Annex 2- Summary of the findings of the EU coordinated risk assessment 45 The EU coordinated risk assessment follows the approach set out in the ISO/IEC: 27005 risk assessment methodology. It reflects the assessment of a set of parameters:      The main types of threats posed to 5G networks; The main threat actors; The main assets and their degree of sensitivity; The main vulnerabilities; and The main risks and related scenarios. Threats, assets and vulnerabilities Compromised confidentiality Compromised availability Compromised integrity Non adversary/ accidental 5 4 Individual hacker 3 2 Nation state or nation state-backed actor 1 0 Insider within a telecom operator or subcontractor hacktivist group organized crime group Figure 1 - Consolidated view on threat category by threat actor -Threats Threats posed by states or state-backed actors, are perceived to be of highest relevance. They represent indeed the most serious as well as the most likely threat actors, as they can have the motivation, intent and most importantly the capability to conduct persistent and sophisticated attacks on the security of 5G networks. 45 Full report: https://ec.europa.eu/digital-single-market/en/news/eu-wide-coordinated-risk-assessment-5g-networkssecurity