompany's Standard SD-14.02.01 Cooperation of the Co
Ratio of land consumption rate to population growth rateAnnex of the resolution adopted by the General Assem
Reaction plans (no experience)ETSI GS ISI 001-1 V1.1.2
Reaction plans (unsuccessful)ETSI GS ISI 001-1 V1.1.2
Realized working time of relevant personnel without incident lossesVTT. (2017). Presentation for SmartResilience case f
Receipt of threat, vulnerability, etc. information from external sourcesAdapted from the US:DHS Infrastructure Survey Tool (
Recommendations developed and costedGOLF, CCC
Record government policy on contact tracing after a positive diagnosisOxford COVID-19 Government Response Tracker
Record of severity of tidal flood events in past 5 years.GOLF, CCC
Record presence of public information campaignsOxford COVID-19 Government Response Tracker
Recording of the recovery time?Petit, F. D. P.et. al (2013). Resilience measurement
Recording of the recovery time?Petit, F. D. P.et. al (2013). Resilience measurement
Recordings available in playable formats in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Recovery plans for the case of above average hardware/software failures? 
Recruitment cost borne by employee Annex of the resolution adopted by the General Assem
Red List IndexAnnex of the resolution adopted by the General Assem
Redundancy modelCloud Computing Compliance Controls Catalogue (C5) -
Registro de nascimentoAnnex of the resolution adopted by the General Assem
Reliability and Transparency of DataDeep Knowledge Group (2020) COVID-19 ranking framewo
Reliance on external partner for IT business continuity, recovery, etc.Adapted from the US:DHS Infrastructure Survey Tool (
Remittance costs as a proportion of the amount remittedAnnex of the resolution adopted by the General Assem
Remote administrationThe Center for Internet Security, Critical Security
Remote systems without the same security standardsThe Center for Internet Security, A Measurement Comp
Remote systems without two-factor authenticationThe Center for Internet Security, A Measurement Comp
Renewable energyAnnex of the resolution adopted by the General Assem
Repair loss (Euros/incident)VTT. (2017). Presentation for SmartResilience case f
Required procedure for disclosing information to the public adhered to?German Federal Ministry of the Interior. (2008) Prot
Researchers (in full-time equivalent) per million inhabitantsAnnex of the resolution adopted by the General Assem
Resilience based contractor selection?American Petroleum Institute RP 581 (2000). (3rd ed.
Resilience based contractor selection?American Petroleum Institute RP 581 (2000). (3rd ed.
Resilience levelN/A
Resilience operations manager/department in charge of business continuityAdapted from the US:DHS Infrastructure Survey Tool (
Resilience policy statement documented/applied?American Petroleum Institute RP 581 (2000). (3rd ed.
Resilience policy statement documented/applied?American Petroleum Institute RP 581 (2000). (3rd ed.
Resource flows for developmentAnnex of the resolution adopted by the General Assem
Resources available to strengthen statistical capacityAnnex of the resolution adopted by the General Assem
Respond when logging failsThe Center for Internet Security, A Measurement Comp
Responsibilities in the event of termination or change of employmentCloud Computing Compliance Controls Catalogue (C5) -
Responsible authorities informed about contingency plans?German Federal Ministry of the Interior. (2008) Prot
Result for Clostridium perfringens?Swedish Water and Wastewater Association, (2008). Rå
Result for Coliform bacteria?Swedish Water and Wastewater Association, (2008). Rå
Result for Coliphage?Swedish Water and Wastewater Association, (2008). Rå
Results frameworks and planning toolsAnnex of the resolution adopted by the General Assem
Resurssien hallinta - Resource managementVTT - Workshop 16.4.2018
Retrofit measures undertaken?Petit, F. D. P.et. al (2013). Resilience measurement
Retrofit measures undertaken?Petit, F. D. P.et. al (2013). Resilience measurement
Return LCGO reflux 
Revenue lost due to the flood event 
Reversal of configuration changes to network systemThe Center for Internet Security, A Measurement Comp
Review and Approval of Policies and InstructionsCloud Computing Compliance Controls Catalogue (C5) -
Review of communication policy conducted?1. Helen Ltd. Meeting between VTT & Helen representa
Review of contingency protocols conducted?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Review of Flood traffic plans post eventGOLF, CCC
Review Service Request logged during crisisGOLF, CCC
Review stock levels of spares heldGOLF, CCC
Review traffic public communication optionsGOLF, CCC
RFID based indicator ("big data") 
RFID based indicator ("big data") 
Rights usurpation or abuse on servers or applications (admin abuse)ETSI GS ISI 001-1 V1.1.2
Rights usurpation or abuse on servers or applications (admin)ETSI GS ISI 001-1 V1.1.2
Rights usurpation or abuse on servers or applications (external)ETSI GS ISI 001-1 V1.1.2
Rights usurpation or abuse on servers or applications (not removed)ETSI GS ISI 001-1 V1.1.2
Rights usurpation or abuse on servers or applications (social)ETSI GS ISI 001-1 V1.1.2
Rights usurpation or abuse on servers or applications (time)ETSI GS ISI 001-1 V1.1.2
Rights usurpation or abuse on servers or applications (user abuse)ETSI GS ISI 001-1 V1.1.2
Risk LevelN/A
Risk Level reviewed by Flood Assessment TeamGOLF, CCC
Risk Management PolicyCloud Computing Compliance Controls Catalogue (C5) -
Riskianalyysien päivitysväli - Update of risk analysesVTT
Runtime operation duration 99th quantile (s) 
Runtime operation duration 99th quantile per node (s) 
Rural population who live within 2 km of an all-season roadAnnex of the resolution adopted by the General Assem
S1. Capacity to improve how to handle supply shortfalls and disruptionsFederal Office for Civil Protection (FOCP) (2020): N
S1. Preparedness to handle supply shortfalls and disruptionsFederal Office for Civil Protection (FOCP) (2020): N
S1. Supply shortfalls and disruptionsFederal Office for Civil Protection (FOCP) (2020): N
S1. Susceptibility to have supply shortfalls and disruptionsFederal Office for Civil Protection (FOCP) (2020): N
S2. Capacity to improve how to handle diminished public order and domestic securityFederal Office for Civil Protection (FOCP) (2020): N
S2. Diminished public order and domestic securityFederal Office for Civil Protection (FOCP) (2020): N
S2. Preparedness to handle diminished public order and domestic securityFederal Office for Civil Protection (FOCP) (2020): N
S2. Susceptibility to have diminished public order and domestic securityFederal Office for Civil Protection (FOCP) (2020): N
S3. Capacity to improve how to handle impairment of territorial integrityFederal Office for Civil Protection (FOCP) (2020): N
S3. Impairment of territorial integrityFederal Office for Civil Protection (FOCP) (2020): N
S3. Preparedness to handle impairment of territorial integrityFederal Office for Civil Protection (FOCP) (2020): N
S3. Susceptibility to have impairment of territorial integrityFederal Office for Civil Protection (FOCP) (2020): N
S4. Capacity to improve how to handle damage to and loss of cultural propertyFederal Office for Civil Protection (FOCP) (2020): N
S4. Damage to and loss of cultural propertyFederal Office for Civil Protection (FOCP) (2020): N
S4. Preparedness to handle damage to and loss of cultural propertyFederal Office for Civil Protection (FOCP) (2020): N
S4. Susceptibility to have damage to and loss of cultural propertyFederal Office for Civil Protection (FOCP) (2020): N
S5. Capacity to improve how to handle damage to the reputation of SwitzerlandFederal Office for Civil Protection (FOCP) (2020): N
S5. Damage to the reputation of SwitzerlandFederal Office for Civil Protection (FOCP) (2020): N
S5. Preparedness to handle damage to the reputation of SwitzerlandFederal Office for Civil Protection (FOCP) (2020): N
S5. Susceptibility to have damage to the reputation of SwitzerlandFederal Office for Civil Protection (FOCP) (2020): N
S6. Capacity to improve how to handle loss of confidence in state / institutionsFederal Office for Civil Protection (FOCP) (2020): N
S6. Loss of confidence in state / institutionsFederal Office for Civil Protection (FOCP) (2020): N
S6. Preparedness to handle loss of confidence in state / institutionsFederal Office for Civil Protection (FOCP) (2020): N
S6. Susceptibility to have loss of confidence in state / institutionsFederal Office for Civil Protection (FOCP) (2020): N
Safe work practices developed and implemented?American Petroleum Institute RP 581 (2000). (3rd ed.
