SCP-8846 None1 ~ medium confidence
SCP-8846
Expected annual
$1.0M
One-time setup
$3.3M
Annual recurring
$982K
Personnel
4
One-time implementation and contingency costs are estimated at approximately $3.29M driven by system relocation, contingency reserves, and initial hardening; ongoing annual operations and staffing run about $982k/year, driven by an on-call IRT, program governance, and insurance/legal/monitoring retainers.
🏗️ One-Time Capital Costs Total: $3.3M
Catastrophic Response Reserve $2.0M
[#19] Contingency reserve for wide-scale ACS corruption and major rebuilds/recovery (institutional/national scale contingency).
Facilities $312K
[#5, #10, #20] Includes secure lab/SCIF relocation and physical lab outfitting (Faraday/shielding) and signage costs.
Initial Research And Lab Setup $250K
[#9] External expert research/modeling project to analyze recursive behavior and propose safe computational models.
Reconstruction And Replacement Reserve $250K
[#18] Initial reserve for rebuilding corrupted files, datasets and validation after limited corruption events.
Equipment $200K
[#3, #4, #14, #15, #21] Tape/WORM or immutable backup hardware, HSM and related hardware, SIEM initial deployment, multi-format archival hardware, and rollback tooling development.
Software Patch And Ui Lock $125K
[#1] ACS software patch, UI lock, testing and staged rollout to remove/disable the unsupported classification and harden classification UI.
Access Control Implementation $75K
[#11] Initial RBAC implementation, MFA, just-in-time elevation tooling and policy deployment.
Database Schema Migration $60K
[#2] DB schema changes, constraints, transactional rollbacks, migration of existing records, and DBA labor.
Insider Threat Vetting $20K
[#12] Initial enhanced background checks/psych evaluations for key classification administrators.
🔄 Annual Recurring Costs Total: $982K/yr
Staff Wages $450K/yr
[#6] IRT full-time staffing and ongoing training/exercises (approx. 4 FTEs including lead + technicians).
Governance And Program Management $120K/yr
[#24] Program manager and small governance/admin overhead to coordinate containment controls and policy updates.
Insider Threat Monitoring $100K/yr
[#12] Ongoing continuous monitoring program, behavioral analytics and personnel monitoring across administrators.
Cover Story And Legal $50K/yr
[#16] Legal/PR retainer for disclosure control, FOIA/legal suppression planning and rapid-response counsel.
On Call Activation Pool $50K/yr
[#7] Budget reserved for emergency activations, travel, overtime and contractor surge.
Facilities Maintenance $44K/yr
[#10, #15, #20] Operations for hardened server facility, archival vault maintenance, and signage refreshes.
Insurance Premium $40K/yr
[#17] Cyber/operational insurance premium to cover reconstruction, liability and response costs.
Training And Exercises $30K/yr
[#13] Regular mandatory staff training, tabletop exercises and NARCISSUS protocol drills.
Forensic And Destruction Retainer $25K/yr
[#8] Retainer for digital forensics and secure destruction vendors.
Access Control Audits $25K/yr
[#11] Quarterly audits and access reviews to enforce RBAC and just-in-time access rules.
Siem And Monitoring $15K/yr
[#14] SIEM/real-time monitoring, alerting, log retention and automated rollback triggers operations.
Compliance And Certification $15K/yr
[#23] Ongoing audits, facility certifications and third-party compliance costs.
Supplies And Consumables $10K/yr
[#22] Consumables, quarantine packaging, secure shipping containers and replacement hardware stock.
Hsm Key Management Ops $5K/yr
[#4] Ongoing HSM/PKI operations, key rotation and custodian time.
Archival Maintenance $3K/yr
[#15] Maintenance and vault costs for analog/microfilm offline copies.
Research And Monitoring $0/yr
[]
Logistics And Transport $0/yr
[]
Cost Scenarios
📊 Baseline (baseline) $982K/yr
93.9% probability / year
Normal year with no major incidents; routine operations, monitoring, audits and training only.
no incident routine operations only
🚨 Minor Incident $1.0M/yr
5.0% probability / year +$40K vs baseline
Limited misuse or a small-scale corruption event contained quickly with retainer services and modest reconstruction.
single contaminated recordset forensic engagement + limited legal response
🚨 Major Incident $1.8M/yr
1.0% probability / year +$850K vs baseline
Significant corruption affecting multiple projects requiring substantial reconstruction, broad forensics, legal/PR campaign and staffing surge.
multi-project corruption extended rebuild and legal/PR campaign
🚨 Catastrophic Breach $11.0M/yr
0.1% probability / year +$10.0M vs baseline
Wide-scale recursive corruption of ACS requiring institutional/national rebuilds, major legal exposure and multi-year recovery.
ACS-wide recursive corruption mass data loss and regulatory/legal escalation
👥 Personnel 4 total
Role Count Notes
Incident Response Team Lead 1 [#6] Full-time team lead for NARCISSUS protocol and incident coordination (included in staff_wages).
Incident Response Technician 3 [#6] Technicians for system isolation, media handling and on-call response (included in staff_wages).
📋 Confidence Notes
Medium confidence: analyst notes provide many concrete ranges for technical remediation and recurring costs, but the size/frequency of reconstruction and catastrophic events is highly uncertain and ranges span orders of magnitude.
← SCP-8845 ↑ All SCPs SCP-8847 →