← SCP Cost Explorer Read on SCP Wiki ↗
SCP-3101 Keter ~ medium confidence
SCP-3101
Expected annual
$20.1M
One-time setup
$154.2M
Annual recurring
$16.4M
Personnel
71
One-time preparedness and potential rebuild dominate costs (~$154M one-time in the mid estimate), with ongoing staffing, monitoring, audit, and opportunity costs driving ~ $16.4M/yr recurring; major incidents can add multi-million expenses and catastrophic rebuilds add ~ $110M+ in a single year.
🏗️ One-Time Capital Costs Total: $154.2M
Facilities $110.8M
[#3, #15, #30] Midpoint of Room E2 upgrade, high-availability power/cooling installations, and worst-case full rebuild program (used as the programmatic one-time facility-level allocation).
Network Segmentation Capex $11.0M
[#6] Midpoint of program-wide network segmentation / data-diode / hardened-router program (program-wide estimate used).
Long Term Excise R And D Program $10.5M
[#23] Multi-year program to design kill-switch/sanitization/hardware replacements (midpoint of range, booked as one-time program allocation).
Manual Records Audit Initial $7.0M
[#8] Initial large-scale manual audit of potentially affected documents (midpoint of 4M-10M guidance used as representative major audit).
Insurance Reserve $5.5M
[#22] One-time recommended contingency fund / insurance reserve (midpoint).
Forensic Cleanup Capacity $2.4M
[#5] One-time capacity purchase to allow forensic imaging/replacement for ~1,000 endpoints (midpoint per-endpoint cost x 1,000 as a representative cleanup wave).
Reverse Engineering Program $1.6M
[#10] One-time reverse-engineering program / contracting and tooling (midpoint of range).
External Consultant Engagement $1.1M
[#25] Representative one-time contractor engagement (midpoint of range) to be used for complex analysis when required.
Backup Cold Storage Setup $1.1M
[#9] One-time setup of cryptographically-signed, air-gapped archives and geographically separated vaults (midpoint).
Hardware Inventory Purchase $1.1M
[#27] Upfront purchase of spare servers, NICs, storage arrays and replacement workstations (midpoint).
Physical Destruction Capacity $1.1M
[#13] One-time capacity/reserve for physical destruction/decommissioning (server-farm scale midpoint).
Data Signing Infrastructure $450K
[#16] One-time implementation of enterprise signing/PKI tooling (midpoint of one-time range).
Cryptographic Key Rotation $275K
[#26] One-time enterprise key/cert rotation effort (midpoint of range).
Sterile Image Development $225K
[#11] One-time design and tooling for sterile rebuild images (midpoint of design/tooling range).
Equipment $0
[]
Initial Research And Lab Setup $0
[]
🔄 Annual Recurring Costs Total: $16.4M/yr
Staff Wages $7.6M/yr
[#2, #4] Permanent payroll & benefits for standing teams: MTF Lambda-12/Mu-4 rotations and dedicated Site-66 guard/containment tech shifts (midpoint aggregate of ranges).
Research And Monitoring $5.8M/yr
[#7, #12, #28, #29, #20, #18, #19, #24] Ongoing network monitoring/EDR/SIEM, red-team/pen-tests, long-term log retention, insider-risk programs, training & certification, Ethics oversight, staff counseling programs, and estimated opportunity costs due to restricted productivity (midpoint sums).
Cover Story And Legal $1.1M/yr
[#17, #21] Legal, counter-intel, PR and cover-story operations baseline (legal staffing and a small emergency PR/cover reserve; midpoint).
Facilities Maintenance $710K/yr
[#3, #9, #15, #27] Annual maintenance, utilities and media rotation for Room E2, backup vaults, high-availability power/cooling, and replenishment of spare-hardware stock (midpoint sum).
Manual Records Audit Ongoing $600K/yr
[#8] Ongoing smaller-scale document verification and chain-of-custody processes (midpoint of recurring range).
Endpoint Reimage Operations $150K/yr
[#11] Baseline recurring budget for occasional mass reimages (assumes modest yearly reimage activity at per-endpoint midrange).
Hardware Replenishment $125K/yr
[#27] Annual replenishment budget for defensive hardware/spare parts (midpoint).
Cryptographic Operations $125K/yr
[#16] Ongoing CA/cryptographic signing operations and PKI maintenance (midpoint).
Logistics And Transport $100K/yr
[#14] Recurring secure transport/armored transfer operations baseline (multiple small operations per year).
Decommissioning Fund $50K/yr
[#13] Small recurring reserve for decommission/destruction operations as devices are retired or found irredeemably compromised.
Supplies And Consumables $0/yr
[]
⚡ Cost Scenarios
📊 Baseline (baseline) $16.4M/yr
73.0% probability / year
Normal year with no major incidents: baseline staffing, monitoring, audits, and maintenance only.
no_major_incidents routine_operations
🚨 Minor Incident $22.3M/yr
25.0% probability / year +$6.0M vs baseline
Localized network infection requiring MTF activation, forensic cleanup of ~1,000 endpoints, targeted manual audits, consultant engagement, and PR/legal response.
localized_network_infection multiple_endpoints_compromised incident_response_activation
🚨 Catastrophic Rebuild $126.4M/yr
2.0% probability / year +$110.0M vs baseline
Worst-case: SCP-3101 inseparable from IntSCPFN requiring multi-site full rebuild/wipe and major programmatic expenditures.
full_network_compromise irreversible_infection multi-site_rebuild
👥 Personnel 71 total
Role Count Notes
MTF Operator (Lambda-12) 36 [#2] Tactical operators forming Lambda-12 rotations (midpoint staffing estimate).
InfoSec / Network Engineer (Mu-4) 12 [#2] Mu-4 network security staff and analysts (midpoint).
Senior Cyber Staff 6 [#2] Senior cyber/forensics personnel (midpoint).
Site Security Officer / Guard 7 [#4] Site-66 dedicated guards (part of continuous guard coverage).
Containment Technician 3 [#4] Containment techs assigned to Room E2 shifts.
On-call Supervisor / Site Supervisor 1 [#4] On-call supervisory role for containment shifts.
Administrative Staff 6 [#2] Administrative/support staff for scheduling, records, and coordination (allocated from payroll budget).
📋 Confidence Notes
Estimates are based on midpoints of wide ranges provided in analyst notes; staffing and recurring monitoring costs are reasonably well-defined, but incident frequency, scope of audits, and scale of a rebuild are highly uncertain, producing moderate confidence.
← SCP-3100 ↑ All SCPs SCP-3102 →