Safe work practices developed and implemented?American Petroleum Institute RP 581 (2000). (3rd ed.
Safely managed drinking water servicesAnnex of the resolution adopted by the General Assem
Sales- Number of products sold 
SandboxingThe Center for Internet Security, A Measurement Comp
Scale of quarantineDeep Knowledge Group (2020) COVID-19 ranking framewo
Scans monitoringThe Center for Internet Security, Critical Security
Scheduled configuration managementThe Center for Internet Security, Critical Security
Scheduled vulnerability assessmentThe Center for Internet Security, Critical Security
Scheduled vulnerability assessmentThe Center for Internet Security, Critical Security
Scholarships by sector and type of studyAnnex of the resolution adopted by the General Assem
Science and/or technology cooperation agreementsAnnex of the resolution adopted by the General Assem
Scientific unknownsCWA16649
Scope of diagnostic measuresDeep Knowledge Group (2020) COVID-19 ranking framewo
Scope of governmental media campaignsDeep Knowledge Group (2020) COVID-19 ranking framewo
Screen locksThe Center for Internet Security, Critical Security
Seal off flooded areas for public and transportGOLF, CCC
Searchlights or high intensity lights used for entrance and delivery areas?Adapted from the US:DHS Infrastructure Survey Tool (
Searchlights or high intensity lights used for fences, gates, parking?Adapted from the US:DHS Infrastructure Survey Tool (
Secure code writing trainingThe Center for Internet Security, Critical Security
Security awareness program 
Security in IT projects (information classification)ETSI GS ISI 001-1 V1.1.2
Security in IT projects (risk analysis)ETSI GS ISI 001-1 V1.1.2
Security in IT projects (threats)ETSI GS ISI 001-1 V1.1.2
Security patchesThe Center for Internet Security, A Measurement Comp
Security skills assessmentThe Center for Internet Security, Critical Security
Security training and awareness programmeCloud Computing Compliance Controls Catalogue (C5) -
Segmantation of the networkThe Center for Internet Security, Critical Security
Segregation of DutiesCloud Computing Compliance Controls Catalogue (C5) -
Self-evaluation of life satisfactionOECD Statistics (2018), http://data.oecd.org
Sensitive data encryptionThe Center for Internet Security, Critical Security
Sensitive data scanThe Center for Internet Security, Critical Security
Sensitive data without loggingThe Center for Internet Security, A Measurement Comp
Sensitive information encryption and authenticationThe Center for Internet Security, Critical Security
Sensitive technical components protected by uninterruptible powersupply?German Federal Ministry of the Interior. (2008) Prot
Sensitivity CWA16649
Separate production and non-production environmentsThe Center for Internet Security, Critical Security
Separate VLANs for BYOD systemsThe Center for Internet Security, Critical Security
Sewage overflowBondelind, M., Pettersson, T., Malm, A., Bergstedt,
Sexual violenceAnnex of the resolution adopted by the General Assem
Share of labour force with at least secondary educationOECD Statistics (2018), http://data.oecd.org
Share of people vaccinated against COVID-19Our World in Datagithub.com/owid/covid-19-data/tree/
Share Price (£) 
Share Price (£) 
Shared crisis mgmt. center email inbox with controlled distribution?German Federal Ministry of the Interior. (2008) Prot
SIEMThe Center for Internet Security, Critical Security
Simulator training for operating personnel conducted?Øien, K., Massaiu, S., Tinmannsvik, R. K., & Størset
Simulator training for operating personnel conducted?Øien, K., Massaiu, S., Tinmannsvik, R. K., & Størset
SIPS equipment and instrumentation certification coverage by systematic periodic testing and maintenanceDraft proposal on possible resilience or functionali
Site Resilience committee or equivalent in place?American Petroleum Institute RP 581 (2000). (3rd ed.
Site Resilience committee or equivalent in place?American Petroleum Institute RP 581 (2000). (3rd ed.
Size of elderly populationDeep Knowledge Group (2020) COVID-19 ranking framewo
Size of emergency equipment stockpileDeep Knowledge Group (2020) COVID-19 ranking framewo
Size of protective equipment reserveDeep Knowledge Group (2020) COVID-19 ranking framewo
Skills gap analysisThe Center for Internet Security, Critical Security
Small-scale industries in total industry value addedAnnex of the resolution adopted by the General Assem
Small-scale industries with a loan or line of creditAnnex of the resolution adopted by the General Assem
Social distancing complianceDeep Knowledge Group (2020) COVID-19 ranking framewo
Social dynamicsCWA16649
Social protection transfersAnnex of the resolution adopted by the General Assem
Social unrestCWA16649
Societal and political risk assessment conducted?Helen Ltd. Meeting between VTT & Helen representativ
Software blockingThe Center for Internet Security, A Measurement Comp
Software blocks countThe Center for Internet Security, A Measurement Comp
Software configuration managementThe Center for Internet Security, Critical Security
Software trackingThe Center for Internet Security, Critical Security
Software whitelisingThe Center for Internet Security, Critical Security
SpamETSI GS ISI 001-1 V1.1.2
SpamETSI GS ISI 001-1 V1.1.2
Specialized contact persons in case of attack by hazardous agents?German Federal Ministry of the Interior. (2008) Prot
Specific instructions for those who must share information during a crisis?German Federal Ministry of the Interior. (2008) Prot
Speed and frequency of dignostic monitoringDeep Knowledge Group (2020) COVID-19 ranking framewo
SPFThe Center for Internet Security, Critical Security
Staffing scheme for required crisis management positions at the facility?German Federal Ministry of the Interior. (2008) Prot
Stakeholder engagement for developing regulationsOECD Statistics (2018), http://data.oecd.org
Stakeholders engagement maintained 
Standards for the time required to report anomalous eventsThe Center for Internet Security, Critical Security
Stored information protectionThe Center for Internet Security, Critical Security
Storyline-based risk communication .Steinbeis EU-Vri
Strategies and measures to protect staff during extreme situations?German Federal Ministry of the Interior. (2008) Prot
Strength of encryption mechanism for [external communications | internal communications | information stores | processing] EU-VRi
Sudden change in perceptionCWA16649
Sudo/RunAs useThe Center for Internet Security, Critical Security
Sufficient capacity for tunnel closure/sealingHELEN
Sufficient fuel for the defined backup power supply operation period?German Federal Ministry of the Interior. (2008) Prot
Sufficient number of TV sets, radios, VCRs in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Sufficiently large and separate meeting room in crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Sum of pod start rate per node (ops/s) 
Sum of total grants and non-debt-creating inflows Annex of the resolution adopted by the General Asse
Supplies available and length of time coveredGOLF, CCC
Supply to percent of customers (experienced by customers)VTT. (2017). Presentation for SmartResilience case f
Supply to percent of customers in western district (experienced by custome)VTT. (2017). Presentation for SmartResilience case f
Support from Defence Forces?GOLF, CCC
Surveillance of operational and environmental parametersCloud Computing Compliance Controls Catalogue (C5) -
Susceptibility to global ignoranceCWA16649
Suspicious URL requests loggedThe Center for Internet Security, A Measurement Comp
Sustainable consumption and productionAnnex of the resolution adopted by the General Assem
Sustainable developmentAnnex of the resolution adopted by the General Assem
Sustainable forest managementAnnex of the resolution adopted by the General Assem
Sustainable public procurement policies and action plansAnnex of the resolution adopted by the General Assem
Sustainable tourism strategiesAnnex of the resolution adopted by the General Assem
Switches enabling VLANsThe Center for Internet Security, Critical Security
Switzerland’s national risk analysis has been applied?N/A
System accounts reviewThe Center for Internet Security, Critical Security
Systematic approach to identify the training needs for employees defined?American Petroleum Institute RP 581 (2000). (3rd ed.
