Component: News Organization / Legal

Defined in model.py:389

Corporate network and legal exposure of the news organization.

boundary: News Organization

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
News Organization network is compromised THREAT68 accepted 6 medium 6 medium Admin guide and trainings explain the risk of violating SD compartmentalization; Source interface only available as a Tor onion service; Journalist interface only available as a Tor onion service
News organization, journalist or admin targeted by legal action THREAT64 out of scope Unknown Unknown Inform sources and journalists that no tool is perfect via "SecureDrop can contain bugs" text

Scenarios Using This Component

Back to Components List | Back to Summary