[UC Template] Security and Privacy Categories

[mmccool]

The Security and Privacy considerations sections should each have a selectable checklist of categories as well as a more general text entry box. The categories we are currently using are as follows (I have grouped them into Security and Privacy). I put "Business Confidential" under Privacy although it could also go under Security.

Security:

• Safety critical: controls actuators that can cause physical harm or manages data from sensors that may need to trigger critical notifications (e.g. a fire alarm).
• Business critical: correct and secure operation is essential to organizational activities.
• Public service: provides a service to third-party consumers which they may rely upon.

Privacy:

• Private/PII: Contains or can be used to infer private or personally identifiable information (PII) about one or more people, such as location, name, gender, activity, video/images, health, etc.
• Business confidential: Manages information which, if disclosed, could cause reputational or financial harm to an organization.

See #255 for an analysis of current use cases.