Systematic approach to identify the training needs for employees defined?American Petroleum Institute RP 581 (2000). (3rd ed.
Systems scannedThe Center for Internet Security, A Measurement Comp
Systems without host-based DLPThe Center for Internet Security, A Measurement Comp
Talousveden laadun riskienhallinta - risk mgmt of drinking water qualityVTT
Talousveden laatu - quality of drinking waterVTT
Tariff linesAnnex of the resolution adopted by the General Assem
Task force areas during crisis which provide necessary supplies and power?German Federal Ministry of the Interior. (2008) Prot
Task force continuation strategies if communication systems break down?German Federal Ministry of the Interior. (2008) Prot
Task force continuation strategies if crisis management center unusable?German Federal Ministry of the Interior. (2008) Prot
Task force continuation strategies if data processing systems break down?German Federal Ministry of the Interior. (2008) Prot
Task force members/functions directly available to crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Technological advancesCWA16649
Telemedicine for at-home guidanceDeep Knowledge Group (2020) COVID-19 ranking framewo
Telephone, contact, resourcelists available in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Temporal complicationsCWA16649
Terrestrial and freshwater biodiversityAnnex of the resolution adopted by the General Assem
Terrorism risk/threat assessment done?VTT
Terveydenhuoltovaikutukset - Impact on health care systemVTT
Terveys-, turvallisuus ja ymp.vaikutukset - HSE impactVTT
testtest
Test bed that mimics a production environmentThe Center for Internet Security, Critical Security
Test web applications for common security weaknessesThe Center for Internet Security, Critical Security
Testing Efficiency (Time to Get Results)Deep Knowledge Group (2020) COVID-19 ranking framewo
Tests for the presence of unprotected system information and artifactsThe Center for Internet Security, Critical Security
The existence of a register of accidents/incidentsCompany's standard SD-09.01.15 HSE incident manageme
The extent of environmental components affected by the critical asset.InfraStress D2.1
The inability to meet daily demands of users due to technical problems on the transport pipelinePAP Serbia
The inability to meet daily demands of users due to technical problems on the transport pipelineN/A
The incident investigation procedures followed?American Petroleum Institute RP 581 (2000). (3rd ed.
The longest time needed for service engagementCompany's Standard UP-03.05.06-002 Planning of secur
The number of activations of safety equipmentCCPS (2007). Guidelines for risk based process safet
The number of activations of safety equipmentCCPS (2007). Guidelines for risk based process safet
The Number of agencies involved in formal flood event management.CCC, An Garda Síochána - Irish National Police Servi
The number of backup energy supplies available and the number of hours use.CCC
The number of deferred start-ups and unplanned shutdownsCompany's standard SD-03.05.04 Ongoing maintenance
The number of drills/exercise undertaken in relation to the Flood EmergencyGOLF, CCC
The number of fatalities due to the event that occurred to critical asset.Infrastress D2.1
The number of flood prevention workshops with businessesGOLF, CCC
The number of Hi Hi alarms activatedCompany's standard UP-03.05.04-049 Management of ala
The number of injured and hospitalized persons due to the event.InfraStress D2.1
The number of near-misses or incidents due to S&SOGP Process safety - Recommended Practice on Key Per
The number of persons evacuated from the area/objects under impact.Infrastress D2.1
The number of shut downsOGP Process safety - Recommended Practice on Key Per
The proportion of children who are developmentally on track Annex of the resolution adopted by the General Assem
The variety of communication channelsGOLF, CCC
Threat Mitigation measuresPetit, F. D. P.et. al (2013). Resilience measurement
Threat Mitigation measures undertaken?Petit, F. D. P.et. al (2013). Resilience measurement
Tiedotus toipumisen aikana - Communication during recoveryVTT Workshop 16.4.2018
Tiedotus veden käyttäjille - communication to water usersVTT
Tilannejohtamisen toimivuus - Performance of situational managementVTT - Workshop 16.4.2018
Time for full resumption of operations once IT service is restoredAdapted from the US:DHS Infrastructure Survey Tool (
Time horizonN/A
Time synchronizationThe Center for Internet Security, Critical Security
Time taken to clear findings from resilience reviews?International Atomic energy Agency (2000), Operation
Time taken to clear findings from resilience reviews?International Atomic energy Agency (2000), Operation
Time taken to complete corrective actionsSmartResilience. (2017). D5.1 Report on the results
Time taken to complete corrective actions from incident investigationSmartResilience. (2017). D5.1 Report on the results
Time taken to recover fuel feedVTT. (2017). Presentation for SmartResilience case f
Time taken to repair damageVTT. (2017). Presentation for SmartResilience case f
Time to detect new devicesThe Center for Internet Security, A Measurement Comp
Time to generate alerts about unauthorized wireless devicesThe Center for Internet Security, A Measurement Comp
Time to generate and send vulnerability scanning completion alertsThe Center for Internet Security, A Measurement Comp
Time to identify contaminated raw water 
Time to identify the incident area 
Time to impactCWA16649
Time to isolate/remove from the network unauthorized wireless devicesThe Center for Internet Security, A Measurement Comp
Time to reopen critical flooded roadsGOLF, CCC
Time to restore district heatingVTT Ltd
To what does the organisation plan to improve a leadership for resilience?International organization for Standardization (2016
To what does the organization plan to improve a leadership for resilience?International organization for Standardization (2016
To what extent are action plans for the recovery phase known?Inspired by Annex 1 - Generic resilience indicators
To what extent are activities organized to share information and knowledge? 
To what extent are activities organized to share information and knowledge?International organization for Standardization (2016
To what extent are business continuity procedures complete?International organization for Standardization(2012)
To what extent are business continuity procedures complete?International organization for Standardization(2012)
To what extent are supporting infrastructure available for remote work? 
To what extent are the responsibilities of the BS Manager comprehensive?International organization for Standardization(2012)
To what extent are the responsibilities of the BS Manager comprehensive?International organization for Standardization(2012)
To what extent are there households with uninterrupted delivery (30 min)?Swedish Civil Contingencies Agency. (2014). Resultat
To what extent can single persons movement be restricted in cities? 
To what extent does the critical infrastructure comply with NIS directive?European Union. (2016). DIRECTIVE (EU) 2016/1148 OF
To what extent does top management allow flexible application of tasks?International organization for Standardization (2016
To what extent does top management allow flexible application of tasks?International organization for Standardization (2016
To what extent is curfew required in order to contain the pandemic? 
