diff --git a/data/csv/ssvc/human_impact_1_0_0.csv b/data/csv/ssvc/human_impact_1_0_0.csv index b100b9c7..9aa064d9 100644 --- a/data/csv/ssvc/human_impact_1_0_0.csv +++ b/data/csv/ssvc/human_impact_1_0_0.csv @@ -1,4 +1,4 @@ -row,Safety Impact v2.0.0,Mission Impact v2.0.0,Human Impact v2.0.2 +row,Safety Impact v2.0.1,Mission Impact v2.0.0,Human Impact v2.0.2 0,negligible,degraded,low 1,negligible,mef support crippled,low 2,negligible,mef failure,medium diff --git a/data/csv/ssvc/public_safety_impact_1_0_0.csv b/data/csv/ssvc/public_safety_impact_1_0_0.csv index e515a840..bc8274c5 100644 --- a/data/csv/ssvc/public_safety_impact_1_0_0.csv +++ b/data/csv/ssvc/public_safety_impact_1_0_0.csv @@ -1,4 +1,4 @@ -row,Safety Impact v2.0.0,Public Safety Impact v2.0.1 +row,Safety Impact v2.0.1,Public Safety Impact v2.0.1 0,negligible,minimal 1,marginal,significant 2,critical,significant diff --git a/data/json/decision_points/ssvc/safety_impact_2_0_1.json b/data/json/decision_points/ssvc/safety_impact_2_0_1.json new file mode 100644 index 00000000..67e8ed9f --- /dev/null +++ b/data/json/decision_points/ssvc/safety_impact_2_0_1.json @@ -0,0 +1,30 @@ +{ + "namespace": "ssvc", + "key": "SI", + "version": "2.0.1", + "name": "Safety Impact", + "definition": "The safety impact of the vulnerability. (based on IEC 61508 with modifications)", + "schemaVersion": "2.0.0", + "values": [ + { + "key": "N", + "name": "Negligible", + "definition": "Any one or more of these conditions hold. **Physical harm**: Minor injuries at worst (IEC 61508 Negligible). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard. **System resiliency**: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation. **Environment**: Minor externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses, which are not readily absorbable, to multiple persons. **Psychological**: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." + }, + { + "key": "M", + "name": "Marginal", + "definition": "Any one or more of these conditions hold. **Physical harm**: Major injuries to one or more persons (IEC 61508 Marginal). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard. **System resiliency**: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation. **Environment**: Major externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses that likely lead to bankruptcy of multiple persons. **Psychological**: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." + }, + { + "key": "R", + "name": "Critical", + "definition": "Any one or more of these conditions hold. **Physical harm**: Loss of life (IEC 61508 Critical). **Operator resiliency**: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly. **System resiliency**: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact. **Environment**: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties. **Financial**: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state. **Psychological**: N/A." + }, + { + "key": "C", + "name": "Catastrophic", + "definition": "Any one or more of these conditions hold. **Physical harm**: Multiple loss of life (IEC 61508 Catastrophic). **Operator resiliency**: Operator incapacitated (includes fatality or otherwise incapacitated). **System resiliency**: Total loss of whole cyber-physical system, of which the software is a part. **Environment**: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties. **Financial**: Social systems (elections, financial grid, etc.) supported by the software collapse. **Psychological**: N/A." + } + ] +} diff --git a/data/json/decision_tables/ssvc/human_impact_1_0_0.json b/data/json/decision_tables/ssvc/human_impact_1_0_0.json index fed1197f..3bab08a2 100644 --- a/data/json/decision_tables/ssvc/human_impact_1_0_0.json +++ b/data/json/decision_tables/ssvc/human_impact_1_0_0.json @@ -6,33 +6,33 @@ "definition": "Human Impact decision table for SSVC", "schemaVersion": "2.0.0", "decision_points": { - "ssvc:SI:2.0.0": { + "ssvc:SI:2.0.1": { "namespace": "ssvc", "key": "SI", - "version": "2.0.0", + "version": "2.0.1", "name": "Safety Impact", - "definition": "The safety impact of the vulnerability. (based on IEC 61508)", + "definition": "The safety impact of the vulnerability. (based on IEC 61508 with modifications)", "schemaVersion": "2.0.0", "values": [ { "key": "N", "name": "Negligible", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Minor injuries at worst (IEC 61508 Negligible).
