Commit 12c35042 authored by Giulio Di Clemente's avatar Giulio Di Clemente
Browse files

Edit EN-304-624.md Table B.14, Risk evaluation part 2

parent c0386abd

EN-304-624.md

+281 −0
Original line number Diff line number Diff line
@@ -2172,6 +2172,287 @@ The risk are then calculated and their applicability defined using the matrixes 


























































<div align="center">



**Table B.14: Risk evaluation part 2**

</br>

<table style="border-collapse:collapse; width:100%;">

  <tr>

    <td colspan="3">Threat</td>

    <td colspan="6">Risk-factor</td>

    <td colspan="1">Value UC1</td>

    <td colspan="1">Value UC2</td>

    <td colspan="1">Value UC3</td>

    <td colspan="1">Value UC4</td>

    <td colspan="6">Value UC4</td>

  </tr>



  <tr>

    <th>ID</th>

    <th>Description</th>

    <th>Asset</th>

    <th>Impact Type</th>

    <th>Value UC1</th>

    <th>Value UC2</th>

    <th>Value UC3</th>

    <th>Value UC4</th>

    <th>Likelihood Type</th>

    <th>Value UC1</th>

    <th>Value UC2</th>

    <th>Value UC3</th>

    <th>Value UC4</th>

    <th>Risk Value UC1</th>

    <th>Risk Value UC2</th>

    <th>Risk Value UC3</th>

    <th>Risk Value UC4</th>

    <th>UC / App.</th>

  </tr>



  <tr>

    <td>T_SYS09</td>

    <td>Accessing user authentication credentials or access rights via an unprotected user account management function </td>

    <td>SYS12 \ PKI Services</td>

    <td>Integrity, Availability, Confidentiality</td>

    <td>AVA-2, INT-0, TRA-2</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>AVA-1, INT-0, TRA-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>Medium</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>





  <tr>

    <td>T_SYS10</td>

    <td>Accessing event logs via an unprotected event log management function </td>

    <td>SYS13 \ PKI Services</td>

    <td>Integrity, Availability, Confidentiality</td>

    <td>AVA-2, INT-0, TRA-2</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>AVA-1, INT-0, TRA-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>Medium</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>







  <tr>

    <td>T_SYS11</td>

    <td>Disabling or rolling back software updates via an unprotected software update function </td>

    <td>SYS14 \ PKI Services</td>

    <td>Integrity, Availability, Confidentiality</td>

    <td>AVA-2, INT-0, TRA-2</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>AVA-1, INT-0, TRA-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td>

    <td>NA</td>

    <td>Medium</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>











  <tr>

    <td>T_REG01</td>

    <td>Modifying information in unprotected subscriber data </td>

    <td>REG01</td>

    <td>Integrity, Availability</td>

    <td>AVA-2, INT-2</td>

    <td>AVA-1, INT-1</td>

    <td>AVA-1, INT-1</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td>

    <td>NA</td>

    <td>Low</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC2, UC3</td>

  </tr>









  <tr>

    <td>T_REG02</td>

    <td>Disclosing sensitive information in unprotected subscriber data </td>

    <td>REG01</td>

    <td>Confidentiality</td>

    <td>CON-2/td>

    <td>CON-2</td>

    <td>CON-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td>

    <td>NA</td>

    <td>Low</td>

    <td>Medium</td>

    <td>High</td>

    <td>NA</td>

    <td>UC2, UC3</td>

  </tr>







  <tr>

    <td>T_REG03</td>

    <td>Modifying an unprotected certificate request </td>

    <td>REG02</td>

    <td>Integrity, Availability</td>

    <td>AVA-2, INT-1</td>

    <td>AVA-1, INT-0</td>

    <td>AVA-1, INT-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td>

    <td>NA</td>

    <td>Low</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC2, UC3</td>

  </tr>







  <tr>

    <td>T_REG04</td>

    <td>Accessing via an unprotected subscriber management function </td>

    <td>REG11 \ PKI Services</td>

    <td>Integrity, Traceability</td>

    <td>AVA-2, INT-0, TRA-2</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>AVA-1, INT-0, TRA-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>



  <tr>

    <td>T_REG05</td>

    <td>Approving a certificate request via an unprotected certificate request management function </td>

    <td>REG12 \ PKI Services</td>

    <td>Integrity, Availability, Traceability</td>

    <td>AVA-2, INT-0, TRA-2</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>AVA-1, INT-0, TRA-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>







</table>

</div>



































































# Annex C (Informative) Relationship between the present document and any related ETSI standards (if any, e.g. EN 303 645)



Add reference to mappings for eIDAS and C-ITS from each of ETSI TC ESI and ETSI TC ITS (WG5)