safemode.space
← MITRE ATT&CK ICS
T0813

Denial of Control

Description

Adversaries may cause a denial of control to temporarily prevent operators and engineers from interacting with process controls. An adversary may attempt to deny process control access to cause a temporary loss of communication with the control device or to prevent operator adjustment of process controls. An affected process may still be operating during the period of control loss, but not necessarily in a desired state. (Citation: Corero) (Citation: Michael J. Assante and Robert M. Lee) (Citation: Tyson Macaulay) In the 2017 Dallas Siren incident operators were unable to disable the false alarms from the Office of Emergency Management headquarters. (Citation: Mark Loveless April 2017)

Mapped SPARTA techniques

1 techniques

  • IMP-0002DisruptionST0009
    addresses
    high

    T0813 'Denial of Control' is in MITRE ICS impact tactic and addresses temporary loss of operator ability to interact with process controls; SPARTA IMP-0002 'Disruption' is the parent-level spacecraft equivalent (temporarily impair use/access without physical damage). Tactic and activity align directly.

Cite as SafeMode Space, mitre-attack-ics T0813.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.