"A risk assessment of the Piql Services" by FFI

A concise and schematic overview of which processes – or objects of study – the risk assessment in this report will include is depicted in figure 3.1 and 3.2.

Figure 3.1 illustrates the entire scope of our assessment. First, two specific objects of study are depicted: the production phase and the storage phase, shown in blue. These we remember from the service journey. The production phase includes the entire process, from the reception of the digital data until the finished reel is placed in a piqlBox, and the storage phase is while the piqlFilms are in storage. The storage object also includes the operational processes of running the automated storage facility, i.e. the piqlVault, which is elaborated upon below in figure 3.2. Second, the structures surrounding and connecting these objects are depicted in grey. The main structural connection we emphasise is the transportation phase, when the piqlBoxes are transported from the production site to the designated storage facility. This step is also included in the service journey. Finally, encapsulating all the objects and processes are the security parameters surrounding the Piql Preservation Services, which is shown in red. These include the safety requirements of the storage facility and security regime that applies during production, during transportation and while the piqlFilms are in storage. Identifying the vulnerabilities and security challenges which exist within this scheme is the purpose of this report and forms the basis of our assessment.

Figure 3.2 The piqlVault operations

Figure 3.2 illustrates visually how the automatic operating system in the storage facility is set up [9]. A more thorough and detailed description of the automated storage system is given in chapter 5.4. Here, we simply outline the critical external structural dependencies of the modified version of the AutoStore® system which is used in the piqlVault to give the reader an understanding of the elements we focus on in the risk assessment.

19

FFI-RAPPORT 16/00707