@@ -643,7 +643,7 @@ Rationale: Different consequences change the impact of compromise of Personal Da
**[AS-LR]:** An attacker will use limited resources in proportion to the value of the assets of the product in each security profile.
## C.4 Threats and risk assessment of threats
## C.4 Threats and security analysis
### C.4.1 General
@@ -655,7 +655,7 @@ For the purposes of the list of threats, the product includes:
* VPN software operating as a VPN server on any hardware
* software used to manage VPN network topology
### C.4.2 Risk assessment methodology
### C.4.2 Security analysis methodology
Risk factor levels for each security profile are determined by reading the descriptions for each risk factor level and choosing the one that most accurately represents the highest risk for the intended purpose and reasonably foreseeable use and misuse of the product, as specified by the manufacturer.