To what extent is the business continuity communication plan comprehensive?International organization for Standardization(2012)
To what extent is the business continuity communication plan comprehensive?International organization for Standardization(2012)
To what extent is the policy for BCMS comprehensive?International organization for Standardization (2012
To what extent is the policy for BCMS comprehensive?International organization for Standardization (2012
To which extend is the Industry voluntarily providing own server capacities to ensure secure networks etc… 
To which extent are alternative education models used? 
To which extent could transportation be cut to support restrictions? 
To which extent does the available "Virus testing capacity" meet the requirements? 
To which extent is release of nano- and micro-particle rubber and plastic known  
To which extent is the country prepared for online-courses/home schooling (infrastructure, equipment, etc.) 
Total amount of energy required to maintain critical areas identified?German Federal Ministry of the Interior. (2008) Prot
Total expenses for external services in € (e.g. Utilities inlcuding water)EU-VRi
Total functionality of an infrastructureUsed for presentation purposes
Total hospital beds per 1000 populationOFDA/CRED International Disaster Database (www.emdat
Total income from all activities (€) 
Total income from all activities (€) 
Total income from all activities (€) annually 
Total net official development assistance to medical researchAnnex of the resolution adopted by the General Assem
Total number of attendents HSE trainings for the contractorsNIS (2015) Sustainability report, Serbia
Total number of attendents HSE trainings for the contractorsNIS (2015) Sustainability report, Serbia
Total number of hospital beds per 100,000 peopleDeep Knowledge Group (2020) COVID-19 ranking framewo
Total number of SIA activiations reported by operationsCompany's Standard UP-03.05.04-049 Management of ala
Total number of SIA faults reported during testsCompany's standard SD-03.05.04 Ongoing maintenance
Total official flows to the agriculture sectorAnnex of the resolution adopted by the General Assem
Total SCAP scoreThe Center for Internet Security, A Measurement Comp
Total value of inward and outward illicit financial flowsAnnex of the resolution adopted by the General Assem
Tourism direct GDPAnnex of the resolution adopted by the General Assem
Traded wildlife that was poached or illicitly traffickedAnnex of the resolution adopted by the General Assem
Training for natural disasters conducted according to the emergency plans?VTT
Training for resilience management in place?American Petroleum Institute RP 581 (2000). (1st ed.
Training for resilience management in place?American Petroleum Institute RP 581 (2000). (1st ed.
Training for skills gapThe Center for Internet Security, Critical Security
Transmission media of CCTVAdapted from the US:DHS Infrastructure Survey Tool (
Transmission through encrypted channelsThe Center for Internet Security, Critical Security
Transparency and Reliability of StatisticsDeep Knowledge Group (2020) COVID-19 ranking framewo
Transport provided during a building evacuation for present persons?German Federal Ministry of the Interior. (2008) Prot
Travel restrictionsDeep Knowledge Group (2020) COVID-19 ranking framewo
Tuberculosis incidence Annex of the resolution adopted by the General Assem
Turbine exhaust pressure 
Two-factor authentication for network devicesThe Center for Internet Security, Critical Security
Two-factor authentication for remote login accessThe Center for Internet Security, Critical Security
Type of backup generator for electricityAdapted from the US:DHS Infrastructure Survey Tool (
Type of CCTVAdapted from the US:DHS Infrastructure Survey Tool (
Type of Emergency Response status Communication channelResolute Methodology
Type of exercises included in business continuity plan for resilience ops.Adapted from the US:DHS Infrastructure Survey Tool (
Ulkoiset uhat - External threatsVTT
Unauthorised data exfiltration attemptsThe Center for Internet Security, A Measurement Comp
Unauthorised network packets alertsThe Center for Internet Security, A Measurement Comp
Unauthorized elevated application accountsThe Center for Internet Security, A Measurement Comp
Unauthorized elevated OS accountsThe Center for Internet Security, A Measurement Comp
Unauthorized software removal timeThe Center for Internet Security, A Measurement Comp
Under‑5 mortality rateAnnex of the resolution adopted by the General Assem
Uninterruptible power supply orbackup system in the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
University property at risk in financial terms 
Unknown incidentsETSI GS ISI 001-1 V1.1.2
Unnecessary pluginsThe Center for Internet Security, Critical Security
Unnecessary scripting languagesThe Center for Internet Security, Critical Security
Unsuccesful login alertsThe Center for Internet Security, Critical Security
Unsupported email clientsThe Center for Internet Security, A Measurement Comp
Unsupported web browsersThe Center for Internet Security, A Measurement Comp
Updated number of incidents per 1 million passengers 
Updated number of incidents per 1 million passengers 
Updated terrorism threat level communicated?VTT
Updates of network devicesThe Center for Internet Security, Critical Security
UPS/Battery backup configurationAdapted from the US:DHS Infrastructure Survey Tool (
Up-to-date lists about important external companies and authorities?German Federal Ministry of the Interior. (2008) Prot
Up-to-date plans and facility pictures of the crisis mgmt. center?German Federal Ministry of the Interior. (2008) Prot
Up-to-date, centrally maintained lists of staff and contact information?German Federal Ministry of the Interior. (2008) Prot
Urban solid waste regularly collected Annex of the resolution adopted by the General Assem
URL filtersThe Center for Internet Security, A Measurement Comp
URL requests loggingThe Center for Internet Security, Critical Security
USB write preventionThe Center for Internet Security, Critical Security
Use of AES with at least WPA2The Center for Internet Security, Critical Security
Use of asset inventoryThe Center for Internet Security, Critical Security
Use of authentication, such as EAP/TLSThe Center for Internet Security, Critical Security
Use of client certificatesThe Center for Internet Security, Critical Security
Use of client certificatesThe Center for Internet Security, Critical Security
Use of external devicesThe Center for Internet Security, Critical Security
Use of supported web browsers and email clientsThe Center for Internet Security, Critical Security
Use of VLANsThe Center for Internet Security, Critical Security
Use of WAFThe Center for Internet Security, Critical Security
User accounts wrongly configured (access rights)ETSI GS ISI 001-1 V1.1.2
User accounts wrongly configured (admin accounts)ETSI GS ISI 001-1 V1.1.2
User accounts wrongly configured (admin accounts)ETSI GS ISI 001-1 V1.1.2
User accounts wrongly configured (inactive)ETSI GS ISI 001-1 V1.1.2
User accounts wrongly configured (logs access)ETSI GS ISI 001-1 V1.1.2
User accounts wrongly configured (owners)ETSI GS ISI 001-1 V1.1.2
Users with privileged AND/OR administrator access / total number of usersEU-VRi
Using of Safety Risk registry in decision makingCCPS (2007). Guidelines for risk based process safet
Utilization of formal, external cybersecurity guidance and standardsAdapted from the US:DHS Infrastructure Survey Tool (
Utilization of predictive methodsVTT
Vaihtoehtoisten vesilähteiden käyttöönotto -Using alternative water sourcesVTT
Vaikutusalueen tunnistaminen - Identification of the impacted area VTT Workshop 16.4.2018
Väliaikaisen vedenjakelun aloittaminen - starting temporary water deliveryVTT Workshop 16.4.2018
Väliaikaisen vedenjakelun toimivuus - Performance of temp. water deliveryVTT workshop 16.4.2018
Value for Campylobacter?Swedish Water and Wastewater Association, (2008). Rå
Value of core banking transactions – payments 
Value of COVID-19 fiscal stimulus packages as a share of GDP?www.imf.org/en/Topics/imf-and-covid19/Fiscal-Policie
Value of lost fuel due to fire (Euros/incident)VTT. (2017). Presentation for SmartResilience case f
Value of lost production (Euros)VTT. (2017). Presentation for SmartResilience case f
Varautumiskeinot ja resurssitarpeet - Means & resources for preparednessVTT Workshop 16.4.2018
Varautumissuunnittelu - preparedness planningVTT
Varying susceptibilities to riskCWA16649
Vedenottamoiden uudelleen käyttöönotto - Restarting raw water sourcesVTT workshop 16.4.2018
Vehicle Management Signs availableGOLF, CCC
Vendor supported application softwareThe Center for Internet Security, Critical Security
Verification of qualification and trustworthinessCloud Computing Compliance Controls Catalogue (C5) -
Verification of standard device configurations and change detectionThe Center for Internet Security, Critical Security
Verkostorakenteen ja toiminnan hallinta - distribution network managementVTT
Victim identityCWA16649
Victims of intentional homicideAnnex of the resolution adopted by the General Assem
Victims of violenceAnnex of the resolution adopted by the General Assem
Video analytics or Anomaly Detection of CCTVAdapted from the US:DHS Infrastructure Survey Tool (
Virtual MachinesThe Center for Internet Security, Critical Security
Volume of portable water available to high risk sites like hospitals 
Volume of productionAnnex of the resolution adopted by the General Assem
Volume of remittancesAnnex of the resolution adopted by the General Assem
Volume of water at reservoirs 
Voter turnout in general electionOECD Statistics (2018), http://data.oecd.org
Voting rights of developing countries in international organizationsAnnex of the resolution adopted by the General Assem
Voting rights of developing countries in international organizationsAnnex of the resolution adopted by the General Assem
Vulnerabilities risk-rateThe Center for Internet Security, Critical Security
Vulnerability intelligence subscriptionThe Center for Internet Security, Critical Security
Vulnerability results checkThe Center for Internet Security, Critical Security
Vulnerability scanning and penetration testing tools in concertThe Center for Internet Security, Critical Security
Vulnerability-logs correlationThe Center for Internet Security, Critical Security
Warning scheme to inform internal population affected by an extreme event?German Federal Ministry of the Interior. (2008) Prot
Was a case of pandemic taken into account for purchasing hospital/IC equipment and supplies? 