- *Operator resiliency*: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard.
- *System resiliency*: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation.
- *Environment*: Minor externalities (property damage, environmental damage, etc.) imposed on other parties.
- *Financial*: Financial losses, which are not readily absorbable, to multiple persons.
- *Psychological*: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." + "definition": "Any one or more of these conditions hold. **Physical harm**: Minor injuries at worst (IEC 61508 Negligible). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard. **System resiliency**: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation. **Environment**: Minor externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses, which are not readily absorbable, to multiple persons. **Psychological**: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." }, { "key": "M", "name": "Marginal", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Major injuries to one or more persons (IEC 61508 Marginal).
- *Operator resiliency*: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard.
- *System resiliency*: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation.
- *Environment*: Major externalities (property damage, environmental damage, etc.) imposed on other parties.
- *Financial*: Financial losses that likely lead to bankruptcy of multiple persons.
- *Psychological*: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." + "definition": "Any one or more of these conditions hold. **Physical harm**: Major injuries to one or more persons (IEC 61508 Marginal). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard. **System resiliency**: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation. **Environment**: Major externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses that likely lead to bankruptcy of multiple persons. **Psychological**: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." }, { "key": "R", "name": "Critical", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Loss of life (IEC 61508 Critical).
- *Operator resiliency*: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly.
- *System resiliency*: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact.
- *Environment*: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties.
- *Financial*: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state.
- *Psychological*: N/A." + "definition": "Any one or more of these conditions hold. **Physical harm**: Loss of life (IEC 61508 Critical). **Operator resiliency**: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly. **System resiliency**: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact. **Environment**: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties. **Financial**: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state. **Psychological**: N/A." }, { "key": "C", "name": "Catastrophic", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Multiple loss of life (IEC 61508 Catastrophic).
- *Operator resiliency*: Operator incapacitated (includes fatality or otherwise incapacitated).
- *System resiliency*: Total loss of whole cyber-physical system, of which the software is a part.
- *Environment*: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties.
- *Financial*: Social systems (elections, financial grid, etc.) supported by the software collapse.
- *Psychological*: N/A." + "definition": "Any one or more of these conditions hold. **Physical harm**: Multiple loss of life (IEC 61508 Catastrophic). **Operator resiliency**: Operator incapacitated (includes fatality or otherwise incapacitated). **System resiliency**: Total loss of whole cyber-physical system, of which the software is a part. **Environment**: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties. **Financial**: Social systems (elections, financial grid, etc.) supported by the software collapse. **Psychological**: N/A." } ] }, @@ -100,82 +100,82 @@ "outcome": "ssvc:HI:2.0.2", "mapping": [ { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "L" }, { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "L" }, { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "M" }, { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "L" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "L" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "M" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "M" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "H" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "H" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH" } diff --git a/data/json/decision_tables/ssvc/public_safety_impact_1_0_0.json b/data/json/decision_tables/ssvc/public_safety_impact_1_0_0.json index ab7f2ab1..6eeebef6 100644 --- a/data/json/decision_tables/ssvc/public_safety_impact_1_0_0.json +++ b/data/json/decision_tables/ssvc/public_safety_impact_1_0_0.json @@ -6,33 +6,33 @@ "definition": "Public Safety Impact Decision Table", "schemaVersion": "2.0.0", "decision_points": { - "ssvc:SI:2.0.0": { + "ssvc:SI:2.0.1": { "namespace": "ssvc", "key": "SI", - "version": "2.0.0", + "version": "2.0.1", "name": "Safety Impact", - "definition": "The safety impact of the vulnerability. (based on IEC 61508)", + "definition": "The safety impact of the vulnerability. (based on IEC 61508 with modifications)", "schemaVersion": "2.0.0", "values": [ { "key": "N", "name": "Negligible", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Minor injuries at worst (IEC 61508 Negligible).
