Templates

Publishing a Template

Any product with its associated components, use cases, threats, weaknesses, and countermeasures can be published as a template. The product can be published from the Action menu on the product listed in the products table.

Publishing a product as a template has the effect of removing it from product list and adding it to the list of templates, which is accessible from the Administration menu.

Using a Template

Templates are available to all users of the system, including users that belong to other business units. They are displayed on the "Templates" tab of the main questionnaire (only if we have the main questionnaire activated):

Components included in the template are added to the generated threat model.

If we want to add a template to the product in the diagramming panel, we press the button "Import template".

Then a new window appears, and we select the desired template to import.

And press the button "Import template".

The architecture and the complete threat model are imported into our product.

Editing a Template

To edit a template, you must have permission to edit it, that essentially means that you are the owner of the template. 

You can then edit a specific template by going to the Templates & Libraries menu option. When you select the template you want to edit, the tabs: Architecture, Threats and Countermeasures are enabled. 

From that point, you can edit the template as if it were a Product. 

Importing or exporting a Template

To import or export a template you go to the Templates and Libraries menu option and look for "Import Template".

or export options.

We use a simple XML format to represent Template within the system. This format is easily parseable with common libraries and tools.

Creating Components within Templates

From within the "Architecture" tab of the Template and in the sub tab "Diagram", we can click on one component from the component definition list (shown on the right side) 

This brings up the "Component Details" popup from which we can select and answer the different questions:

Once complete this adds our new component to the Template and we can now see it within the architectural diagram:

From within the "Threats" tab we now have the opportunity to create a new use case for our new component from the "Actions" drop-down as we see below:

And once the new Use-case is in place we can add new threats manually or add threats from an existing library.