Was a leak detected? How big is it?IEC 61508, IEC61511, PSMS
Was a risk analysis performed in the relevant period?SMR CWA91:2018
Was an interdependency analysis performed?Draft proposal on possible resilience or functionali
Was an investment optimization analysis done? 
Was management review of risk assessment conducted?HELEN
Was risk assessment of tunnel/piping conducted?HELEN Ltd
Was the annual assessment of external reports & complaints conducted?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Was the annual review of lessons learned conducted?Helen Ltd. & VTT. Meeting between VTT & Helen repres
Was the management review conducted on lessons learned? HELEN
Was the review & update on guidelines of prevention & remedies conducted?HELEN
Was there an endemic/pandemic in the last 15 years with more than 500 confirmed cases?www.statista.com/statistics/263213/number-of-h1n1-ca
Was there an interruption in the supply of alternative energy products?PAP Serbia
Wastewater safely treatedAnnex of the resolution adopted by the General Assem
Water outflow from the Iniscara Dam 
Water resources management implementationAnnex of the resolution adopted by the General Assem
Water supply test that can be performed dailyGOLF, CCC
Waterproof plans and files which could be used outdoors during a crisis?German Federal Ministry of the Interior. (2008) Prot
Water-related ecosystemsAnnex of the resolution adopted by the General Assem
Weak firewall configurationETSI GS ISI 001-1 V1.1.2
Weakest barrier type at the facility/SAA used for mitigation?Adapted from the US:DHS Infrastructure Survey Tool (
Weather forecast modelsGOLF, CCC
Web browser software vulnerabilitiesETSI GS ISI 001-1 V1.1.2
Website defacementETSI GS ISI 001-1 V1.1.2
Website forgery (domain or brand names)ETSI GS ISI 001-1 V1.1.2
Website forgery (forged websites)ETSI GS ISI 001-1 V1.1.2
Were best practices to deal with shocks and stresses used in different sectors and other cities reviewed?SMR CWA91:2018
Were climate change adaptation/ mitigation actions adopted into plans?SMR CWA91:2018
Were crucial electronics tested against global or just local standards?-
Were dependencies with other systems that affect the restoration addressed?Resolute Methodology
Were formal partnerships with regional stakeholders established?SMR CWA91:2018
Were interdependencies between risks taken into account when assessing and managing risk?SMR CWA91:2018
Were interdependencies of critical services at local level identified?SMR CWA91:2018
Were leading indicators for assessing the resilience action plan developed?SMR CWA91:2018
Were public consultations undertaken to receive feedback on the resilience action plan?SMR CWA91:2018
Were resilience building process requirements identified?prCWA 91:2018 City Resilience Maturity Model
Were studies/research into pandemics included in the state risk analysis? 
What adverse effect to the CIs operations/jurisdiction would result?InfraStress D2.1
What alternative water provision strategies do we have?National Food Agency, Sweden. (2011). Strategi vid v
What are the aspects covered by the insurance?Young. et.al. (2016). A framework for incorporating
What are the incident response structure measure implemented?International organization for Standardization(2012)
What are the incident response structure measure implemented?International organization for Standardization(2012)
What are the investment requirements for the plant for the next few years?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What are the number of departures from the airport?ICAO STA/10-WP/30
What are the possibilities to reach the concerned citizens and organization 
What are the quality requirements for companies’ resilience program? 
What barrier effect has been reached for bacteria?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What barrier effect has been reached for parasites?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What barrier effect has been reached for virus?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What barrier effect is needed for bacteria?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What barrier effect is needed for parasites?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What barrier effect is needed for virus?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What does the emissions sensor indicate?IEC 61508, IEC 61511, PSMS
What does the flow control sensor indicate?IEC 61508, IEC 61511, PSMS
What does the Leakage sensor indicate?IEC 61508, IEC 61511, PSMS
What does the level control sensor indicate?IEC 61508, IEC 61511, PSMS
What does the pressure sensor indicate?IEC 61508, IEC 61511, PSMS
What does the temperature sensor indicate?IEC 61508, IEC 61511, PSMS
What effect attack have on the critical asset’s contribution to economy?InfraStress D2.1
What is the infrstructure's assessed Management Factor, following API 581?PAP Serbia
What is the infrstructure's assessed Management Factor, following API 581?N/A
What is current drinking water consumption per capita?van Leeuwen, C.J. et al. 2012. City Blueprints: 24In
What is the police to resident ratio?Jovanovic. A., et. al. (2017). T5.1: Report from the
What is the police to resident ratio?Jovanovic. A., et. al. (2017). T5.1: Report from the
What is the ability to communicate status externally?Inspired by Annex 1 - Generic resilience indicators
What is the ability to communicate status internally?Inspired by Annex 1 - Generic resilience indicators
What is the ability to establish contact with relevant authorities?Inspired by Annex 1 - Generic resilience indicators
What is the ability to establish contact with relevant authorities?Inspired by Annex 1 - Generic resilience indicators
What is the ability to externally communicate status during recovery phase?Inspired by Annex 1 - Generic resilience indicators
What is the ability to improvise a response and recovery plan?Inspired by Annex 1 - Generic resilience indicators
What is the ability to internally communicate the status during recovery?Inspired by Annex 1 - Generic resilience indicators
What is the ability to monitor effects and adapt?Inspired by Annex 1 - Generic resilience indicators
What is the ability to stop or reduce operations in case of a disturbance?Inspired by Annex 1 - Generic resilience indicators
What is the amount of available decision support staff?Inspired by Annex 1 - Generic resilience indicators
What is the assessed mitigated consequence? 
What is the assessed mitigated probability? 
What is the assessed unmitigated consequence? 
