What MITRE ATT&CK ICS T0816: Device Restart/Shutdown (Inhibit Response Function) requires
MITRE ATT&CK ICS T0816 covers adversary forced restart or shutdown of ICS devices to disrupt process control. Industroyer included device restart modules. Modern threats target PLC controllers, RTU, IED relay devices via vendor protocols. Compliance: NERC CIP-007 (System Security Management), NIST SP 800-82 Rev 3, IEC 62443-3-3, IEC 61850 substation comm.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T0816/
SHA-256 integrity: a8215a6335dd9061cc8b249c596689af04a48e208d894da93361cf499563974e
Primary Citations — 6 traced to source
- MITRE ATT&CK ICS T0816: Device Restart/Shutdown (https://attack.mitre.org/techniques/T0816/)
- NERC CIP-007-6: System Security Management
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.