Hu.E.HummH-e.9
User Human has no access to email: users with the role Human do not have access to email via either a local client or via webmail. Since email is a source of risk, through which attackers could attack devices connected to the system, this should be added to the model. If users in role Human really do not use email on any device (i.e. that is a policy and not an oversight), then select the control strategy to indicate this.