Commit 61d439dc authored by Valerie Aurora (Bow Shock)'s avatar Valerie Aurora (Bow Shock)
Browse files

Fix some risk factors for sensitivity and network connection

parent f1f376f3

EN-304-626.md

+15 −15
Original line number Diff line number Diff line
@@ -2274,14 +2274,14 @@ Mitigations for Likelihood: 
| **UC-OT-2**  | 0    | 0    | 0    | 1    | 1    | 3    | 2    | 1    | 0    | 0    | 0    | 0    | 1    | 1    | 1    | 0    | 3    | 14    |

| **UC-MOB-1** | 1    | 1    | 2    | 3    | 3    | 3    | 1    | 3    | 3    | 0    | 3    | 2    | 2    | 2    | 2    | 2    | 3    | 39    |

| **UC-WE-1**  | 1    | 1    | 1    | 2    | 2    | 1    | 1    | 2    | 2    | 0    | 0    | 0    | 1    | 1    | 0    | 2    | 3    | 20    |

| **UC-PC-1**  | 1    | 2    | 2    | 2    | 2    | 2    | 0    | 3    | 0    | 2    | 2    | 1    | 2    | 1    | 2    | 2    | 3    | 29    |

| **UC-PC-2**  | 1    | 2    | 2    | 2    | 2    | 2    | 0    | 3    | 0    | 2    | 2    | 1    | 2    | 1    | 1    | 1    | 3    | 27    |

| **UC-LA-1**  | 1    | 2    | 2    | 2    | 2    | 2    | 1    | 3    | 1    | 1    | 2    | 2    | 2    | 2    | 2    | 2    | 3    | 32    |

| **UC-LA-2**  | 1    | 2    | 2    | 2    | 3    | 3    | 1    | 3    | 1    | 1    | 2    | 2    | 2    | 2    | 1    | 1    | 3    | 32    |

| **UC-PC-1**  | 1    | 2    | 2    | 2    | 2    | 2    | 0    | 2    | 0    | 2    | 2    | 1    | 2    | 1    | 2    | 2    | 3    | 28    |

| **UC-PC-2**  | 1    | 2    | 2    | 3    | 3    | 3    | 0    | 2    | 0    | 2    | 2    | 1    | 2    | 1    | 1    | 1    | 3    | 29    |

| **UC-LA-1**  | 1    | 2    | 2    | 2    | 2    | 2    | 1    | 3    | 1    | 1    | 2    | 2    | 2    | 2    | 2    | 2    | 3    | 31    |

| **UC-LA-2**  | 1    | 2    | 2    | 2    | 3    | 3    | 1    | 3    | 1    | 1    | 2    | 2    | 2    | 2    | 1    | 1    | 3    | 31    |

| **UC-PS-1**  | 1    | 2    | 2    | 2    | 2    | 2    | 0    | 3    | 0    | 1    | 2    | 1    | 2    | 2    | 0    | 1    | 2    | 24    |

| **UC-SE-1**  | 0    | 0    | 2    | 2    | 2    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 2    | 2    | 0    | 0    | 1    | 21    |

| **UC-SE-2**  | 1    | 1    | 2    | 2    | 2    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 2    | 2    | 0    | 0    | 1    | 23    |

| **UC-SE-3**  | 2    | 3    | 2    | 2    | 2    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 2    | 2    | 0    | 0    | 1    | 26    |

| **UC-SE-1**  | 0    | 0    | 2    | 3    | 3    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 1    | 1    | 0    | 0    | 1    | 21    |

| **UC-SE-2**  | 1    | 1    | 2    | 3    | 3    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 1    | 1    | 0    | 0    | 1    | 23    |

| **UC-SE-3**  | 2    | 3    | 2    | 3    | 3    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 1    | 1    | 0    | 0    | 1    | 25    |