What is the assessed unmitigated probability? 
What is the average age of grid infrastructure components? 
What is the average downtime per customer and year? IEEE Guide for Electric Power - Distribution Reliabi
What is the average of IoT traffic detection time in seconds?DPS
What is the cable - overhead powerline ratio? 
What is the capacity to obtain regular update on situation during recovery?Inspired by Annex 1 - Generic resilience indicators
What is the capacity to obtain regular update on the situation?Inspired by Annex 1 - Generic resilience indicators
What is the character of the failure data gathering system?Inspired by Annex 1 - Generic resilience indicators
What is the coverage of Electric connection?Petit, F. D. P.et. al (2010). Constructing a Resilie
What is the cyber-physical average mitigation time in second?DPS
What is the cyber-threat average mitigation time in second?DPS
What is the degree of available external decision support?Inspired by Annex 1 - Generic resilience indicators
What is the degree of situational awareness in case of a disturbance?Inspired by Annex 1 - Generic resilience indicators
What is the economic impact that curfew is expected to create? 
What is the efficacy of the reporting culture?ICAO STA/10-WP/30
What is the endurance of response functions?Inspired by Annex 1 - Generic resilience indicators
What is the energy mix in the grid? 
What is the EU avsec classification of the facility?Commission Regulation (EU) 72/2010
What is the extent of auto-real time alert of smart surveillance system?Hampapur. A. et.al. (2003). Smart surveillance: appl
What is the extent of extreme cold weather?PAP Serbia
What is the extent of the excursion that the sensor is currently reporting?IEC 61508, IEC61511, PSMS
What is the extent of the governmental support program? 
What is the financial loss for a BI in a year?Jovanovic. A., et. al. (2017). T5.1: Report from the
What is the financial loss for a BI in a year? 
What is the frequency of exercises for communication and warning?International organization for Standardization(2012)
What is the frequency of exercises for communication and warning?International organization for Standardization(2012)
What is the frequency of redirecting heated fuel to combustion?Helen Ltd. & VTT. Meeting between VTT & Helen repres
What is the frequency of revision of Risk Register? 
What is the frequency of simulator training for operating personnel?Øien, K., Massaiu, S., Tinmannsvik, R. K., & Størset
What is the highest assessed risk among the routing countries?PAP Serbia
What is the highest assessed risk among the routing countries?N/A
What is the highest assessed risk for interruption from non natural/technical cause?PAP Serbia
What is the highest assessed risk for interruption from non natural/technical cause?N/A
What is the incident frequency?HELEN Ltd
What is the incident frequency?HELEN Ltd
What is the infrastructure's overall RBI risk score?N/A
What is the interval for protection device function tests? 
What is the interval for telecontrol device function tests? 
What is the knowledge of decision support staff?Inspired by Annex 1 - Generic resilience indicators
What is the level for raw water alkalinity?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Aluminium (Al)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Ammonium (NH4)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Calcium (Ca)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Chloride (Cl)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water COD(Mn)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Colour?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Conductivity?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Fluoride (F)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Iron (Fe)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Magnesium (Mg)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Manganese (Mn)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Nitrate (NO3)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Nitrite (NO2)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Phosphate (PO4)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Potassium (K)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Sodium (Na)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water Sulfate (SO4)?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water TOC?Swedish Water and Wastewater Association, (2008). Rå
What is the level for raw water turbidity?Swedish Water and Wastewater Association, (2008). Rå
What is the level of energy consumption for water treatment?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What is the level of gas in storage?PAP Serbia
What is the level of gas in storage?N/A
What is the level of heating oil reserves?PAP Serbia
What is the level of risk related to flooding?PAP Serbia
What is the level of risk related to flooding?N/A
What is the level of utilization at the water plant?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What is the loss in accessibility to health care providers? 
What is the loss in accessibility to health care providers? 
What is the main use for the primary external communications method?Adapted from the US:DHS Infrastructure Survey Tool (
What is the maintenance interval for grid relevant components? 
What is the max potential of interrupted supply from biggest supply source?PAP Serbia
What is the max potential of interrupted supply from biggest supply source?N/A
What is the maximum daily number of tailgating issues per person?DPS
What is the maximum number of people expected to be exposed?InfraStress D2.1
What is the mean time for first responders to respond to an incident?SmartResilience project
What is the municipal responsibility?National Food Agency, Sweden. (2011). Strategi vid v
What is the nature of the system to store knowledge?Inspired by Annex 1 - Generic resilience indicators
What is the number of detected non-compliances / reccomendation in SEVESO related inspections? 
What is the number of detected non-compliances / recommendations in EMS?InfraStress - CARMA
What is the number of detected non-compliances / recommendations in Occupational health and safety management system (OH&S)?InfraStress - CARMA
What is the number of IoT abnormal traffic detections per day?DPS
What is the number of IoT attack detections per day?DPS
What is the number of Scada BMS incidents per day?DPS
What is the number of SQL injections per quarter?DPS
What is the number of tailgating issues per day?DPS
What is the number of unlawful interference against the facility?ICAO STA/10-WP/30
What is the percentage of schools with a resilience action plan program? 
What is the percentage of the population that has no access to health care? 
What is the percentage of the population that has no access to health care? 
What is the procedure for information exchange during cyber attack? Project Group LÜKEX Bund, Federal Office of Civil Pr
What is the procedure for information exchange during cyber attack? Project Group LÜKEX Bund, Federal Office of Civil Pr
What is the quality of communication between internal actors?Inspired by Annex 1 - Generic resilience indicators
What is the quality of coordination between external actors?Inspired by Annex 1 - Generic resilience indicators
What is the quality of joint exercizes in response and recovery phase?Inspired by Annex 1 - Generic resilience indicators
What is the quality of measures taken to protect citizens against flooding?van Leeuwen, C.J. et al. 2012. City Blueprints: 24In
What is the quality of media handling during the recovery phase?Inspired by Annex 1 - Generic resilience indicators
What is the quality of the event investigation and reporting process?Inspired by Annex 1 - Generic resilience indicators
What is the quality of the follow-up process?Inspired by Annex 1 - Generic resilience indicators
What is the quality of the ICT decision support system?Inspired by Annex 1 - Generic resilience indicators
What is the quality of the implementation plan?Inspired by Annex 1 - Generic resilience indicators
What is the quality of the transport and evacuation equipment verified?SmartResilience. (2017). D5.1 Report on the results
What is the quality of training in relation to response and recovery phase?Inspired by Annex 1 - Generic resilience indicators
What is the ratio of employees attending cyber security seminars/workshops?Jovanovic. A., et. al. (2017). T5.1: Report from the
What is the ratio of employees attending cyber security seminars/workshops? 
What is the ratio of employees attending cyber security seminars/workshops? 