- *Operator resiliency*: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard.
- *System resiliency*: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation.
- *Environment*: Minor externalities (property damage, environmental damage, etc.) imposed on other parties.
- *Financial*: Financial losses, which are not readily absorbable, to multiple persons.
- *Psychological*: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." + "definition": "Any one or more of these conditions hold. **Physical harm**: Minor injuries at worst (IEC 61508 Negligible). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard. **System resiliency**: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation. **Environment**: Minor externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses, which are not readily absorbable, to multiple persons. **Psychological**: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." }, { "key": "M", "name": "Marginal", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Major injuries to one or more persons (IEC 61508 Marginal).
- *Operator resiliency*: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard.
- *System resiliency*: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation.
- *Environment*: Major externalities (property damage, environmental damage, etc.) imposed on other parties.
- *Financial*: Financial losses that likely lead to bankruptcy of multiple persons.
- *Psychological*: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." + "definition": "Any one or more of these conditions hold. **Physical harm**: Major injuries to one or more persons (IEC 61508 Marginal). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard. **System resiliency**: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation. **Environment**: Major externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses that likely lead to bankruptcy of multiple persons. **Psychological**: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." }, { "key": "R", "name": "Critical", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Loss of life (IEC 61508 Critical).
- *Operator resiliency*: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly.
- *System resiliency*: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact.
- *Environment*: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties.
- *Financial*: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state.
- *Psychological*: N/A." + "definition": "Any one or more of these conditions hold. **Physical harm**: Loss of life (IEC 61508 Critical). **Operator resiliency**: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly. **System resiliency**: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact. **Environment**: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties. **Financial**: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state. **Psychological**: N/A." }, { "key": "C", "name": "Catastrophic", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Multiple loss of life (IEC 61508 Catastrophic).
- *Operator resiliency*: Operator incapacitated (includes fatality or otherwise incapacitated).
- *System resiliency*: Total loss of whole cyber-physical system, of which the software is a part.
- *Environment*: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties.
- *Financial*: Social systems (elections, financial grid, etc.) supported by the software collapse.
- *Psychological*: N/A." + "definition": "Any one or more of these conditions hold. **Physical harm**: Multiple loss of life (IEC 61508 Catastrophic). **Operator resiliency**: Operator incapacitated (includes fatality or otherwise incapacitated). **System resiliency**: Total loss of whole cyber-physical system, of which the software is a part. **Environment**: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties. **Financial**: Social systems (elections, financial grid, etc.) supported by the software collapse. **Psychological**: N/A." } ] }, @@ -60,19 +60,19 @@ "outcome": "ssvc:PSI:2.0.1", "mapping": [ { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:PSI:2.0.1": "M" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:PSI:2.0.1": "S" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:PSI:2.0.1": "S" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:PSI:2.0.1": "S" } ] diff --git a/data/json/ssvc_object_registry.json b/data/json/ssvc_object_registry.json index 7ded94f2..da406f0e 100644 --- a/data/json/ssvc_object_registry.json +++ b/data/json/ssvc_object_registry.json @@ -6971,6 +6971,61 @@ "definition": "Any one or more of these conditions hold.

- *Physical harm*: Multiple loss of life (IEC 61508 Catastrophic).
- *Operator resiliency*: Operator incapacitated (includes fatality or otherwise incapacitated).
- *System resiliency*: Total loss of whole cyber-physical system, of which the software is a part.
- *Environment*: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties.
- *Financial*: Social systems (elections, financial grid, etc.) supported by the software collapse.
