Component: Journalist Corporate Workstation

Journalist's corporate/personal device & network — outside the SecureDrop trust zone.

Threats Affecting This Component

Threat	Status	Risk	After mitigations	Mitigations
Journalist gets phished THREAT56	inform	6 medium	3 low	Journalist guide contains some limited information about OPSEC with respect to source materials
OSSEC and/or Journalist alert SMTP account credentials compromised THREAT69	partially mitigated	2 low	2 low	OSSEC emails are gpg encrypted; OSSEC emails should be signed
OSSEC and/or Journalist alert private key compromised THREAT70	partially mitigated	2 low	2 low	OSSEC logs do not contain sensitive information.
Attacks on the journalist corporate workstation (malware/seized/tampered) THREAT55	out of scope	Unknown	Unknown
Attacks on the journalist corporate network (monitored/tampered) THREAT164	unmanaged	Unknown	Unknown