ABCFGHIJKLMQRSTUVWXYZ
1
DLT Cybersecurity Risk Profile Tool v1.0
2
The DLT Cybersecurity Risk Profile Tool contains a series of questions relating to DLT cybersecurity attributes within the Source, Consumption, Processing, Storage and Data State Models that form the core of a DLT environment. These attributes span the Business, Platform and Technology/IT Layers respectively and are risk assessed for various risk categories that directly map to the DLT design type as shown in Table 1.
3
NOTE 1: Risk categories evaluate the risk stemming from a DLT Platform in a DLT environment. P2Ps that operate distributed ledgers without a DLT Platform hence fall under the "Insignificant Category". However they may have significant IT based cybersecurity risks (such as : web2, CIAAA, fault tolerance etc ) Refer to Note3.

NOTE 2: The IT infrastructure of the DLT Solution viz., compute resources, software, communications network, etc hosted in the cloud are typically the responsibility of the IT Function. As such their risk assessment is not included in the DLT Cybersecurity Risk Profile

NOTE 3: This DLT Cybersecurity Risk Profile will need to be complemented with a Cybersecurity Risk Profile of the IT components of the DLT’s infrastructure, to get the complete Cybersecurity Risk Profile of the DLT Solution.
4
Question NumberGartner DLT LayersDLT Cybersecurity Risk Attribute QuestionResponse GuideYour ChoiceBase Risk LevelBase ScoreIndivdual Scoring Factor(s)Adjusted ScoreAdjusted SeverityDLT Layer Severity
5
Filter this column to work on one of the 3 DLT LayersThis column identifies the DLT Risk CategoryThis column contains key questions that need to be answered for the corresponding Risk Attribute identified in Column CThe Response guide lists potential answers for the questions in Column F for the Risk Attribute under consideration (Column C).
Enter the best answer number in Column H as your answer.
Individual answers may vary depending upon your implementation or goals for implementation.
This column number contains the answer number for the Risk Attribute question from Column FThis is a Base Risk Level calculated by the tool based on the answer in Column HThis column contains a numerical score calculated by the tool for the answer in Column HMost users will have a scoring factor of 1. For advanced users, the score may be adjusted to compensate for any remediations already in place or to account for external factors. For example: If there is a feature inherent to a given DLT design that reduces risk by 50% then the scoring factor could be a value of .5 or inversly if the risk is increased then the scoring factor could =1.5Adjusted score takes into account the scoring factor (from col K) and the Base score (from col J)Adjusted severity based on the Adjusted score in Column LSeverity calculated by the tool based on the answer selected in Column H and the scoring factor entered in Column K
6
7
User EntryUser Entry
8
Calculated ValuesCalculated Values
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100