Control SuspendUnreliableController
URI: SuspendUnreliableController
Package: IoT
Description: The controller may be temporarily taken out of service to prevent unreliable behaviour that may threaten safety in the physical environment where it operates.
A Thing that is able to affect aspects of the physical environment in ways defined by data sent to it. A Controller has no console allowing login, but it may have an interface allowing some interaction with a human user. |
The IoT controller device Controller can be disabled if it becomes unreliable, to prevent it causing problems in the physical environment where it operates. This strategy represents a contingency plan, which can be used to reduce risk from some threats. However, it will trigger threats representing the resulting loss of availability. |
|
The IoT controller device Controller has been disabled when it becomes unreliable, to prevent it causing problems in the physical environment where it operates. This strategy represents activation of a contingency plan at runtime, and can be selected to discover what effect this would have on risk levels, allowing this to be used for decision support calculations. To activate it at runtime, signal user HostManager who is responsible for managing the device. The Disabled Host control should be deselected only when the host has been restarted. |
|
This strategy represents a state in which IoT controller device Controller is suspended due to using a contingency plan. It is used as a trigger for threats representing side effects, and should not be used for any other purpose. |