@@ -1676,6 +1676,18 @@ Risk factors may increase the likelihood of an incident, increase the impact of
The overall risk related to each use case should be considered as a result of combining risk factors affecting both likelihood and impact of an incident.
**[PHY]** Degree of physical access to the device
Description: Exposure of the device to physical access by users.
Rationale: More users with physical access to the device increases the likelihood of an attack via physical interfaces.
Type: Affects likelihood of attacks originating from physical access
***[PHY-L-0]** Foreseeable use is physical access only by authorized users
***[PHY-L-1]** Foreseeable use is incidental physical access by untrusted users
***[PHY-L-2]** Foreseeable use is frequent physical access by untrusted users
**[SFT]** Degree of local software access to the host system
Description: How many agents have unprivileged software access to the host system.
