The Risk Scenarios module is a basic module for defining the associated risk inputs. It can also be seen as a risk catalogue. This module defines the various related links between assets/processes/aspects, supporting assets, measures in place and then between threats and vulnerabilities/root causes.
System integrity is designed with a logic that does not allow unrelated links to be defined within assets/processes/aspects, supporting assets and measures in place. This ensures the correctness of the information.
The linkages of threats and vulnerabilities/root causes with assets/processes/aspects, supporting assets, established measures are identified by the manager himself according to his knowledge of the real environment (or we will help him with this in the implementation).
The way of defining risk scenarios in terms of the system logic offers different ways of approaching risk scenarios, either at the level of the frequency of scenarios or at the level of the point of view of the main subject of risk.
The following are used as inputs:
- primary assets/processes/aspects
- supporting assets
- catalogue of measures
- threat catalogue
- catalogue of vulnerabilities/root causes
Risk scenarios are also used in the context of risk analysis, management of audit findings or incidents and events.
