Commit 2e69cc32 authored by Giulio Di Clemente's avatar Giulio Di Clemente
Browse files

Edit EN-304-624.md Added Table B.12

parent 13303949

EN-304-624.md

+58 −0
Original line number Diff line number Diff line
@@ -2610,6 +2610,64 @@ The following figures present the impact factors evaluation for the 4 use cases 






<div align="center"> 



**Table B.12: Risk factor traceability**

</br>

<table style="border-collapse:collapse; width:100%;">

  <tr>

    <td colspan="2">Traceability</td>

    <td colspan="4">Assets classification by use cases</td>

  </tr>



  <tr>

    <th>Risk Factor</th>

    <th>Description</th>

    <th>Ent. / Private PKI</th>

    <th>Critical sector Private / Ent. PKI</th>

    <th>Public CA PKI</th>

    <th>C-ITS</th>

  </tr>



  <tr>

    <td>TRA-2</td>

    <td>The lack of Traceability of the events about the asset is not critical and does not compromise the trust provided by the PKI if forensic is needed.</td>

    <td>SYS03: Event log data  <br>  SYS13: Event log management function <br> DIS01: certificate store data <br> REG01: Subscriber data  </td>

    <td>REG01: Subscriber data </td>

    <td> </td>

    <td> TBD </td>    

  </tr>



  <tr>

    <td>TRA-1</td>

    <td>The lack of Traceability of the events about the asset is severe and compromise the trust provided by the PKI if forensic is needed.</td>

    <td> SYS01: System configuration data <br> SYS02: User account data <br> REG02: certificate request <br> REG12: Certificate request management function <br> GEN11: Key management function <br> DIS11: Certificate store management function <br> REV11: Revocation management function </td>

    <td> SYS03: Event log data  <br>  SYS13: Event log management function <br> DIS01: certificate store data <br> DIS11: Certificate store management function</td>

    <td> </td>

    <td> TBD </td>    

    

  </tr>



  <tr>

    <td>TRA-0</td>

    <td>The lack of Traceability of the events about the asset impossible and compromise the trust provide by the PKI if forensic is needed.</td>

    <td> GEN01: CA data <br> GEN02: Subject key data <br> GEN12: Certificate generation function <br> REV11: Revocation management function </td>

    <td> SYS01: System configuration data <br> SYS02: User account data <br> REG02: Certificate request <br> GEN01: CA key data <br> GEN02: Subject key data <br> REG12: Certificate request management function <br> GEN11: Key management function <br> GEN12: Certificate generation function <br> REV11: Revocation management function </td>

    <td> SYS03: Event log data <br> SYS13: event log management function <br> DIS01: Certificate store data <br> SYS01: System configuration data <br> SYS02: User account data  <br> REG01: Subscriber data <br> REG02: Certificate request <br> STA01: Certificate status data <br> GEN01: CA key data <br> GEN02: Subject key data <br> REG12: Certificate request management function <br> GEN11: Key management function <br> GEN12: Certificate generation function <br> DIS11: Certificate store management function <br> REV11: Revocation management function </td>

    <td> TBD </td>

    

  </tr>









</table>

</div>













## B.4 Evaluate Risks