Commit e5c26421 authored by Sammy Haddad's avatar Sammy Haddad
Browse files

Annex B

parent b3632e25

EN-304-624.md

+8 −6
Original line number Diff line number Diff line
@@ -3200,7 +3200,7 @@ This Annex applies a “state of the art” risk assessment methodology to the P 


## B.1 Risk calculation



Risk is calculated as the product of impact and likelihood. The metrics are derived from those given in clauses 5a and 6 of ETSI TS 102 165-1 [] modified as shown in tables B.1, B.2 and B.3 below.

Risk is calculated as the product of impact and likelihood. 



In assessing impact reasonable consideration has to be made for the use case in which the product is deployed which should include assessment of the following factors and as these are dependent on the specific use case the mitigations primarily consider limiting the likelihood of an attack:
@@ -3212,7 +3212,7 @@ In assessing impact reasonable consideration has to be made for the use case in 


<div align="center">



**Table B.1: Impact metric for use in risk calculation modified from Table 3 of TS 102 165-1 []**

**Table B.1: Impact metric for use in risk calculation**

</br>



| Impact | Explanation | Value |
@@ -3223,8 +3223,6 @@ In assessing impact reasonable consideration has to be made for the use case in 


</div>







<div align="center">



**Table B.2: likelihood metric for use in risk calculation modified from table 4 of TS 102 165-1 []**
@@ -3349,7 +3347,7 @@ The criticality of the environment in which a product is deployed influences its 


<div align="center">



**Table B.8: Risk factor int**

**Table B.8: Risk factor INT**

</br>

<table style="border-collapse:collapse; width:100%; font-family:Arial; font-size:0.9em;">

  <tr style="background:#1F3864; color:white; font-weight:bold;">
@@ -3361,16 +3359,20 @@ The criticality of the environment in which a product is deployed influences its 
  <tr>

    <td style="padding:7px; border:1px solid #ccc;">INT-2</td>

    <td style="padding:7px; border:1px solid #ccc; background:#00B050; color:green; font-weight:bold; text-align:center;">Local interfaces only</td>

  <td style="padding:7px; border:1px solid #ccc;">Low</td>

   <td style="padding:7px; border:1px solid #ccc;">COM.Local or COM.UserInterface</td> 

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">INT-1</td>

    <td style="padding:7px; border:1px solid #ccc; background:#FFD700; color:yellow; font-weight:bold; text-align:center;">Remote interfaces accessible from enterprise network</td>

    <td style="padding:7px; border:1px solid #ccc;">Medium</td>

   <td style="padding:7px; border:1px solid #ccc;">COM.Adjacent or ARC.PublicCloud</td>

  </tr>

  <tr>

    <td style="padding:7px; border:1px solid #ccc;">INT-0</td>

    <td style="padding:7px; border:1px solid #ccc; background:#FF0000; color:red; font-weight:bold; text-align:center;">Remote interfaces accessible from public network</td>

    <td style="padding:7px; border:1px solid #ccc;">High</td>

    <td style="padding:7px; border:1px solid #ccc;">High</td>

    <td style="padding:7px; border:1px solid #ccc;">COM.Public</td>

  </tr>

</table>

</div>