Loading EN-304-626.md +12 −12 Original line number Diff line number Diff line Loading @@ -2278,10 +2278,10 @@ Mitigations for Likelihood: | **UC-PC-2** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 2 | 2 | 1 | 2 | 1 | 1 | 1 | 3 | 27 | | **UC-LA-1** | 1 | 2 | 2 | 2 | 2 | 2 | 1 | 3 | 1 | 1 | 2 | 2 | 2 | 2 | 2 | 2 | 3 | 32 | | **UC-LA-2** | 1 | 2 | 2 | 2 | 3 | 3 | 1 | 3 | 1 | 1 | 2 | 2 | 2 | 2 | 1 | 1 | 3 | 32 | | **UC-PS-1** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 2 | 22 | | **UC-SE-1** | 0 | 0 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 19 | | **UC-SE-2** | 1 | 1 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 21 | | **UC-SE-3** | 2 | 3 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 24 | | **UC-PS-1** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 1 | 2 | 24 | | **UC-SE-1** | 0 | 0 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 21 | | **UC-SE-2** | 1 | 1 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 23 | | **UC-SE-3** | 2 | 3 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 26 | ## C.6 Security profiles and security assurance levels Loading @@ -2307,10 +2307,10 @@ Security profiles are associated with sets of risk factor levels. Each security | **SP-PC-2** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 2 | 2 | 1 | 2 | 1 | 1 | 1 | 3 | 27 | | **SP-LA-1** | 1 | 2 | 2 | 2 | 2 | 2 | 1 | 3 | 1 | 1 | 2 | 2 | 2 | 2 | 2 | 2 | 3 | 32 | | **SP-LA-2** | 1 | 2 | 2 | 2 | 3 | 3 | 1 | 3 | 1 | 1 | 2 | 2 | 2 | 2 | 1 | 1 | 3 | 32 | | **SP-PS-1** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 2 | 22 | | **SP-SE-1** | 0 | 0 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 19 | | **SP-SE-2** | 1 | 1 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 21 | | **SP-SE-3** | 2 | 3 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 24 | | **SP-PS-1** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 1 | 2 | 24 | | **SP-SE-1** | 0 | 0 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 21 | | **SP-SE-2** | 1 | 1 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 23 | | **SP-SE-3** | 2 | 3 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 26 | ### C.6.3 Security assurance levels Loading Loading @@ -2339,10 +2339,10 @@ Security assurance levels are informed by but not determined by the risk factor | **SP-PC-2** | Enterprise workstation in a fixed and generally safe location | 27 | MED | | **SP-LA-1** | Personal laptop | 32 | HIGH | | **SP-LA-2** | Enterprise laptop | 32 | HIGH | | **SP-PS-1** | Personal server | 22 | MED | | **SP-SE-1** | Enterprise server in a datacenter with no user accounts | 19 | MED | | **SP-SE-2** | Enterprise server in a datacenter with only trusted user accounts | 21 | MED | | **SP-SE-3** | Enterprise server in a datacenter hosting many untrusted user accounts | 24 | MED | | **SP-PS-1** | Personal server | 24 | MED | | **SP-SE-1** | Enterprise server in a datacenter with no user accounts | 21 | MED | | **SP-SE-2** | Enterprise server in a datacenter with only trusted user accounts | 23 | MED | | **SP-SE-3** | Enterprise server in a datacenter hosting many untrusted user accounts | 25 | MED | # Annex D (informative): Risk evaluation guidance Loading Loading
EN-304-626.md +12 −12 Original line number Diff line number Diff line Loading @@ -2278,10 +2278,10 @@ Mitigations for Likelihood: | **UC-PC-2** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 2 | 2 | 1 | 2 | 1 | 1 | 1 | 3 | 27 | | **UC-LA-1** | 1 | 2 | 2 | 2 | 2 | 2 | 1 | 3 | 1 | 1 | 2 | 2 | 2 | 2 | 2 | 2 | 3 | 32 | | **UC-LA-2** | 1 | 2 | 2 | 2 | 3 | 3 | 1 | 3 | 1 | 1 | 2 | 2 | 2 | 2 | 1 | 1 | 3 | 32 | | **UC-PS-1** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 2 | 22 | | **UC-SE-1** | 0 | 0 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 19 | | **UC-SE-2** | 1 | 1 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 21 | | **UC-SE-3** | 2 | 3 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 24 | | **UC-PS-1** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 1 | 2 | 24 | | **UC-SE-1** | 0 | 0 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 21 | | **UC-SE-2** | 1 | 1 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 23 | | **UC-SE-3** | 2 | 3 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 26 | ## C.6 Security profiles and security assurance levels Loading @@ -2307,10 +2307,10 @@ Security profiles are associated with sets of risk factor levels. Each security | **SP-PC-2** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 2 | 2 | 1 | 2 | 1 | 1 | 1 | 3 | 27 | | **SP-LA-1** | 1 | 2 | 2 | 2 | 2 | 2 | 1 | 3 | 1 | 1 | 2 | 2 | 2 | 2 | 2 | 2 | 3 | 32 | | **SP-LA-2** | 1 | 2 | 2 | 2 | 3 | 3 | 1 | 3 | 1 | 1 | 2 | 2 | 2 | 2 | 1 | 1 | 3 | 32 | | **SP-PS-1** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 1 | 2 | 22 | | **SP-SE-1** | 0 | 0 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 19 | | **SP-SE-2** | 1 | 1 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 21 | | **SP-SE-3** | 2 | 3 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 1 | 1 | 0 | 0 | 1 | 24 | | **SP-PS-1** | 1 | 2 | 2 | 2 | 2 | 2 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 1 | 2 | 24 | | **SP-SE-1** | 0 | 0 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 21 | | **SP-SE-2** | 1 | 1 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 23 | | **SP-SE-3** | 2 | 3 | 2 | 2 | 2 | 3 | 0 | 3 | 0 | 1 | 2 | 1 | 2 | 2 | 0 | 0 | 1 | 26 | ### C.6.3 Security assurance levels Loading Loading @@ -2339,10 +2339,10 @@ Security assurance levels are informed by but not determined by the risk factor | **SP-PC-2** | Enterprise workstation in a fixed and generally safe location | 27 | MED | | **SP-LA-1** | Personal laptop | 32 | HIGH | | **SP-LA-2** | Enterprise laptop | 32 | HIGH | | **SP-PS-1** | Personal server | 22 | MED | | **SP-SE-1** | Enterprise server in a datacenter with no user accounts | 19 | MED | | **SP-SE-2** | Enterprise server in a datacenter with only trusted user accounts | 21 | MED | | **SP-SE-3** | Enterprise server in a datacenter hosting many untrusted user accounts | 24 | MED | | **SP-PS-1** | Personal server | 24 | MED | | **SP-SE-1** | Enterprise server in a datacenter with no user accounts | 21 | MED | | **SP-SE-2** | Enterprise server in a datacenter with only trusted user accounts | 23 | MED | | **SP-SE-3** | Enterprise server in a datacenter hosting many untrusted user accounts | 25 | MED | # Annex D (informative): Risk evaluation guidance Loading
