View TRAK:SV-13
Name
Solution Risk View
Description
Part of the TRAK Solution Perspective and one of the 24 TRAK architecture views.
Describes the threats posed to a system as a result of vulnerabilities that expose the system of interest (or other resources) to risk. Describes how these are managed, mitigated or controlled so that the risks are kept at a tolerable level.
Covered by TRAK IPR and licenses
Specification
Conforms to the SVp-13 Solution Risk Viewpoint
Applications or Uses
Typically used to represent:
- how risks are managed, mitigated and controlled, for example by design
- the origins of a risk in terms of particular threats which exploit system vulnerabilities, for example to support an analysis of the security features of a system
- how threats can cause particular events (which might be part of a sequence that leads to a top level event that needs to be prevented, mitigated or minimised - addressed in the SVp-11 Solution Event Causes Viewpoint).
Covered by TRAK IPR and licenses
Typical forms:
- (Risk) Identification
- organisation chart
- (Risk) Analysis
- (Risk) Management & Control
Examples
Risk identification for a Nuclear Reactor
Image:SV13_solutionRisk_NuclearReactor.jpg
Covered by TRAK IPR and licenses
Tool Support
Comments
The SV-13 is the master architecture view for Mitigation, Risk, Threat and Vulnerability.
Covered by TRAK IPR and licenses
Category:View
Category:Solution
Category:Structure
Category:Governance
Category:Membership