Commit 11655c5c authored by Valerie Aurora (Bow Shock)'s avatar Valerie Aurora (Bow Shock)
Browse files

Update risk factors for minimizing data processing

parent 9448ee94
Loading
Loading
Loading
Loading
+10 −5
Original line number Diff line number Diff line
@@ -1746,17 +1746,22 @@ All sources of data processed by the product in its secure-by-default configurat

| Risk factors        | Requires mitigations |
|---------------------|----------------------|
| any                 | DJST                 |
| RT-High             | none                 |
| SNDS < 1 & SNDT < 1 | none                 |
| all others          | DJST                 |

| Security Profile | Requires mitigations |
|---------------------|----------------------|
|------------------|----------------------|
| FIXME            | none                 |
| any              | DJST                 |

> FIXME: When full use case risk factor and tolerances are available, update above table.

### 5.2.X **TR-SCUD**: Secure updates

The product shall be securely updateable by the user.

FIXME Waiting on legal approval to include self-update text, following text is for update by the operational environment (other OS, human process, etc.)
> FIXME: Waiting on legal approval to include self-update text, following text is for update by the operational environment (other OS, human process, etc.)

#### 5.2.X.x **MI-SCHL**: Low security updates provided by operational environment