- *Psychological*: N/A." } } + }, + "2.0.1": { + "version": "2.0.1", + "obj": { + "namespace": "ssvc", + "key": "SI", + "version": "2.0.1", + "name": "Safety Impact", + "definition": "The safety impact of the vulnerability. (based on IEC 61508 with modifications)", + "schemaVersion": "2.0.0", + "values": [ + { + "key": "N", + "name": "Negligible", + "definition": "Any one or more of these conditions hold. **Physical harm**: Minor injuries at worst (IEC 61508 Negligible). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard. **System resiliency**: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation. **Environment**: Minor externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses, which are not readily absorbable, to multiple persons. **Psychological**: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." + }, + { + "key": "M", + "name": "Marginal", + "definition": "Any one or more of these conditions hold. **Physical harm**: Major injuries to one or more persons (IEC 61508 Marginal). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard. **System resiliency**: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation. **Environment**: Major externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses that likely lead to bankruptcy of multiple persons. **Psychological**: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." + }, + { + "key": "R", + "name": "Critical", + "definition": "Any one or more of these conditions hold. **Physical harm**: Loss of life (IEC 61508 Critical). **Operator resiliency**: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly. **System resiliency**: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact. **Environment**: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties. **Financial**: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state. **Psychological**: N/A." + }, + { + "key": "C", + "name": "Catastrophic", + "definition": "Any one or more of these conditions hold. **Physical harm**: Multiple loss of life (IEC 61508 Catastrophic). **Operator resiliency**: Operator incapacitated (includes fatality or otherwise incapacitated). **System resiliency**: Total loss of whole cyber-physical system, of which the software is a part. **Environment**: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties. **Financial**: Social systems (elections, financial grid, etc.) supported by the software collapse. **Psychological**: N/A." + } + ] + }, + "values": { + "N": { + "key": "N", + "name": "Negligible", + "definition": "Any one or more of these conditions hold. **Physical harm**: Minor injuries at worst (IEC 61508 Negligible). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard. **System resiliency**: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation. **Environment**: Minor externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses, which are not readily absorbable, to multiple persons. **Psychological**: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." + }, + "M": { + "key": "M", + "name": "Marginal", + "definition": "Any one or more of these conditions hold. **Physical harm**: Major injuries to one or more persons (IEC 61508 Marginal). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard. **System resiliency**: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation. **Environment**: Major externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses that likely lead to bankruptcy of multiple persons. **Psychological**: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." + }, + "R": { + "key": "R", + "name": "Critical", + "definition": "Any one or more of these conditions hold. **Physical harm**: Loss of life (IEC 61508 Critical). **Operator resiliency**: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly. **System resiliency**: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact. **Environment**: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties. **Financial**: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state. **Psychological**: N/A." + }, + "C": { + "key": "C", + "name": "Catastrophic", + "definition": "Any one or more of these conditions hold. **Physical harm**: Multiple loss of life (IEC 61508 Catastrophic). **Operator resiliency**: Operator incapacitated (includes fatality or otherwise incapacitated). **System resiliency**: Total loss of whole cyber-physical system, of which the software is a part. **Environment**: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties. **Financial**: Social systems (elections, financial grid, etc.) supported by the software collapse. **Psychological**: N/A." + } + } } } }, @@ -22256,33 +22311,33 @@ "definition": "Human Impact decision table for SSVC", "schemaVersion": "2.0.0", "decision_points": { - "ssvc:SI:2.0.0": { + "ssvc:SI:2.0.1": { "namespace": "ssvc", "key": "SI", - "version": "2.0.0", + "version": "2.0.1", "name": "Safety Impact", - "definition": "The safety impact of the vulnerability. (based on IEC 61508)", + "definition": "The safety impact of the vulnerability. (based on IEC 61508 with modifications)", "schemaVersion": "2.0.0", "values": [ { "key": "N", "name": "Negligible", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Minor injuries at worst (IEC 61508 Negligible).
