• 1 Status
• 2 Top Event
• 3 Minimal Cut Set
• 4 Description
• 5 Severity
• 6 Likelihood
• 7 Mitigation
• 8 Residual Severity
• 9 Residual Likelihood
• 10 Affected Documents
• 11 Monitoring

FTA-003: Bulk Deletion Discovered After Retention ¶

1 Status ¶

2 Top Event ¶

Permanent loss of user data (TOP-1)

3 Minimal Cut Set ¶

{E3, E6} — accidental bulk deletion noticed only after the retention window has expired

4 Description ¶

A user deletes a large set of records by mistake and only realises months later. If the retention window is shorter than the typical discovery time, the deleted records have already been purged and cannot be recovered.

5 Severity ¶

9

6 Likelihood ¶

2

7 Mitigation ¶

Retain deleted records for at least 30 days and require an explicit second confirmation for any bulk deletion, so the accidental deletion is both less likely and recoverable within the discovery time observed in support cases.

8 Residual Severity ¶

9

9 Residual Likelihood ¶

1

10 Affected Documents ¶

11 Monitoring ¶

Support cases involving recovery of deleted records are tagged; a case arriving after the retention window reopens the analysis.