1 files changed, 94 insertions, 0 deletions
diff --git a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml
new file mode 100644
index 0000000..9800e0c
--- /dev/null
+++ b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml
@@ -0,0 +1,94 @@
+@startuml
+!include <archimate/Archimate>
+left to right direction
+skinparam linetype polyline
+
+
+Title  RSO Page 9:  Fig. 20: Risk and Security Overlay 
+
+' grouping
+Grouping(riskex, "Risk Experience"){
+
+Motivation_Assessment(hazard_ass, "Hazard Assessment")
+
+' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''
+' STRATEGY
+' together{
+Strategy_Resource(threat_enabler, "Threat Enabler")
+Strategy_Resource(asset, "Asset at Risk")
+Strategy_Capability(vuln, "Vulnerability\nCapability")
+' }
+
+' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''
+' business
+' together{
+Business_Actor(threat_agent, "ThreatAgent\nBusiness Actor")
+Business_Event(threat_event, "Business Threat Event")
+Business_Event(loss_event, "Business Loss Event")
+' }
+Business_Service(control, "Implemented Control Measure")
+
+' grouping
+}
+
+' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''
+' Motivation
+together{
+Motivation_Goal(global_goal, "Goal")
+Motivation_Assessment(risk_assessment, "Risk Assessment")
+Motivation_Goal(goal, "<<ControlObjective>>\nGoal")
+Motivation_Driver(risk_driver, "»Risk«\nDriver") 
+Motivation_Stakeholder(risk_assessor, "Risk\nAssessor")
+Motivation_Stakeholder(risk_subj, "Risk\nSubject")
+Motivation_Requirement(sec_req, "Security\nRequirement")
+Motivation_Requirement(control_req, "ControlMeasure\nRequirement")
+Motivation_Principle(sec_princ, "Security_Principle")
+}
+
+
+' Beziehungen
+Rel_Association(hazard_ass, threat_event)
+Rel_Association(vuln, threat_event)
+Rel_Association(vuln, threat_enabler)
+Rel_Association(vuln, loss_event)
+Rel_Association(vuln, asset)
+
+Rel_Association(control, threat_enabler)
+Rel_Association(control, asset)
+
+Rel_Association(threat_event, threat_enabler)
+Rel_Association(loss_event, asset)
+
+
+Rel_Association(riskex, risk_driver)
+
+
+Rel_Association(risk_subj,global_goal)
+Rel_Association(risk_assessment,risk_driver)
+Rel_Association(risk_assessment,risk_assessor)
+Rel_Association(risk_assessment,goal)
+ ' Rel_Association(, )
+
+Rel_Realization(sec_req,goal,Realise)
+Rel_Realization(sec_princ,goal,Realise)
+Rel_Realization(control_req,sec_princ,Realise)
+
+' Rel_Realization(control,sec_princ,Realise)
+
+Rel_Realization(control,control_req,Realise)
+
+Rel_Flow(loss_event,global_goal,Flow)
+
+Rel_Assignment(threat_agent,threat_event,Assign)
+
+
+
+
+Strategy_Resource(root, "<<Trust Anchor>>\nRoot Public Key")
+Strategy_Resource(system, "Application")
+Rel_Association(root, system)
+
+
+
+@enduml
+