Commit 447f4864 authored by Valerie Aurora's avatar Valerie Aurora
Browse files

Add use case to security profile and security profile to risk mappings

parent bd4edb5f
Loading
Loading
Loading
Loading
+19 −8
Original line number Diff line number Diff line
@@ -758,16 +758,27 @@ _Table C.5_

Requirements: CRYPT-1, CRYPT-2

### C.5. Mapping of use cases to risk factors
### C.5. Mapping of use cases to risk factors and security profiles

| Use case | Description                 | CFG | AUT | DAT | FUN | ADM | RDP | CNC |
|----------|-----------------------------|-----|-----|-----|-----|-----|-----|-----|
| UC-1     | Individual consumer         | 1   | 0   | 0   | 0   | 2   | 2   | 2   |
| UC-2     | Privacy conscious household | 1   | 0   | 1   | 1   | 1   | 2   | 2   |
| UC-3     | Journalist or activist      | 1   | 1   | 2   | 2   | 1   | 2   | 2   |
| UC-4     | Small organization          | 2   | 1   | 1   | 1   | 0   | 1   | 2   |
| Use case | Description                 | CFG | AUT | DAT | FUN | ADM | RDP | CNC | SP   |
|----------|-----------------------------|-----|-----|-----|-----|-----|-----|-----|------|
| UC-1     | Individual consumer         | 1   | 0   | 0   | 0   | 2   | 2   | 2   | SP-1 |
| UC-2     | Privacy conscious household | 1   | 0   | 1   | 1   | 1   | 2   | 2   | SP-2 |
| UC-3     | Journalist or activist      | 1   | 1   | 2   | 2   | 1   | 2   | 2   | SP-3 |
| UC-4     | Small organization          | 2   | 1   | 1   | 1   | 0   | 1   | 2   | SP-4 |

_Table C.TODO — Use cases mapped to risk factors_
_Table C.TODO — Use cases mapped to risk factors and security profiles_

### C.6. Mapping of security profiles to risk factors

| Security profile | Description                 | CFG | AUT | DAT | FUN | ADM | RDP | CNC |
|------------------|-----------------------------|-----|-----|-----|-----|-----|-----|-----|
| SP-1             | Individual consumer         | 1   | 0   | 0   | 0   | 2   | 2   | 2   |
| SP-2             | Privacy conscious household | 1   | 0   | 1   | 1   | 1   | 2   | 2   |
| SP-3             | Journalist or activist      | 1   | 1   | 2   | 2   | 1   | 2   | 2   |
| SP-4             | Small organization          | 2   | 1   | 1   | 1   | 0   | 1   | 2   |

_Table C.TODO — Security profiles mapped to risk factors_

# Annex D (informative): Change history