To manage your threat scenarios, open the project threat scenarios view as described in
TARA Main Table And Views and click the green ‘plus’ icon in the upper right corner to add a new row.
Provide Name and Description to describe a threat scenario, and select a Threat Category from the drop-down menu. Currently, C-SOX TARA provides STRIDE as the threat model. The Security Attribute appropriate for the STRIDE category is set automatically and displayed in the corresponding column (read only).
A simplified possible outcome of making these inputs is indicated in next figure:
To assign a threat scenario to a damage scenario you need to add a row for threat scenarios to the TARA table. Right-click on a row in the master table and select “Add Threat Scenario” from the context menu.
This activity will create a nested table containing your threat scenarios. The table can be populated from project threat scenarios view by drag and drop or by selecting from drop-down menu in column Threat Scenarios.
