RAND Weights Security Levels map SL1–SL5 to OC1–OC5 attacker tiers; RAND does not define them by a time-to-theft window
SL1–SL5 map to OC1–OC5observed
| Value kind | observed — Reported measurements, counts, and specifications keep the precision and scope stated by their source; an exact specification is not treated as a range. |
|---|---|
| As of | 2024-05-30 |
| Source | RAND RRA2849-1 |
| Review | checking…review by 2027-04-16 · standard cadence |
| Recorded changes | last 2026-10-16 · 4 revisions tracked |
| Claim id | rand-theft-benchmark-a-security-level-is |
Where the guide uses it
- 11.1 Threat Model, Assets & Security Levels for AI Infrastructure
- 11.9 Insider Threat & Human-Layer Security
← Full numbers register — every date-stamped figure in the guide, with revision history.