Commit 26aeff12 authored by Valerie Aurora (Bow Shock)'s avatar Valerie Aurora (Bow Shock)
Browse files

Remove risk factors and fix move errors for DMIN

parent 694e2795

EN-304-626.md

+6 −17
Original line number Diff line number Diff line
@@ -1468,11 +1468,13 @@ The product shall detect corruption of the data transmitted by the product. 


See Section 5.3 for which mitigations are necessary for which security profiles and Annex C.4 for the rationale.



#### 5.2.X.x Requirement

### 5.2.12 TR-DMIN: Data Minimization



#### 5.2.12.1 Requirement



The product shall minimize the data processed.



#### 5.2.X.x **MI-DJST**: Document and justify processed data

#### 5.2.12.2 MI-DJST: Document and justify processed data



All sources of data processed by the product in its secure-by-default configuration shall be documented. All sources of data processed shall have a documented rationale for why its processing is necessary for the functioning of the product in its secure-by-default configuration.
@@ -1488,20 +1490,9 @@ All sources of data processed by the product in its secure-by-default configurat 


  * Evidence: List of sources of data, documentation of each source of data, list of sources of data processed, connection between each discovered source of processed data to its documentation



#### 5.2.X.x Mapping of mitigations to risk factors and security profiles



| Risk factors        | Requires mitigations |

|---------------------|----------------------|

| RT-High             | none                 |

| SNDS < 1 & SNDT < 1 | none                 |

| all others          | DJST                 |



| Security Profile | Requires mitigations |

|------------------|----------------------|

| FIXME            | none                 |

| any              | DJST                 |

#### 5.2.12.3 Mapping of mitigations to risk factors and security profiles



> FIXME: When full use case risk factor and tolerances are available, update above table.

See Section 5.3 for which mitigations are necessary for which security profiles and Annex C.4 for the rationale.



### 5.2.X **TR-LMAS**: Minimize exposed interfaces
@@ -1662,8 +1653,6 @@ The product shall provide a method by which an authorized user can securely tran 
| IoT-3, WE-1        | SDRF                 |

| all others         | SDRF & SDTR          |



### 5.2.X **TR-DMIN**:



### 5.2.X **TR-LOGG**: Logging and monitoring



#### 5.2.X.x Requirement