## C.6 Security profiles and security assurance levels
@@ -2304,13 +2304,13 @@ Security profiles are associated with sets of risk factor levels. Each security 
| **SP-MOB-1**     | 1    | 1    | 2    | 3    | 3    | 3    | 1    | 2    | 3    | 0    | 3    | 2    | 2    | 2    | 2    | 2    | 3    | 38    |

| **SP-WE-1**      | 1    | 1    | 1    | 2    | 2    | 1    | 1    | 2    | 2    | 0    | 0    | 0    | 1    | 1    | 0    | 2    | 3    | 20    |

| **SP-PC-1**      | 1    | 2    | 2    | 2    | 2    | 2    | 0    | 2    | 0    | 2    | 2    | 1    | 2    | 1    | 2    | 2    | 3    | 28    |

| **SP-PC-2**      | 1    | 2    | 2    | 2    | 2    | 2    | 0    | 2    | 0    | 2    | 2    | 1    | 2    | 1    | 1    | 1    | 3    | 26    |

| **SP-PC-2**      | 1    | 2    | 2    | 3    | 3    | 3    | 0    | 2    | 0    | 2    | 2    | 1    | 2    | 1    | 1    | 1    | 3    | 29    |

| **SP-LA-1**      | 1    | 2    | 2    | 2    | 2    | 2    | 1    | 2    | 1    | 1    | 2    | 2    | 2    | 2    | 2    | 2    | 3    | 31    |

| **SP-LA-2**      | 1    | 2    | 2    | 2    | 3    | 3    | 1    | 2    | 1    | 1    | 2    | 2    | 2    | 2    | 1    | 1    | 3    | 31    |

| **SP-PS-1**      | 1    | 2    | 2    | 2    | 2    | 2    | 0    | 2    | 0    | 1    | 2    | 1    | 2    | 2    | 0    | 1    | 2    | 23    |

| **SP-SE-1**      | 0    | 0    | 2    | 2    | 2    | 3    | 0    | 2    | 0    | 1    | 2    | 1    | 2    | 2    | 0    | 0    | 1    | 20    |

| **SP-SE-2**      | 1    | 1    | 2    | 2    | 2    | 3    | 0    | 2    | 0    | 1    | 2    | 1    | 2    | 2    | 0    | 0    | 1    | 22    |

| **SP-SE-3**      | 2    | 3    | 2    | 2    | 2    | 3    | 0    | 2    | 0    | 1    | 2    | 1    | 2    | 2    | 0    | 0    | 1    | 25    |

| **SP-SE-1**      | 0    | 0    | 2    | 3    | 3    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 1    | 1    | 0    | 0    | 1    | 21    |

| **SP-SE-2**      | 1    | 1    | 2    | 3    | 3    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 1    | 1    | 0    | 0    | 1    | 23    |

| **SP-SE-3**      | 2    | 3    | 2    | 3    | 3    | 3    | 0    | 3    | 0    | 1    | 2    | 1    | 1    | 1    | 0    | 0    | 1    | 25    |



### C.6.3 Security assurance levels
@@ -2335,10 +2335,10 @@ Security assurance levels are informed by but not determined by the risk factor 
| **SP-OT-2**      | Business-grade remote door locking system                              | 14       | MED  |

| **SP-MOB-1**     | Personal mobile device                                                 | 39       | HIGH |

| **SP-WE-1**      | Wearable health tracker                                                | 20       | MED  |

| **SP-PC-1**      | Personal computer in a fixed and generally safe location               | 29       | MED  |

| **SP-PC-2**      | Enterprise workstation in a fixed and generally safe location          | 27       | MED  |

| **SP-LA-1**      | Personal laptop                                                        | 32       | HIGH |

| **SP-LA-2**      | Enterprise laptop                                                      | 32       | HIGH |

| **SP-PC-1**      | Personal computer in a fixed and generally safe location               | 28       | MED  |

| **SP-PC-2**      | Enterprise workstation in a fixed and generally safe location          | 29       | MED  |

| **SP-LA-1**      | Personal laptop                                                        | 31       | HIGH |

| **SP-LA-2**      | Enterprise laptop                                                      | 31       | HIGH |

| **SP-PS-1**      | Personal server                                                        | 24       | MED  |

| **SP-SE-1**      | Enterprise server in a datacenter with no user accounts                | 21       | MED  |

| **SP-SE-2**      | Enterprise server in a datacenter with only trusted user accounts      | 23       | MED  |