The Security and Privacy considerations sections should each have a selectable checklist of categories as well as a more general text entry box. The categories we are currently using are as follows (I have grouped them into Security and Privacy). I put "Business Confidential" under Privacy although it could also go under Security.
Security:
Safety critical: controls actuators that can cause physical harm or manages data from sensors that may need to trigger critical notifications (e.g. a fire alarm).
Business critical: correct and secure operation is essential to organizational activities.
Public service: provides a service to third-party consumers which they may rely upon.
Privacy:
Private/PII: Contains or can be used to infer private or personally identifiable information (PII) about one or more people, such as location, name, gender, activity, video/images, health, etc.
Business confidential: Manages information which, if disclosed, could cause reputational or financial harm to an organization.
The Security and Privacy considerations sections should each have a selectable checklist of categories as well as a more general text entry box. The categories we are currently using are as follows (I have grouped them into Security and Privacy). I put "Business Confidential" under Privacy although it could also go under Security.
Security:
Privacy:
See https://github.com/w3c/wot-usecases/pull/255 for an analysis of current use cases.