- *Operator resiliency*: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard.
- *System resiliency*: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation.
- *Environment*: Minor externalities (property damage, environmental damage, etc.) imposed on other parties.
- *Financial*: Financial losses, which are not readily absorbable, to multiple persons.
- *Psychological*: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." + "definition": "Any one or more of these conditions hold. **Physical harm**: Minor injuries at worst (IEC 61508 Negligible). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard. **System resiliency**: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation. **Environment**: Minor externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses, which are not readily absorbable, to multiple persons. **Psychological**: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." }, { "key": "M", "name": "Marginal", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Major injuries to one or more persons (IEC 61508 Marginal).
- *Operator resiliency*: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard.
- *System resiliency*: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation.
- *Environment*: Major externalities (property damage, environmental damage, etc.) imposed on other parties.
- *Financial*: Financial losses that likely lead to bankruptcy of multiple persons.
- *Psychological*: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." + "definition": "Any one or more of these conditions hold. **Physical harm**: Major injuries to one or more persons (IEC 61508 Marginal). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard. **System resiliency**: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation. **Environment**: Major externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses that likely lead to bankruptcy of multiple persons. **Psychological**: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." }, { "key": "R", "name": "Critical", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Loss of life (IEC 61508 Critical).
- *Operator resiliency*: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly.
- *System resiliency*: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact.
- *Environment*: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties.
- *Financial*: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state.
- *Psychological*: N/A." + "definition": "Any one or more of these conditions hold. **Physical harm**: Loss of life (IEC 61508 Critical). **Operator resiliency**: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly. **System resiliency**: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact. **Environment**: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties. **Financial**: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state. **Psychological**: N/A." }, { "key": "C", "name": "Catastrophic", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Multiple loss of life (IEC 61508 Catastrophic).
- *Operator resiliency*: Operator incapacitated (includes fatality or otherwise incapacitated).
- *System resiliency*: Total loss of whole cyber-physical system, of which the software is a part.
- *Environment*: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties.
- *Financial*: Social systems (elections, financial grid, etc.) supported by the software collapse.
- *Psychological*: N/A." + "definition": "Any one or more of these conditions hold. **Physical harm**: Multiple loss of life (IEC 61508 Catastrophic). **Operator resiliency**: Operator incapacitated (includes fatality or otherwise incapacitated). **System resiliency**: Total loss of whole cyber-physical system, of which the software is a part. **Environment**: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties. **Financial**: Social systems (elections, financial grid, etc.) supported by the software collapse. **Psychological**: N/A." } ] }, @@ -22350,82 +22405,82 @@ "outcome": "ssvc:HI:2.0.2", "mapping": [ { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "L" }, { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "L" }, { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "M" }, { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "L" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "L" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "M" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "M" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "H" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "H" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "VH" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH" } @@ -22447,33 +22502,33 @@ "definition": "Public Safety Impact Decision Table", "schemaVersion": "2.0.0", "decision_points": { - "ssvc:SI:2.0.0": { + "ssvc:SI:2.0.1": { "namespace": "ssvc", "key": "SI", - "version": "2.0.0", + "version": "2.0.1", "name": "Safety Impact", - "definition": "The safety impact of the vulnerability. (based on IEC 61508)", + "definition": "The safety impact of the vulnerability. (based on IEC 61508 with modifications)", "schemaVersion": "2.0.0", "values": [ { "key": "N", "name": "Negligible", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Minor injuries at worst (IEC 61508 Negligible).
- *Operator resiliency*: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard.
- *System resiliency*: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation.
- *Environment*: Minor externalities (property damage, environmental damage, etc.) imposed on other parties.
- *Financial*: Financial losses, which are not readily absorbable, to multiple persons.
