Edit EN-304-624.md

| 1, 2 | Minor | No essential assets are concerned, or the attack is unlikely. Threats causing minor risks have no primary need for counter measures. |

| 3, 4 | Major | Threats on relevant assets are likely to occur although their impact is unlikely to be fatal. Major risks should be handled seriously and should be minimized by the appropriate use of countermeasures. |

| 6, 9 | Critical	| The primary interests of the providers and/or subscribers are threatened and the effort required from a potential attacker's to implement the threat(s) is not high. Critical risks should be minimized with highest priority. |

</div>

> NOTE: Because risk is calculated as the product of likelihood and impact the values 5, 7 and 8 cannot occur.

> NOTE: Because risk is calculated as the product of likelihood and impact the values 5, 7 and 8 cannot occur.

</div>

### Deployment

<div align="center">

<table style="border-collapse:collapse; width:100%; font-family:Arial; font-size:0.9em;">

  <tr style="background:#1F3864; color:white; font-weight:bold;">

    <th style="padding:8px; border:1px solid #ccc;">Risk factor</th>

    <td style="padding:7px; border:1px solid #ccc; background:#FF0000; color:red; font-weight:bold; text-align:center;">Critical use in enterprises (NIS2) or public PKI use case</td>

  </tr>

</table>

**Table B.4: Risk factor DEP**

</div>

### Network security

<table style="border-collapse:collapse; width:100%; font-family:Arial; font-size:0.9em;">