@@ -288,7 +288,7 @@ After establishing a tunnel, the VPN client changes configuration of the host de
### 4.3.3 VPN server, VPN gateway
A VPN server is responsible for maintaining tunnels between VPN clients and the traffic destinations they are requesting.
A VPN server is responsible for maintaining tunnels between VPN clients and the traffic destinations the clients are requesting.
## 4.4 Operational Environment
@@ -634,7 +634,7 @@ Rationale: Different consequences change the impact of compromise of Protected D
### C.4.1 General
The approach to listing threats is to separate them by mitigation so that they may be associated with risk factors more directly.
The approach to listing threats is to separate by mitigation so that each may be associated with risk factors more directly.
For the purposes of the list of threats, the product includes:
@@ -648,7 +648,7 @@ Risk factor levels for each security profile are determined by reading the descr
For each threat, a formula based on the risk factor levels is used to calculate the Likelihood and Impact of the threat, on a scale of Low, Medium, and High.
For each threat, both likelihood and impact must be Low before the risk is considered sufficiently mitigated. If the calculated levels are not already Low, then mitigations must be applied until they are both Low. The mitigation sets that will accomplish this are listed in each threat description.
For each threat, both likelihood and impact must be Low before the risk is considered sufficiently mitigated. If the calculated levels are not already Low, then mitigations must be applied until both likelihood and impact are Low. The mitigation sets that will accomplish this are listed in each threat description.