- *Psychological*: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." + "definition": "Any one or more of these conditions hold. **Physical harm**: Minor injuries at worst (IEC 61508 Negligible). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard. **System resiliency**: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation. **Environment**: Minor externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses, which are not readily absorbable, to multiple persons. **Psychological**: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons." }, { "key": "M", "name": "Marginal", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Major injuries to one or more persons (IEC 61508 Marginal).
- *Operator resiliency*: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard.
- *System resiliency*: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation.
- *Environment*: Major externalities (property damage, environmental damage, etc.) imposed on other parties.
- *Financial*: Financial losses that likely lead to bankruptcy of multiple persons.
- *Psychological*: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." + "definition": "Any one or more of these conditions hold. **Physical harm**: Major injuries to one or more persons (IEC 61508 Marginal). **Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard. **System resiliency**: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation. **Environment**: Major externalities (property damage, environmental damage, etc.) imposed on other parties. **Financial**: Financial losses that likely lead to bankruptcy of multiple persons. **Psychological**: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people." }, { "key": "R", "name": "Critical", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Loss of life (IEC 61508 Critical).
- *Operator resiliency*: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly.
- *System resiliency*: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact.
- *Environment*: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties.
- *Financial*: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state.
- *Psychological*: N/A." + "definition": "Any one or more of these conditions hold. **Physical harm**: Loss of life (IEC 61508 Critical). **Operator resiliency**: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly. **System resiliency**: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact. **Environment**: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties. **Financial**: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state. **Psychological**: N/A." }, { "key": "C", "name": "Catastrophic", - "definition": "Any one or more of these conditions hold.

- *Physical harm*: Multiple loss of life (IEC 61508 Catastrophic).
- *Operator resiliency*: Operator incapacitated (includes fatality or otherwise incapacitated).
- *System resiliency*: Total loss of whole cyber-physical system, of which the software is a part.
- *Environment*: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties.
- *Financial*: Social systems (elections, financial grid, etc.) supported by the software collapse.
- *Psychological*: N/A." + "definition": "Any one or more of these conditions hold. **Physical harm**: Multiple loss of life (IEC 61508 Catastrophic). **Operator resiliency**: Operator incapacitated (includes fatality or otherwise incapacitated). **System resiliency**: Total loss of whole cyber-physical system, of which the software is a part. **Environment**: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties. **Financial**: Social systems (elections, financial grid, etc.) supported by the software collapse. **Psychological**: N/A." } ] }, @@ -22501,19 +22556,19 @@ "outcome": "ssvc:PSI:2.0.1", "mapping": [ { - "ssvc:SI:2.0.0": "N", + "ssvc:SI:2.0.1": "N", "ssvc:PSI:2.0.1": "M" }, { - "ssvc:SI:2.0.0": "M", + "ssvc:SI:2.0.1": "M", "ssvc:PSI:2.0.1": "S" }, { - "ssvc:SI:2.0.0": "R", + "ssvc:SI:2.0.1": "R", "ssvc:PSI:2.0.1": "S" }, { - "ssvc:SI:2.0.0": "C", + "ssvc:SI:2.0.1": "C", "ssvc:PSI:2.0.1": "S" } ] diff --git a/src/ssvc/decision_points/ssvc/safety_impact.py b/src/ssvc/decision_points/ssvc/safety_impact.py index bbe794bc..23fb88e6 100644 --- a/src/ssvc/decision_points/ssvc/safety_impact.py +++ b/src/ssvc/decision_points/ssvc/safety_impact.py @@ -136,6 +136,57 @@ "- *Psychological*: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons.", ) +CATASTROPHIC_3 = DecisionPointValue( + name="Catastrophic", + key="C", + definition="Any one or more of these conditions hold. " + "**Physical harm**: Multiple loss of life (IEC 61508 Catastrophic). " + "**Operator resiliency**: Operator incapacitated (includes fatality or otherwise incapacitated). " + "**System resiliency**: Total loss of whole cyber-physical system, of which the software is a part. " + "**Environment**: Extreme externalities (immediate public health threat, environmental damage leading to small ecosystem collapse, etc.) imposed on other parties. " + "**Financial**: Social systems (elections, financial grid, etc.) supported by the software collapse. " + "**Psychological**: N/A.", +) + +CRITICAL_2 = DecisionPointValue( + name="Critical", + key="R", + definition="Any one or more of these conditions hold. " + "**Physical harm**: Loss of life (IEC 61508 Critical). " + "**Operator resiliency**: Actions that would keep the system in a safe state are beyond system operator capabilities, resulting in adverse conditions; OR great physical distress to system operators such that they cannot be expected to operate the system properly. " + "**System resiliency**: Parts of the cyber-physical system break; system’s ability to recover lost functionality remains intact. " + "**Environment**: Serious externalities (threat to life as well as property, widespread environmental damage, measurable public health risks, etc.) imposed on other parties. " + "**Financial**: Socio-technical system (elections, financial grid, etc.) of which the affected component is a part is actively destabilized and enters unsafe state. " + "**Psychological**: N/A.", +) + +MARGINAL_2 = DecisionPointValue( + name="Marginal", + key="M", + definition="Any one or more of these conditions hold. " + "**Physical harm**: Major injuries to one or more persons (IEC 61508 Marginal). " + "**Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the " + "vulnerability where operator actions would be within their capabilities but the actions require their full attention and effort; OR significant distraction or discomfort to operators; OR causes significant occupational safety hazard. " + "**System resiliency**: System safety margin effectively eliminated but no actual harm; OR failure of system functional capabilities that support safe operation. " + "**Environment**: Major externalities (property damage, environmental damage, etc.) imposed on other parties. " + "**Financial**: Financial losses that likely lead to bankruptcy of multiple persons. " + "**Psychological**: Widespread emotional or psychological harm, sufficient to be cause for counselling or therapy, to populations of people.", +) + + +NEGLIGIBLE_2 = DecisionPointValue( + name="Negligible", + key="N", + definition="Any one or more of these conditions hold. " + "**Physical harm**: Minor injuries at worst (IEC 61508 Negligible). " + "**Operator resiliency**: Requires action by system operator to maintain safe system state as a result of exploitation of the " + "vulnerability where operator actions would be well within expected operator abilities; OR causes a minor occupational safety hazard. " + "**System resiliency**: Small reduction in built-in system safety margins; OR small reduction in system functional capabilities that support safe operation. " + "**Environment**: Minor externalities (property damage, environmental damage, etc.) imposed on other parties. " + "**Financial**: Financial losses, which are not readily absorbable, to multiple persons. " + "**Psychological**: Emotional or psychological harm, sufficient to be cause for counselling or therapy, to multiple persons.", +) + SAFETY_IMPACT_1 = SsvcDecisionPoint( name="Safety Impact", @@ -165,8 +216,20 @@ ), ) +SAFETY_IMPACT_2_0_1 = SsvcDecisionPoint( + name="Safety Impact", + definition="The safety impact of the vulnerability. (based on IEC 61508 with modifications)", + key="SI", + version="2.0.1", + values=( + NEGLIGIBLE_2, + MARGINAL_2, + CRITICAL_2, + CATASTROPHIC_3, + ), +) -VERSIONS = (SAFETY_IMPACT_1, SAFETY_IMPACT_2) +VERSIONS = (SAFETY_IMPACT_1, SAFETY_IMPACT_2, SAFETY_IMPACT_2_0_1) LATEST = VERSIONS[-1] diff --git a/src/ssvc/decision_tables/ssvc/human_impact.py b/src/ssvc/decision_tables/ssvc/human_impact.py index 9a8fb056..c153a3ce 100644 --- a/src/ssvc/decision_tables/ssvc/human_impact.py +++ b/src/ssvc/decision_tables/ssvc/human_impact.py @@ -28,7 +28,7 @@ MISSION_IMPACT_2 as MissionImpact, ) from ssvc.decision_points.ssvc.safety_impact import ( - SAFETY_IMPACT_2 as SituatedSafetyImpact, + SAFETY_IMPACT_2_0_1 as SituatedSafetyImpact, ) from ssvc.decision_tables.base import DecisionTable from ssvc.namespaces import NameSpace @@ -48,22 +48,22 @@ }, outcome=HumanImpact.id, mapping=[ - {"ssvc:SI:2.0.0": "N", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "L"}, - {"ssvc:SI:2.0.0": "N", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "L"}, - {"ssvc:SI:2.0.0": "N", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "M"}, - {"ssvc:SI:2.0.0": "N", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH"}, - {"ssvc:SI:2.0.0": "M", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "L"}, - {"ssvc:SI:2.0.0": "M", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "L"}, - {"ssvc:SI:2.0.0": "M", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "M"}, - {"ssvc:SI:2.0.0": "M", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH"}, - {"ssvc:SI:2.0.0": "R", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "M"}, - {"ssvc:SI:2.0.0": "R", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "H"}, - {"ssvc:SI:2.0.0": "R", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "H"}, - {"ssvc:SI:2.0.0": "R", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH"}, - {"ssvc:SI:2.0.0": "C", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "VH"}, - {"ssvc:SI:2.0.0": "C", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "VH"}, - {"ssvc:SI:2.0.0": "C", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "VH"}, - {"ssvc:SI:2.0.0": "C", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH"}, + {"ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "L"}, + {"ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "L"}, + {"ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "M"}, + {"ssvc:SI:2.0.1": "N", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH"}, + {"ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "L"}, + {"ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "L"}, + {"ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "M"}, + {"ssvc:SI:2.0.1": "M", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH"}, + {"ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "M"}, + {"ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "H"}, + {"ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "H"}, + {"ssvc:SI:2.0.1": "R", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH"}, + {"ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "D", "ssvc:HI:2.0.2": "VH"}, + {"ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MSC", "ssvc:HI:2.0.2": "VH"}, + {"ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MEF", "ssvc:HI:2.0.2": "VH"}, + {"ssvc:SI:2.0.1": "C", "ssvc:MI:2.0.0": "MF", "ssvc:HI:2.0.2": "VH"}, ], ) diff --git a/src/ssvc/decision_tables/ssvc/public_safety_impact.py b/src/ssvc/decision_tables/ssvc/public_safety_impact.py index af6ffb6c..00b6d56b 100644 --- a/src/ssvc/decision_tables/ssvc/public_safety_impact.py +++ b/src/ssvc/decision_tables/ssvc/public_safety_impact.py @@ -25,7 +25,7 @@ from ssvc.decision_points.ssvc.public_safety_impact import ( PUBLIC_SAFETY_IMPACT_2_0_1 as PSI, ) -from ssvc.decision_points.ssvc.safety_impact import SAFETY_IMPACT_2 as SI +from ssvc.decision_points.ssvc.safety_impact import SAFETY_IMPACT_2_0_1 as SI from ssvc.decision_tables.base import DecisionTable from ssvc.namespaces import NameSpace @@ -57,10 +57,10 @@ decision_points={dp.id: dp for dp in [SI, PSI]}, outcome=PSI.id, mapping=[ - {"ssvc:SI:2.0.0": "N", "ssvc:PSI:2.0.1": "M"}, - {"ssvc:SI:2.0.0": "M", "ssvc:PSI:2.0.1": "S"}, - {"ssvc:SI:2.0.0": "R", "ssvc:PSI:2.0.1": "S"}, - {"ssvc:SI:2.0.0": "C", "ssvc:PSI:2.0.1": "S"}, + {"ssvc:SI:2.0.1": "N", "ssvc:PSI:2.0.1": "M"}, + {"ssvc:SI:2.0.1": "M", "ssvc:PSI:2.0.1": "S"}, + {"ssvc:SI:2.0.1": "R", "ssvc:PSI:2.0.1": "S"}, + {"ssvc:SI:2.0.1": "C", "ssvc:PSI:2.0.1": "S"}, ], )