@@ -437,6 +437,15 @@ See [\[i.3\]](#_ref_i.3) for formal definitions of micro, small, and medium-size
* Critical for business operations
* Needs to inspect traffic extensively for security
***UC-6** Enterprise with independent VPN infrastructure
* All enterprise users with limited technical knowledge
* Desires partial or full time remote access to enterprise network
* Accesses one or some remote networks via enterprise gateway
* Configuration managed by administrators, pushed via gateway and/or third party solution
* Device managed by administrators, including VPN client lifecycle (install, update, etc....), via dedicated tools
* Most of security is managed by other components (gateway for network, local EDR for endpoint security, ....)
* Does not see VPN as critical for core business operations
# 5 Requirements specifications
::include{file=clauses/5.Requirements.md}
@@ -615,15 +624,15 @@ Rationale: Different connectivity requirements create different risks and mitiga
***[CON-1]** Usage is one or more endpoints connecting to other endpoints or hosts via a private network
***[CON-2]** Usage is multiple endpoints connecting to each other via a private network, in addition to connecting to a public network
### C.2.11 RF-PER: Consequences of Personal Data compromise
### C.2.11 RF-PER: Consequences of Protected Data compromise
Description: What the consequences of an attacker acquiring Personal Data via the product are.
Description: What the consequences of an attacker acquiring Protected Data (personal or enterprise) via the product are.
Rationale: Different consequences change the impact of compromise of Personal Data stored or transmitted by the product.
Rationale: Different consequences change the impact of compromise of Protected Data stored or transmitted by the product.
***[PER-0]** Usage is no or low consequences for compromise of Personal Data stored or transmitted by the product
***[PER-1]** Usage is moderate consequences for compromise of Personal Data stored or transmitted by the product, e.g. financial or reputational loss
***[PER-2]** Foreseeable use is high consequences for compromise of Personal Data stored or transmitted by the product, e.g. loss of life or human rights
***[PER-0]** Usage is no or low consequences for compromise of Protected Data stored or transmitted by the product
***[PER-1]** Usage is moderate consequences for compromise of Protected Data stored or transmitted by the product, e.g. financial or reputational loss, or disclosure of private enterprise data
***[PER-2]** Foreseeable use is high consequences for compromise of Protected Data stored or transmitted by the product, e.g. loss of life or human rights, or disclosure of highly confidential enterprise data
