Threat Model Entity – IriusRisk Support

Models the relationship between Threats, Weaknesses, and Countermeasures in a Component.

If we have a Component A with:

a threat T inside
a weakness W inside the threat T,
a countermeasure C inside the weakness W.

We will have the following rows in this dataset:

Component	Threat ID	Weakness ID	Countermeasure ID	Mitigation
A	T	null	null	null
A	T	W	null	null
A	T	null	C	50
A	T	W	C	50

Exists an entry for the Threat, another for the Threat-Weakness, another for the Threat-Countermeasure, and another for the Threat-Weakness-Countermeasure. In the rows with Threat and Countermeasure, exists a mitigation value.

The most common use case is to retrieve the Threat and Countermeasure with Weakness null, to get the mitigation value.

Threat Model Field	Description
Threat Model ID THREAT MODEL CONNECTOR	The ID of the Threat Model.
Project ID PROJECT CONNECTOR ONE OR MANY	The ID of the Project NOT NULL
Component ID COMPONENT CONNECTOR ONE OR MANY	The ID of the Component NOT NULL
Threat ID THREAT CONNECTOR ONE OR MANY	The ID of the Threat NOT NULL
Countermeasure ID COUNTERMEASURE CONNECTOR ONE OR MANY	The ID of the Countermeasure NULL
Threat Model Mitigation	Mitigation percentage of the Countermeasure over the Threat NULL

Related articles