Asset Identification (SysML/UML)

In SOX assets are defined based on a system model (SysML/UML).

Model elements that have been identified as potential cybersecurity assets (asset candidates) can be marked by applying the stereotype <<Asset>> to them.

To apply stereotype <<Asset>> to a model element

1. Identify assets in your UML/SysML system model.

2. In the model explorer or in a diagram, select the identified model element.

3. Go to the Properties view and select Profile showing all stereotypes assigned to the element.

4. Click on the ‘plus’ icon and select stereotype “Asset” in the listing of Applicable Stereotypes on the left.

5. Move the stereotype “Asset” to the listing of Applied Stereotypes on the right by clicking the right arrow.

6. Confirm with OK.

The figure shows an example of how to define an item flow in an IBD or a system element in a SOX concept diagram as an asset.

Open

Applying stereotype <<Asset>>

Outcome: Stereotype <<Asset>> is added to the element and shown in the label in addition to other stereotypes.

Elements having stereotype <<Asset>> are available in SOX TARA.