SCP-6079 Unknown ? low confidence
SCP-6079
Expected annual
$22.3M
One-time setup
$91.2M
Annual recurring
$19.9M
Personnel
31
Initial one-time mitigation and rebuild options are large (dominant costs are potential site rebuilds and a long-term redundancy program), while annual costs are driven by research staffing, warranties/maintenance, insurance, and the latent risk of productivity loss during incidents.
🏗️ One-Time Capital Costs Total: $91.2M
Site Rebuilds Worst Case $75.0M
[#28] Worst-case decommission / full rebuild costs for affected sites (catastrophic scenario contingency).
Redundancy Program Initial $5.5M
[#27] Initial program costs to harden/replicate critical systems across sites (organizational program initiation).
Equipment $5.2M
[#4, #5, #6, #7, #10, #15, #23] Air-gapped sandbox hardware, enterprise server/SAN replacements & spares, offline backup systems, data-recovery/forensic toolset, manual/analog initial conversion hardware, specialized software initial licenses, communication equipment.
Public Relations Initial $1.1M
[#19] Initial cover-story operations, controlled downtime messaging, local contracts or reimbursements to mask outages.
Contingency Fund $1.0M
[#25] Incident contingency pool for unanticipated costs (recommended ~15–25% of initial incident budget).
Initial Research And Lab Setup $950K
[#17, #21] Quarantine/auditing build-out and controlled experiments/replication hardware for anomaly analysis.
External Contractors $900K
[#2] Firmware/embedded forensics, SAN engineers, electrical/hardware reverse-engineering contractors (per incident wave).
Insurance One Time $500K
[#26] One-time insurance/indemnity/off-books expense provisioning.
Facilities $300K
[#3] Dedicated air-gapped investigation lab build-out (Faraday shielding, isolated HVAC, power, access control).
Network Lockdown Initial $300K
[#18] Emergency one-time IT work: access-control changes, zero-trust reconfiguration, emergency firewall/routing work.
Legal Initial $300K
[#20] Legal counsel, NDAs, indemnities and one-time legal work tied to the incident.
Secure Media Destruction $90K
[#13] Secure destruction and certified disposal of compromised media / e-waste.
Incident Documentation Initial $30K
[#22] One-time setup for manual logging, chain-of-custody forms, secure film/photography and tamper-evident archival storage setup.
🔄 Annual Recurring Costs Total: $19.9M/yr
Operational Productivity Loss $10.5M/yr
[#11] Recurring/acute productivity losses during incident periods (large hidden cost during recovery windows).
Staff Wages $3.6M/yr
[#9, #16] Ongoing research & anomaly analysis team salaries (permanent hires) and baseline security staffing uplift included in annual personnel costs.
Incident Response Team Spike $1.8M/yr
[#1] Emergency incident-response team mobilization costs (12–20 people fully burdened at $180k–$250k/yr while active; represented as an annualized potential spike).
Insurance And Offbooks $1.1M/yr
[#26] Recurring insurance premiums, indemnities, and soft-costs associated with secrecy/third-party arrangements.
Research And Monitoring $785K/yr
[#15, #17, #18] Ongoing software/tool maintenance, auditing/quarantine operations, and identity/network maintenance costs.
Supplies And Consumables $590K/yr
[#10, #12, #22, #23] Consumables for manual/analog operations, generator fuel/utilities while active, archival storage fees, and comms airtime/maintenance.
Facilities Maintenance $500K/yr
[#27] Ongoing maintenance for redundancy program and facilities hardening (annual program upkeep).
Cover Story And Legal $425K/yr
[#19, #20] Ongoing PR/cover-story operations and legal/compliance retainers.
Hardware Warranty And Service Contracts $300K/yr
[#14] Annual service contracts and extended warranties for replacement hardware (15–25% of replacement costs assumed).
Logistics And Transport $250K/yr
[#8] Secure physical transfer logistics (armored couriers / secure transport) annual contracts.
Psychological Support $110K/yr
[#24] Ongoing counseling, HR overhead, retraining and staff management related to incident stress.
Cost Scenarios
📊 Baseline (baseline) $19.9M/yr
69.0% probability / year
Annual operations with current mitigations and routine maintenance; assumes no major incident beyond typical small disturbances.
routine operations no major incidents
🚨 Minor Incident $23.7M/yr
25.0% probability / year +$3.8M vs baseline
Localized, recoverable incident requiring short-term mobilization, contractors, and limited hardware replacements; operations largely restored within months.
localized server compromise short-term physical transfers limited data loss
🚨 Major Breach $31.9M/yr
5.0% probability / year +$12.0M vs baseline
Significant multi-site outage with substantial hardware replacement and protracted manual operations; partial productivity loss across sites.
partial site data loss prolonged manual operations significant hardware replacement
🚨 Catastrophic Breach $99.9M/yr
1.0% probability / year +$80.0M vs baseline
Worst-case: multiple full site rebuilds, protracted multi-year productivity loss, and extensive covert/cover operations.
full site rebuilds long-term productivity loss extensive cover operations
👥 Personnel 31 total
Role Count Notes
Research Scientist 10 [#16] Long-term research & anomaly analysis team (8–12 FTEs; midpoint used).
Security Officer / MTF Agent 21 [#9] Increased physical security staffing for air-gapped labs, escorts and guard detail across three sites (aggregate estimate based on 4–10 guards/site range).
📋 Confidence Notes
Estimates are low-confidence due to large, subjective ranges in the analyst notes, many incident-dependent one-off costs, and dependence on uncertain variables (incident frequency, extent of data loss, and need for full site rebuilds).
← SCP-6078 ↑ All SCPs SCP-6080 →