severity-breakdown.xlsx

	A	B	C	D	E	F	G	H	I
1	Inconsistency Type	Categories	a_s and a_f	Data	Discrepancy	Sensitivity	Severity	# of Non-compliant TPLs	# of configurable privacy disclosure
2	Incorrect Operation Disclosure	O1	af = Y, as = N	Sensitive PII	High	High	(High, High) =6	2	4
3				PII		Medium	(High, Medium) =5	4	6
4				Non-PII		Low	(High, Low) =4	7	13
5		O2	af = Y, as = E	Sensitive PII	Medium	High	(Medium, High) =5	1	2
6				PII		Medium	(Medium, Medium) =4	6	11
7				Non-PII		Low	(Medium, low) =3	5	10
8		O3	af = D, as = N	Sensitive PII	Medium	High	(Medium, high) =5	3	8
9				PII		Medium	(Medium, Medium) =4	8	22
10				Non-PII		Low	(Medium, low) =3	4	9
11		O4	af = E, as = N	Sensitive PII	Low	High	(Low, High) =4	3	7
12				PII		Medium	(Low, Medium)=4	3	16
13				Non-PII		Low	(Low, Low)=2	4	9
14		O5	af = Y, as = D	Sensitive PII	Low	High	(Low, High) =4	0	0
15				PII		Medium	(Low, Medium)=4	4	7
16				Non-PII		Low	(Low, Low)=2	4	8
17		O6	af = D, as = E	Sensitive PII	Low	High	(Low, High) =4	1	1
18				PII		Medium	(Low, Medium)=4	3	6
19				Non-PII		Low	(Low, Low)=2	2	5
20	Invalid Configuration Setting Disclosure	C1	af = as = D, Xs = ∅	Sensitive PII	High	High	(High, High) =6	1	2
21				PII		Medium	(High, Medium) =5	6	15
22				Non-PII		Low	(High, Low) =4	4	11
23		C2	af = as = D, ∃x ∈ Xs, x /∈ Xf	Sensitive PII	Medium	High	(Medium, High) =5	1	3
24				PII		Medium	(Medium, Medium) =4	1	2
25				Non-PII		Low	(Medium, low) =3	1	1
26		C3	af = as = D, Xs ⊂ Xf	Sensitive PII	Low	High	(Low, High) =4	1	1
27				PII		Medium	(Low, Medium)=4	1	2
28				Non-PII		Low	(Low, Low)=2	0	0
29
30
31
32	Action	Weight	Severity
33	Y	4	Critical
34	D	3	High
35	E	2	Medium
36	N	1	Low
37
38	Data	Weight	Severity
39	Sensitive PII	3	High
40	PII	2	Medium
41	Non-PII	1	Low
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100