Commit 826f28d8 authored by Giulio Di Clemente's avatar Giulio Di Clemente
Browse files

Edit EN-304-624.md Section B.3 initial update

parent 6861e8f3

EN-304-624.md

+81 −1
Original line number Diff line number Diff line
@@ -2372,12 +2372,92 @@ Risk, as per TS 102 165-1 [] is calculated as the product of impact and likeliho 
</div>





### Operational security



<div align="center">



**Table B.7: Risk factor OPS**

</br>

<table style="border-collapse:collapse; width:100%; font-family:Arial; font-size:0.9em;">

  <tr style="background:#1F3864; color:white; font-weight:bold;">

    <th style="padding:8px; border:1px solid #ccc;">Risk factor</th>

    <th style="padding:8px; border:1px solid #ccc;">Description</th>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">OPS-2</td>

    <td style="padding:7px; border:1px solid #ccc; background:#00B050; color:green; font-weight:bold; text-align:center;">Enhanced policies and procedures with strict compliance regime (ETSI 319 401 or better)</td>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">OPS-1</td>

    <td style="padding:7px; border:1px solid #ccc; background:#FFD700; color:yellow; font-weight:bold; text-align:center;">Standard enterprise policies and procedures with moderate compliance regime</td>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">OPS-0</td>

    <td style="padding:7px; border:1px solid #ccc; background:#FF0000; color:red; font-weight:bold; text-align:center;">Limited policied and procedures</td>

  </tr>

</table>

</div>



<div align="center">



**Table B.9: Risk factor availability**

</br>

<table style="border-collapse:collapse; width:100%; font-family:Arial; font-size:0.9em;">

  <tr style="background:#1F3864; color:white; font-weight:bold;">

    <th style="padding:8px; border:1px solid #ccc;">Availability</th>

    <th style="padding:8px; border:1px solid #ccc;">Asset classification by use cases</th>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">Risk Factor | Description</td>

    <td style="padding:7px; border:1px solid #ccc; background:#00B050; color:green; font-weight:bold; text-align:center;">Ent. / Private PKI | Critical Sector Private / Ent. PKI | Public CA PKI | C-ITS</td>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">INT-1</td>

    <td style="padding:7px; border:1px solid #ccc; background:#FFD700; color:yellow; font-weight:bold; text-align:center;">Remote interfaces accessible from enterprise network</td>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">INT-0</td>

    <td style="padding:7px; border:1px solid #ccc; background:#FF0000; color:red; font-weight:bold; text-align:center;">Remote interfaces accessible from public network</td>

  </tr>

</table>

</div>



## B.3 Impact risk factors

The following figures present the impact factors evaluation for the 4 use cases used to calculate risks. They are categorised as follow:

- Availability

- Integrity

- Confidentiality

- Traceability





<div align="center">



**Table B.8: Risk factor int**

</br>

<table style="border-collapse:collapse; width:100%; font-family:Arial; font-size:0.9em;">

  <tr style="background:#1F3864; color:white; font-weight:bold;">

    <th style="padding:8px; border:1px solid #ccc;">Risk factor</th>

    <th style="padding:8px; border:1px solid #ccc;">Description</th>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">INT-2</td>

    <td style="padding:7px; border:1px solid #ccc; background:#00B050; color:green; font-weight:bold; text-align:center;">Local interfaces only</td>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">INT-1</td>

    <td style="padding:7px; border:1px solid #ccc; background:#FFD700; color:yellow; font-weight:bold; text-align:center;">Remote interfaces accessible from enterprise network</td>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">INT-0</td>

    <td style="padding:7px; border:1px solid #ccc; background:#FF0000; color:red; font-weight:bold; text-align:center;">Remote interfaces accessible from public network</td>

  </tr>

</table>

</div>









## B.2 Evaluate Risks

## B.4 Evaluate Risks