Verified Commit 657293d6 authored by Valerie Aurora's avatar Valerie Aurora Committed by Aki Braun
Browse files

Annex C.2.7: Improve rationale for RDPS factor

closes #368
parent 7722b5b6
Loading
Loading
Loading
Loading
+2 −2
Original line number Diff line number Diff line
@@ -729,10 +729,10 @@ Rationale: Skilled, fully resourced administration allows proactive risk assessm

Description: Exposure of manufacturer infrastructure responsible for essential functions of the product

Rationale: More users with physical access to manufacturer infrastructure increases likelihood of an attack via hardware interfaces.
Rationale: Rationale: More users accessing manufacturer infrastructure increases likelihood of an attack via hardware interfaces.

* **[RDP-0]** Manufacturer does not provide any remote data processing
* **[RDP-1]** Manufacturer provides RDPS via self-hosted infrastructure.
* **[RDP-1]** Manufacturer provides RDPS via self-hosted infrastructure
* **[RDP-2]** Manufacturer infrastructure located in a multi-tenant SaaS system

### C.2.8 RF-DNC: Difficulty of network configuration