Die Anschläge in New York und Washington am 11

perpetrator groups
, their typical motives and possible 
modes of behaviour
(cf. p. 47). Acts of negligence are not 
included in this assessment, as they fall under hazards 
relating to human error and technical failure (section 2.1.2.). 
The extent to which potential perpetrators are actually able to 
cause serious damage and where such damage is possible 
and probable must be examined in the course of risk 
assessment
, taking into account the points of danger 
identified in the company’s environment (cf. “Risk 
management” section of the checklist, Appendix 1). The risk 
categories contain a number of assumptions which are 
intended to enable allocation to the determined threat level. 
These assumptions primarily concern 
!
!
!
!
possible background circumstances relating to the offence 
possible motives and typical modes of action
resources which are likely to be employed 
the level of criminal energy to be expected. 

---

- 20 - 
Interference options can also be identified as a means of 
differentiation, establishing a link between perpetrators, their 
motivations and the options for action offered by the nature 
of the infrastructures concerned. The following interference 
options 
are conceivable in principle, for example:
 
Deliberate maloperation 
This option covers all intentional actions whereby a 
malfunction could be triggered by simple means, without the 
use of any tools or resources. Such actions could include, for 
example: switching facilities on/off, opening/closing closures 
in piping systems (valves/gates), turning handwheels and 
actuating levers in the course of a process. Deliberate 
maloperation can be carried out by a company’s own 
personnel or by persons from outside the company. 
Interference options 
Manipulation 
Manipulation involves deliberately altering or adjusting parts 
of a system with the aim of inducing a critical status in the 
plant concerned. Possible examples here include 
programming control systems incorrectly, maladjusting 
measuring facilities, suppressing process signals, fault 
signals or alarms or shutting down protective systems. 
Insiders with a precise knowledge of the facilities are the 
primary suspects here.