4.8 Considering countermeasures
This section describes the countermeasures that should be implemented and the behavior of the system when these countermeasures are implemented.
Countermeasures to be implemented are classified into the following two types:
-
Countermeasures to be implemented against preconditions
This type of measure is for dealing with the preconditions checked in 4.6 Checking the preconditions for a secure system.
-
Countermeasures to be implemented against expected threats
This type of measure is for dealing with the expected threats described in 4.7 Analyzing expected threats.
The following subsection describes these types of measures.