Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

To manage your threat scenarios, open the project threat scenarios view and click the green ‘plus’ a Threat Scenarios Catalog in the Global- or Project Catalogs or create a new Global Catalog. Click the grafik-20240827-060627.pngImage Added - icon in the upper right corner to add a new row.

...

Provide a Name and Description to describe a threat scenario, and select a an Attack Level, Threat Category, and Security Attribute from the drop-down menu. Currently, C-SOX TARA provides STRIDE as the threat model. The Security Attribute appropriate for the STRIDE category is set automatically and displayed in the corresponding column (read only).

...

A simplified possible outcome of making these inputs is indicated in next figure:

...

...

To assign a threat scenario to a damage scenario you need to add a row for threat scenarios to the TARA table. Right-click on a , right-click the relevant row in the master table TARA and select “Add Threat Scenario” from the context menu Add Threat Scenario.

...

This activity will create a nested table containing your threat scenarios. The table can be populated from project threat scenarios view by drag and the Project- and Global Threat Scenarios view via drag-and-drop or by selecting one from drop-down menu in column Threat Scenarios.

...

Adding a Threat Scenario from a Global Catalog via drag-and-drop or via the drop-down-menu (indicated by the grafik-20240905-075455.pngImage Added-icon) will create a copy in the Project Catalogs folder.

An entry fom a catalog can either be dragged into a line in the TARA Threat Scenario, overwriting its current contents or into the empty space underneath the last populated line, creating a new line in the TARA Threat Scenario table containing the Catalog entry.

...