Spreadsheet: 81d09999-3736-4e6d-abaf-f7bfccbfb6f3
Sheet: R10

 | Risk-ID | Risk Value | Asset Description | Asset Value | Vulnerability Description | Vulnerability Value | Threat Description | Threat Value |  | Values | Counts | Weighting factor
 | R.A8.V25.T14. | 9 | A8. Smart home objects / appliances | 2.1 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4 |  | 1
 | R.A8.V25.T8. | 8 | A8. Smart home objects / appliances | 2.1 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T8. Overhearing/recording logging/blogging activity | 3 |  | 2
 | R.A8.V25.T7. | 7 | A8. Smart home objects / appliances | 2.1 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T7. Malicious (logical) attacks on devices and systems | 2 |  | 3
 | R.A8.V25.T6. | 9 | A8. Smart home objects / appliances | 2.1 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T6. Malicious physical attacks (theft, vandalism, misuse, etc.) | 4 |  | 4
 | R.A8.V25.T3. | 10 | A8. Smart home objects / appliances | 2.1 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5 |  | 5
 | R.A8.V25.T2. | 9 | A8. Smart home objects / appliances | 2.1 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T2. Identity theft | 4 |  | 6
 | R.A8.V25.T1. | 9 | A8. Smart home objects / appliances | 2.1 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T1. Accidental loss  of device | 4 |  | 7
 | R.A8.V20.T14. | 9 | A8. Smart home objects / appliances | 2.1 | V20. Increase of (unprotected) data storage capacity in smart-devices | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4 |  | 8
 | R.A8.V20.T7. | 7 | A8. Smart home objects / appliances | 2.1 | V20. Increase of (unprotected) data storage capacity in smart-devices | 5 | T7. Malicious (logical) attacks on devices and systems | 2 |  | 9
 | R.A8.V20.T3. | 10 | A8. Smart home objects / appliances | 2.1 | V20. Increase of (unprotected) data storage capacity in smart-devices | 5 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5 |  | 10
 | R.A8.V8.T14. | 9 | A8. Smart home objects / appliances | 2.1 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4 |  | 11
 | R.A8.V5.T8. | 8 | A8. Smart home objects / appliances | 2.1 | V5. Inherent features of smart devices (size, material etc.): easy to lose or steal | 5 | T8. Overhearing/recording logging/blogging activity | 3 |  | 12
 | R.A8.V3.T8. | 6 | A8. Smart home objects / appliances | 2.1 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T8. Overhearing/recording logging/blogging activity | 3 |  | 13
 | R.A8.V2.T8. | 5 | A8. Smart home objects / appliances | 2 | V2. Inadequate policy framework | 2 | T8. Overhearing/recording logging/blogging activity | 3
 | R.A8.V2.T3. | 7 | A8. Smart home objects / appliances | 2 | V2. Inadequate policy framework | 2 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A4.V28.T3. | 10 | A4. Sentiments | 4 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A4.V28.T2. | 9 | A4. Sentiments | 4 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T2. Identity theft | 4
 | R.A4.V25.T14. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A4.V25.T6. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T6. Malicious physical attacks (theft, vandalism, misuse, etc.) | 4
 | R.A4.V25.T3. | 12 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | [NAME]. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T2. Identity theft | 4
 | R.A4.V25.T1. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T1. Accidental loss  of device | 4
 | R.A4.V15.T14. | 9 | A4. Sentiments | 4 | V15. Lack of (usable) logging controls/policies/ reminders. E.g. capturing some embarrassing scene of someone else or yourself | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A4.V10.T3. | 11 | A4. Sentiments | 4 | V10. Over reliance and excessive dependency on electronic devices and systems | 4 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A4.V10.T1. | 10 | A4. Sentiments | 4 | V10. Over reliance and excessive dependency on electronic devices and systems | 4 | T1. Accidental loss  of device | 4
 | R.A4.V3.T14. | 9 | A4. Sentiments | 4 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A4.V3.T3. | 10 | A4. Sentiments | 4 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A4.V3.T2. | 9 | A4. Sentiments | 4 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T2. Identity theft | 4
 | R.A8.V13.T3. | 8 | A8. Smart home objects / appliances | 2.1 | V13. Lack of revocation/correction/deletion mechanisms | 3 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | [NAME]. | 10 | A8. Smart home objects / appliances | 2.1 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A8.V8.T2. | 9 | A8. Smart home objects / appliances | 2.1 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T2. Identity theft | 4
 | R.A8.V5.T14. | 9 | A8. Smart home objects / appliances | 2.1 | V5. Inherent features of smart devices (size, material etc.): easy to lose or steal | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A8.V5.T6. | 9 | A8. Smart home objects / appliances | 2.1 | V5. Inherent features of smart devices (size, material etc.): easy to lose or steal | 5 | T6. Malicious physical attacks (theft, vandalism, misuse, etc.) | 4