What is the raw water pH?Swedish Water and Wastewater Association, (2008). Rå
What is the raw water Redox potential?Swedish Water and Wastewater Association, (2008). Rå
What is the raw water temperature?Swedish Water and Wastewater Association, (2008). Rå
What is the result of evaluation of work-related stress risk within the company?InfraStress - CARMA
What is the results for testing regarding Enterococcus?Swedish Water and Wastewater Association, (2008). Rå
What is the results for testing regarding Salmonella?Swedish Water and Wastewater Association, (2008). Rå
What is the results for testing, regarding Escherichia Coli (E. Coli)?Swedish Water and Wastewater Association, (2008). Rå
What is the results regarding Giardia, Cryptosporidium (parasites)?Swedish Water and Wastewater Association, (2008). Rå
What is the scope of external alert/communication in case of a disturbance?Inspired by Annex 1 - Generic resilience indicators
What is the scope of the emergency response and reporting process?Inspired by Annex 1 - Generic resilience indicators
What is the scope of the continuous resilience improvement process?Inspired by Annex 1 - Generic resilience indicators
What is the scope of the event investigation and reporting process?Inspired by Annex 1 - Generic resilience indicators
What is the scope of the learning from successful operations?Inspired by Annex 1 - Generic resilience indicators
What is the share of nominal supply coming from imports?PAP Serbia
What is the share of nominal supply coming from imports?N/A
What is the state of the actuators linked to the system?IEC 61508, IEC61511, PSMS
What is the state of the bouy?IEC 61508, IEC61511, PSMS
What is the state of the controllers linked to the system?IEC 61508, IEC61511, PSMS
What is the state of the hull of the asset? Overall integrityIEC 61508, IEC61511, PSMS
What is the state of the logic solver linked to the system?IEC 61508, IEC61511, PSMS
What is the state of the overall connected sensor array?IEC 61508, IEC61511, PSMS
What is the total annual discharge from raw water source?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
What is the total number of persons with more than one tailgating per day?DPS
What is the value of of available external decision support?Inspired by Annex 1 - Generic resilience indicators
What is the water loss percentage in the distribution system in Finland?van Leeuwen, C.J. et al. 2012. City Blueprints: 24In
What is the water loss percentage in the distribution system?van Leeuwen, C.J. et al. 2012. City Blueprints: 24In
What kind of topology does the considered part of the power grid feature? 
What knowledge underlies the business continuity plan?Inspired by Annex 1 - Generic resilience indicators
What method of attack was used?Jovanovic. A., et. al. (2017). T5.1: Report from the
What period of time would critical asset be unable to provide its product?InfraStress D2.1
What regulates renewal of training?Inspired by Annex 1 - Generic resilience indicators
What time is required on average to restore service after interruption?IEEE Guide for Electric Power - Distribution Reliabi
What type of exercises are the Emergency Plan exercises?Adapted from the US:DHS Infrastructure Survey Tool (
What type of IT is used?Adapted from the US:DHS Infrastructure Survey Tool (
What was the yearly system unavailability?HELEN
What would the direct financial consequences be to repair critical asset.InfraStress D2.1
What year was the raw water source classified as water protection area?Bondelind, M., Pettersson, T., Malm, A., Bergstedt,
Whats the highest assessed risk for interruption from non natural/technicalPAP Serbia
Whats the highest assessed risk for interruption from non natural/technicalPAP Serbia
Whats the highest assessed risk for interruption from non natural/technicalN/A
Whats the highest assessed risk for interruption from non natural/technicalN/A
Where are electric service connections into the facility located?Adapted from the US:DHS Infrastructure Survey Tool (
Where are natural gas service connections into the facility located?Adapted from the US:DHS Infrastructure Survey Tool (
Which are critical uses for IT?Adapted from the US:DHS Infrastructure Survey Tool (
Which areas does the business Emergency Plan have procedures for?Adapted from the US:DHS Infrastructure Survey Tool (
Which external communication services are critical to facility operations?Adapted from the US:DHS Infrastructure Survey Tool (
Which is the primary external critical communications mode?Adapted from the US:DHS Infrastructure Survey Tool (
Who monitors the CCTV cameras?Adapted from the US:DHS Infrastructure Survey Tool (
Why is air transportation critical to facility operations?Adapted from the US:DHS Infrastructure Survey Tool (
Why is maritime transportation critical to facility operations?Adapted from the US:DHS Infrastructure Survey Tool (
Why is pipeline transportation critical to facility operations?Adapted from the US:DHS Infrastructure Survey Tool (
Why is rail transportation critical to facility operations?Adapted from the US:DHS Infrastructure Survey Tool (
Why is road transportation critical to facility operations?Adapted from the US:DHS Infrastructure Survey Tool (
Wide scope of dignostics techniquesDeep Knowledge Group (2020) COVID-19 ranking framewo
WIDSThe Center for Internet Security, Critical Security
Will a survey on crisis management be conducted among staff?German Federal Ministry of the Interior. (2008) Prot
Will information on damage be evaluated after a crisis incident?German Federal Ministry of the Interior. (2008) Prot
Will the results of the follow-up be used to adapt crisis management?German Federal Ministry of the Interior. (2008) Prot
Wireless devices with authorized configuration and security profileThe Center for Internet Security, Critical Security
With SAA backup/alternative mode, normal business function lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
With wastewater discharge backup, percent of functions lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Within what time can we provide water through different strategies?National Food Agency, Sweden. (2011). Strategi vid v
Without any SAA backup, normal business function lost or degradedAdapted from the US:DHS Infrastructure Survey Tool (
Work authorization permit required?American Petroleum Institute RP 581 (2000). (3rd ed.
Work authorization permit required?American Petroleum Institute RP 581 (2000). (3rd ed.
Workforce not completed incident handling educationThe Center for Internet Security, A Measurement Comp
Workforce that has not passed general information security awareness assessmentThe Center for Internet Security, A Measurement Comp
Workforce that has not passed job role specific information security awareness assessmentThe Center for Internet Security, A Measurement Comp
Workforce without core information security awareness programThe Center for Internet Security, A Measurement Comp
Workforce without job role specific information security awareness programThe Center for Internet Security, A Measurement Comp
Workstation used without relevant usual security (admin)ETSI GS ISI 001-1 V1.1.2
Workstation used without relevant usual security (admin)ETSI GS ISI 001-1 V1.1.2
Workstation used without relevant usual security (BYOD)ETSI GS ISI 001-1 V1.1.2
Workstation used without relevant usual security (encryption)ETSI GS ISI 001-1 V1.1.2
Workstation used without relevant usual security (internet admin)ETSI GS ISI 001-1 V1.1.2
Workstation used without relevant usual security (software)ETSI GS ISI 001-1 V1.1.2
Workstation used without relevant usual security (software)ETSI GS ISI 001-1 V1.1.2
Workstation used without relevant usual security (storage)ETSI GS ISI 001-1 V1.1.2
Workstation wrongly configured (autorun)ETSI GS ISI 001-1 V1.1.2
Workstation wrongly configured (updates)ETSI GS ISI 001-1 V1.1.2
Workstation wrongly configured (updates)ETSI GS ISI 001-1 V1.1.2
World Digital Competitiveness scorewww.imd.org
Worldwide weighted tariff-averageAnnex of the resolution adopted by the General Assem
Would rising groundwater due to a flood impair building stability?German Federal Ministry of the Interior. (2008) Prot
Would there be a discernible civil government impact?Adapted from the US:DHS Infrastructure Survey Tool (
Would there be an adverse effect on other assets that are interdependent?InfraStress D2.1
Written information about the key personnel responsible for BCM? Petit, F. D. P.et. al (2013). Resilience measurement
Written information about the key personnel responsible for BCM? Petit, F. D. P.et. al (2013). Resilience measurement
Written Memorandum of Understanding/Agreement with any first responder(s)Adapted from the US:DHS Infrastructure Survey Tool (
Written resilience- related operating procedures exists?American Petroleum Institute RP 581 (2000). (3rd ed.
Written resilience- related operating procedures exists?American Petroleum Institute RP 581 (2000). (3rd ed.
