What is the difference between a draw.io shape and an IriusRisk component? – IriusRisk Support

The following table provides a summary of the differences and similarities between draw.io shapes and IriusRisk components.

Draw.io Shapes	IriusRisk Components
Does not have a risk pattern attached Only viewed as an object on the diagram Does not introduce additional risks to the threat model	Has one or more risk patterns attached Imports a set of risk patterns, threats, weaknesses, and recommended countermeasures Introduces additional risks to the threat model
Can be dropped on the diagram canvas outside of a trust zone	Must be dropped into a trust zone
Risk Pattern mapping can be added from the shape editor interface on the diagramming interface. An existing component risk pattern can be references for this shape and can be added in the drop down under the property editor on the diagraming interface.	Risk patterns can be added from customization tab > Objects These items are added from each library and are added by risk patterns.
Draw.io object color and shape vary based on type and vendor EC2 Instance	IriusRisk components have a consistent shape and color (surrounded by a blue circle) and are found in the IriusRisk - blades on the left hand side of the diagraming interface. EC2 Instance
Draw.io shapes are not nestable.	IriusRisk components are nestable, meaning that you can place additional components within the component to demonstrate a parent-child relationship
Can be renamed to match internal naming convention or a primary/secondary designation (e.g., EC2 - South)	Can be renamed to match internal naming convention or a primary/secondary designation (e.g., EC2 - South)

Related articles