NP-200 system security design review

NimbusPump NP-200 Program · candidate AREV-0004 vs effective baseline DRB-0007

PRJ-2026-0042-DRV-0001Threat review

Threat workbench

STRIDE register for candidate AREV-0004; a row opens the threat record.

Context: element AE-000061 (Cloud telemetry ingestion service)


Cloud telemetry stream exposes PHI to unauthorized readerTV-000131Information disclosure	Medium	Treatment planned	Owen Blake	Medium
Protocol downgrade between gateway and cloud ingestionTV-000138TamperingInformation disclosure	Low	Assessed	Owen Blake	High

Cloud telemetry stream exposes PHI to unauthorized readerTV-000131Information disclosure
MediumTreatment planned
Owner
Owen Blake
Protocol downgrade between gateway and cloud ingestionTV-000138TamperingInformation disclosure
LowAssessed
Owner
Owen Blake

2 threats