X-uncertainties CWA16649
Yes / No with 10 scale 
Youth not in education, employment or trainingAnnex of the resolution adopted by the General Assem
Било је великих удеса у сличним постројењима 
Било је непријављених случајева избегнутих удеса у постројењу  
Било је притужби на активности у постројењу у задње 2 године 
Било је случајева мање неусаглашености с прописима у постројењу која су изискивала радње на побољшању 
Било је случајева мање неусаглашености с прописима у постројењу која су изискивала радње на побољшању 
Било је случајева неусаглашености с прописима у постројењу који изискују неодложне радње на побољшању 
Велики удес у постројењу може угрозити велико водено тело или подземне воде 
Велики удес у постројењу може угрозити локално водено тело 
Велики удес у постројењу може угрозити међунароно водено тело 
Више од две опасне материје су у једнаким или већим количинама од прописаних на локацији севесо оператера 
Две опасне материје су у једнаким или већим количинама од прописаних на локацији севесо оператера 
Дошло је до кршења прописа у постројењу који изискују званичну контролу примене прописа и подношење пријава од стране инспектора 
Има пријављених или познатих случајева избегнутих удеса у постројењу 
Једињења никла у облику праха која се могу удахнути  
Једна опасна материја је присутна у једнаким или већим количинама од прописаних на локацији севесо оператера 
Кључна инфраструктура се налази у непосредној близини постројења 
Кључна инфраструктура се налази у области у којој се могу оштетити негативне последице великог удеса у постројењу од (500 до 1000 м) 
Компанија не сарађује с органима за контролу примене прописа 
Могућ је краћи прекид у водоснабдевању 
Могућ је краћи прекид у водоснабдевању 
Могућ је краћи прекид у напајању гасом 
Могућ је краћи прекид у напајању електричном енергијом 
Могуће дуготрајно искључење воде 
Могуће дуготрајно искључење гаса 
Могуће дуготрајно искључење електричне енергије 
Могуће привремено искључење воде 
Могуће привремено искључење гаса 
Могуће привремено искључење електричне енергије 
На око 1.000 – 1.500 м од постројења се налази кључна инфраструктура 
Око постројења постоји висок ризик од удеса који су у вези са транспортом  
Опрема у постројењу је стара до 10 година 
Опрема у постројењу је старија од 10 година 
Опрема у постројењу је старија од 20 година 
Опрема у постројењу је старија од 20 година али је иста обновљена 
Опрема у простројењу је стара до 10 година 
Постоје индустријске активности око постројења које могу изазвати домино ефекат 
Постоје јавне зграде на 1.000 – 1.500 м од постројења 
Постоје јавне зграде у којима се могу осетити негативне последице великог удеса од  
Постоје јавне зграде у непосредној близини постројења 
Постоје локације које јавност често посећује  
Постоје локације које јавност често посећује на којима се могу осетити негативне последице великог удеса од 
Постоје локације које јавност често посећује у непосредној близини постројења  
Постоје насељена подручја/повредиви објекти на око 1.000 – 1.500 м од постројења 
Постоје насељена подручја/повредиви објекти у непосредној близини постројења  
Постоје насељена подручја/повредиви објекти у области у којој би се могле осетити негативне последице услед великог удеса у постројењу од (500 до 1000 м) 
Постоје осетљива природна подручја на око 1.000 – 1.500 м од постројења 
Постоје осетљива природна подручја у области у којој се могу осетити негативне последице услед великог удеса од (500 до 1000 м) 
Постоје осетљива природна подручја у области у којој се могу осетити негативне последице услед великог удеса од (до 500 м) 
Постоји ризик од наглих поплава или је било великих поплава 
Постројење има велики број операција утовара/истовара 
Постројење је у плавном подручју 
Постројење ради и у ноћним сменама 
Постројење ради са агресивним материјалима 
Постројење ради са високим температурама или користи егзотермне реакције 
Постројење ради са опремом под високим притиском 
Постројење ради шаржним процесом 
Постројење се налази у подручју у којем постоји ризик од одрона 
Постројење се налази у сеизмички активном подручју 
Постројење се налази у сеизмички активном подручју у којем је било земљотреса 
Постројење се не одржава адекватно 
ППУ/ИБ је израђена 
ППУ/ИБ не задовољава односно није имплементирана у потпуности 
ППУ/ИБ није израђена 
ПРИСУТAН aрсен(V)оксид [1303-28-2], арсенатна киселина и/или њене соли  
ПРИСУТAН Бром [7726-95-6]  
ПРИСУТAН Калијум-нитрат [7757-79-1] 
Присутан 1-Бром-3-хлорпропан 
Присутан 2-Метил-3-бутеннитрил 
Присутан 3-(2-Етилхексилокси) пропиламин 
Присутан 3-Метилпиридин 
Присутан 4,4-метилен-бис-(2-хлоранилин) [101-14-4]  
Присутан aрсен(III)триоксид [1327-53-3], арсенитна киселина и/или њене соли  
Присутан tечни веома лако запаљиви гасови (укључујући ТНГ) и природни гас  
Присутан Алкили олова  
Присутан Амонијак, безводни [7664-41-7] 
Присутан Амонијум-нитрат [6484-52-2] Република Србија
Присутан Арсен-трихидрид (арсин) [7784-42-1]  
Присутан Ацетилен [74-86-2]  
Присутан Бис (2-диметиламиноетил) (метил) амин 
Присутан Бор трифлуорид [7637-07-2] 
Присутан Водоник [1333-74-0]  
Присутан Водоник сулфид [7783-06-4] 
Присутан Етиленимин [151-56-4]  
Присутан Етиленоксид [75-21-8]  
Присутан Карбонилдихлорид (фозген) [75-44-5]  
Присутан Кисеоник [7782-44-7]  
Присутан Метанол [67-56-1]  
Присутан Метил акрилат 
Присутан Метилизоцијанат [624-83-9]  
Присутан Пиперидин [110-89-4] 
Присутан Полихлоровани дибензофурани и полихлоровани дибензодиоксини 
Присутан Пропиламин 
Присутан Пропиленоксид [75-56-9]  
Присутан Сумпор-дихлорид [10545-99-0]  
Присутан Сумпор-триоксид [7446-11-9]  
Присутан Терц-бутил акрилат 
Присутан Тетрахидро-3,5-диметил-1,3,5-тиадиазин-2-тион (дазомет) 
Присутан Толуендиизоцијанат [26471-62-5]  
Присутан Флуор [7782-41-4]  
Присутан Формалдехид (концентрација ≥ 90%) [50-00-0]  
Присутан Фосфор-трихидрид (фосфин) [7803-51-2]  
Присутан Хлор [7782-50-5]  
Присутан Хлороводоник (гас у течном стању) [7647-01-0]  
Производи од нафте:  
Севесо оператер се препознао на основу додатних критеријума 
Следећи карциногени у концентрацијама изнад 5% масених 
Смеше натријум хипохлорита класификоване као опасност по водену животну средину, категорија Акутно 1 [Н400], које садрже мање од 5% активног хлора 
Супстанце су присутне најмање дупло више од граничних за Севесо постројења вишег реда 
Супстанце су присутне најмање три пута више од граничних за Севесо постројења вишег реда 
Супстанце су присутне у вредностима близу доњих граничних за Севесо постројења вишег реда 
Супстанце су присутне у вредностима близу доњих граничних за Севесо постројења нижег реда 
Супстанце су присутне у горњим вредностима близу граничних за Севесо постројења нижег реда 
Супстанце су присутне у средњим вредностима за Севесо постројења нижег реда 
У близини постројења постоје друге Севесо локације или војни објекти 
У постројењу је било великих удеса 
Уколико сам процени да је због локације, природе опасних материја и опасних активности повећана вероватноћа настанка удеса и могућих последица 

 Filter

Available Sources
  • ISO
  • GEMET

Select Topic(s)


Select Provider(s)


x
We use cookies to improve your experience on our website. If you continue using our website, we will assume that you are happy to receive all cookies on this website. Read more Continue