@@ -543,20 +543,30 @@ These features can be, but are not limited to:
* Confidential communication channel when providing encryption at the data link layer (WPA2, MACSEC)
* Availability protection via packet processing offload features
## 4.6 Users
## 4.5 Users
While users of almost every product with digital elements are also indirectly using a network interface, the users for the purpose of the present document are restricted to those removing, installing, administering, or otherwise directly interacting with the network interface as an individual product.
<mark>Editor's Note: Some common definition of user categories are proposed in clause 3.1 above for consistency across vertical standards. Users can include both integrators and end users (individual or group / consumer or organisation), as well as users with privileged rights or professional training such as administrators. Users can be professional users or consumers and may have different levels of cybersecurity knowledge. Both professional and less experienced users may also have disabilities and may be using assistive technology to access the product. In addition, where a product is used in a public space there may be indirect users who are impacted by the device and whose cybersecurity needs should be considered.</mark>
Users of network interfaces include:
<mark>Editor’s Note: Definitions of users must not consider profession but shall rather be based on a characterisation of needs in a certain market segment (e.g., avoid “journalist” in favour of “privacy-conscious user”), covering also health, safety and accessibility of the product.</mark>
<mark>Editor’s Note: Should cover use by vulnerable groups where applicable, like children or elderly.</mark>
Users of almost every product with digital elements are also indirectly using a network interface. Thus the indirect users of network interfaces include all users. The primary users for the purpose of the present document are primarily those removing, installing, administering, or otherwise directly interacting with the network interface as an individual product, as distinct from interacting with the device it is integrated with. However, broad categories of indirect users are also described, divided up by how they affect the product risks.
