Extract - A risk assessment of the Piql Preservation Service

The following document is written by Piql AS.

It is an extract of the 174-page report “A risk assessment of the Piql Services” written by The Norwegian Defence Research Establishment as a conclusion to their thorough assessment of Piql Services. In addition, it contains an overview of measures Piql have taken to further minimize risk based on the recommendations in the report.

To read FFI’s full report, please follow this link: https://www.ffi.no/no/Rapporter/16-00707.pdf

Contents

0 Preface ............................................................................................................................................ 3

1 Introduction.................................................................................................................................... 4

2 The Piql Services............................................................................................................................ 4

3 Scope............................................................................................................................................... 6

4 Definitions....................................................................................................................................... 7

5 Simplifications and Specifications................................................................................................. 8

6 Scenario method............................................................................................................................ 9

8 Presenting the Scenarios............................................................................................................. 12

9 The Vulnerabilities and Security Challenges of the Piql Services ............................................ 14

10 Alternatives for Digital Storage.................................................................................................. 18

11 Recommendations ....................................................................................................................... 19

12 Conclusions.................................................................................................................................. 21

13 Appendix....................................................................................................................................... 22

13.1 Recommendations by the Norwegian National Security Authority .................................................................. 22

13.2 Identified threats & hazards – comments/measures taken by Piql ..................................................................... 24

Page | 2