RAND Weights Security Levels map SL1–SL5 to OC1–OC5 attacker tiers; RAND does not define them by a time-to-theft window
SL1–SL5 map to OC1–OC5observed
| Value kind | observed — Reported measurements, counts, and specifications keep the precision and scope stated by their source; an exact specification is not treated as a range. |
|---|---|
| As of | 2024 |
| Source | RAND RRA2849-1 |
| Review | checking…review by 2026-08-13 · standard cadence |
| Recorded changes | last 2026-08-31 · 3 revisions tracked |
| Claim id | rand-theft-benchmark-a-security-level-is |
Where the guide uses it
- 11.1 Threat Model, Assets & Security Levels for AI Infrastructure
- 11.9 Insider Threat & Human-Layer Security
← Full numbers register — every date-stamped figure in the guide, with revision history.