@@ -616,26 +616,6 @@ Rationale: More users with physical access to manufacturer infrastructure increa
***[RDP-1]** Manufacturer has direct access to all remote data processing infrastructure
***[RDP-2]** Manufacturer infrastructure in a multi-tenant SaaS system
### C.2.8 RF-LDS Data stored locally by end-user software
Description: How much sensitive information about the user/usage of the VPN is saved to the end-user's local system (such as local logs).
Rationale: The greater the information saved, the higher the odds that an attacker can reconstruct user behaviour.
***[LDS-0]** Production builds of end-user software do not save any information, such as logs
***[LDS-1]** Production builds of end-user software save only minimal information necessary for security purposes, such as configuration changes
***[LDS-2]** Production builds of end-user software log sensitive information about the user and/or user behavior
### C.2.9 RF-RDS: Data stored outside end-user software
Description: How much sensitive information about the user/usage of the VPN is saved outside of the end-user's local system (such as remote logs).
Rationale: The greater the information saved, the higher the odds that an attacker can reconstruct user behaviour.
***[RDS-0]** Production instances of VPN infrastructure do not save any remote information, such as logs
***[RDS-1]** Production instances of VPN infrastructure remotely save only minimal information necessary for security purposes, such as configuration changes
***[RDS-2]** Production instances of VPN infrastructure log sensitive information about the user and/or user behavior
## C.3 Assumptions
**[AS-PP]:** The platform the product is running on is trustworthy.
@@ -674,8 +654,8 @@ For each threat, both likelihood and impact must be Low before the risk is consi
The risk factors by type are:
* Likelihood: CFG, AUT, ADM, LDS
* Impact: DAT, FUN, RDS, RDP
* Likelihood: CFG, AUT, ADM, RDP
* Impact: DAT, FUN
The mitigations that reduce risk by type are:
@@ -699,8 +679,8 @@ The mitigations that reduce risk by type are:
**[TH-EPC]:** Attacker may gain access to an endpoint, exposing traffic, private network, or PII.