 | R.A8.V5.T3. | 10 | A8. Smart home objects / appliances | 2.1 | V5. Inherent features of smart devices (size, material etc.): easy to lose or steal | 5 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | [NAME]. | 9 | A8. Smart home objects / appliances | 2.1 | V5. Inherent features of smart devices (size, material etc.): easy to lose or steal | 5 | T2. Identity theft | 4
 | R.A8.V5.T1. | 9 | A8. Smart home objects / appliances | 2.1 | V5. Inherent features of smart devices (size, material etc.): easy to lose or steal | 5 | T1. Accidental loss  of device | 4
 | R.A8.V3.T14. | 7 | A8. Smart home objects / appliances | 2.1 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A8.V3.T3. | 8 | A8. Smart home objects / appliances | 2.1 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A8.V3.T2. | 7 | A8. Smart home objects / appliances | 2.1 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T2. Identity theft | 4
 | R.A11.V2.T8. | 6 | A11. e-cars and e-bikes | 3 | V2. Inadequate policy framework | 2 | T8. Overhearing/recording logging/blogging activity | 3
 | R.A11.V2.T3. | 8 | A11. e-cars and e-bikes | 3 | V2. Inadequate policy framework | 2 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A12.V13.T3. | 9 | A12. Home security system | 3 | V13. Lack of revocation/correction/deletion mechanisms | 3 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A12.V8.T14. | 10 | A12. Home security system | 3 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | [NAME]. | 11 | A12. Home security system | 3 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | [NAME]. | 10 | A12. Home security system | 3 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T2. Identity theft | 4
 | R.A12.V2.T8. | 6 | A12. Home security system | 3 | V2. Inadequate policy framework | 2 | T8. Overhearing/recording logging/blogging activity | 3
 | R.A13.V13.T3. | 8 | A13. Energy management system | 2 | V13. Lack of revocation/correction/deletion mechanisms | 3 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A13.V8.T14. | 9 | A13. Energy management system | 2 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A13.V8.T3. | 10 | A13. Energy management system | 2 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | [NAME]. | 9 | A13. Energy management system | 2 | V8. Lack of or inadequate user identification, authentication and access controls; e.g. use of new devices as authentication tools | 5 | T2. Identity theft | 4
 | R.A4.V25.T16. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A4.V3.T16. | 9 | A4. Sentiments | 4 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A8.V25.T16. | 9 | A8. Smart home objects / appliances | 2.1 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A8.V3.T16. | 7 | A8. Smart home objects / appliances | 2.1 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A4.V28.T8. | 8 | A4. Sentiments | 4 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T8. Overhearing/recording logging/blogging activity | 3
 | R.A4.V25.T8. | 10 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T8. Overhearing/recording logging/blogging activity | 3
 | R.A4.V25.T7. | 9 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T7. Malicious (logical) attacks on devices and systems | 2
 | R.A4.V15.T16. | 9 | A4. Sentiments | 4 | V15. Lack of (usable) logging controls/policies/ reminders. E.g. capturing some embarrassing scene of someone else or yourself | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A4.V15.T8. | 8 | A4. Sentiments | 4 | V15. Lack of (usable) logging controls/policies/ reminders. E.g. capturing some embarrassing scene of someone else or yourself | 3 | T8. Overhearing/recording logging/blogging activity | 3
 | R.A4.V3.T8. | 8 | A4. Sentiments | 4 | V3. Inadequate privacy/security interfaces (poor interface design) | 3 | T8. Overhearing/recording logging/blogging activity | 3
 | R.A4.V15.T13. | 9 | A4. Sentiments | 4 | V15. Lack of (usable) logging controls/policies/ reminders. E.g. capturing some embarrassing scene of someone else or yourself | 3 | T13. Peer-pressure and social pressure to constantly share data and conform; fear of violent response / or ridicule from peers, friends etc; | 4
 | R.A4.V10.T3. | 11 | A4. Sentiments | 4 | V10. Over reliance and excessive dependency on electronic devices and systems | 4 | T3. Intentional misuse, unauthorised disclosure, modification or destruction of individual’s data | 5
 | R.A4.V10.T16. | 10 | A4. Sentiments | 4 | V10. Over reliance and excessive dependency on electronic devices and systems | 4 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A4.V10.T16. | 9 | A4. Sentiments | 4 | V10. Over reliance and excessive dependency on electronic devices and systems | 4 | T16. Changes in perception of privacy and / or privacy needs | 4