diff options
Diffstat (limited to 'PlantUML-ModelingTrust')
15 files changed, 993 insertions, 596 deletions
diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.png b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.png Binary files differindex 4328d50..0f886e6 100644 --- a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.png +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.png diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.puml b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.puml index 08a84ca..995508a 100644 --- a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.puml +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.puml @@ -7,19 +7,19 @@ Title Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern Grouping(M_Group,"RiskExperience"){ ' Elemente together{ -Motivation_Driver(driver, "»Risk«\nDriver") -Motivation_Stakeholder(assessor, "Risk\nAssessor") +Motivation_Driver(driver, "Manipulated ISO Image") +Motivation_Stakeholder(assessor, "NetBSD User") } -Motivation_Assessment(assessment, "Risk\nAssessment") +Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity") } together{ -Motivation_Goal(goal, "<<ControlObjective>>\nGoal") +Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image") -Motivation_Requirement(req, "<<Control Measure>>\nRequirement") +Motivation_Requirement(req, "Check GnuPG Signature of ISO Image") } @@ -34,7 +34,7 @@ Rel_Association(driver, assessment) Rel_Association(assessor, assessment) Rel_Association(assessment,goal) -Rel_Realization(req,goal) +Rel_Realization(req,goal,realises) @enduml diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.svg b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.svg index 7fbc4ae..d4a3f57 100644 --- a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.svg +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.svg @@ -1 +1 @@ -<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="405px" preserveAspectRatio="none" style="width:589px;height:405px;background:#FFFFFF;" version="1.1" viewBox="0 0 589 405" width="589px" zoomAndPan="magnify"><title>Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern</title><defs><filter height="300%" id="fpqf20exfc9b1" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4" dy="4" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><g class="title" data-source-line="4"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="404.2764" x="85.3618" y="24.9659">Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern</text></g><!--cluster M_Group--><g class="cluster" data-qualified-name="M_Group" data-source-line="340" id="ent0002"><path d="M8.5,141.9079 L100.1006,141.9079 A3.75,3.75 0 0 1 102.6006,144.4079 L109.6006,164.252 L388.5,164.252 A2.5,2.5 0 0 1 391,166.752 L391,395.4079 A2.5,2.5 0 0 1 388.5,397.9079 L8.5,397.9079 A2.5,2.5 0 0 1 6,395.4079 L6,144.4079 A2.5,2.5 0 0 1 8.5,141.9079" fill="#FFFFFF" filter="url(#fpqf20exfc9b1)" style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;"/><line style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;" x1="6" x2="109.6006" y1="164.252" y2="164.252"/><text fill="#000000" font-family="Verdana" font-size="12" font-weight="bold" lengthAdjust="spacing" textLength="90.6006" x="10" y="156.736">RiskExperience</text></g><!--entity driver--><g class="entity" data-qualified-name="M_Group.driver" data-source-line="274" id="ent0003"><path d="M42,301.5679 L158,301.5679 L170,313.5679 L170,362.2561 L158,374.2561 L42,374.2561 L30,362.2561 L30,313.5679 L42,301.5679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M151.061,312.0109 A0.5,0.5 0 0 0 150.5608,312.5111 L150.5608,314.9905 C149.1252,315.083 147.8172,315.6464 146.7884,316.5258 L145.0547,314.7921 A0.5,0.5 0 0 0 144.7012,314.6459 A0.5,0.5 0 0 0 144.3477,314.7921 A0.5,0.5 0 0 0 144.3477,315.4991 L146.0804,317.2318 C145.195,318.2617 144.6283,319.572 144.5332,321.0052 L142.0667,321.0052 A0.5,0.5 0 0 0 141.5665,321.5049 A0.5,0.5 0 0 0 142.0667,322.0051 L144.5441,322.0051 C144.6687,323.4219 145.2532,324.7076 146.145,325.7139 L144.3828,327.4755 L144.342,327.5169 A0.5001,0.5001 0 0 0 145.0489,328.2238 L145.051,328.2238 L145.0903,328.183 L146.8638,326.4095 C147.8828,327.2543 149.1633,327.7928 150.5607,327.8828 L150.5607,330.5049 A0.5001,0.5001 0 0 0 151.5607,330.5049 L151.5607,327.8699 C152.9382,327.7461 154.1912,327.1877 155.1832,326.3346 L157.0725,328.2239 A0.5001,0.5001 0 0 0 157.7794,327.5169 L157.7386,327.4756 L155.8891,325.6266 C156.7388,324.6321 157.2926,323.3785 157.413,322.0051 L160.0624,322.0051 A0.5001,0.5001 0 0 0 160.0624,321.0052 L157.4233,321.0052 C157.3305,319.6109 156.7926,318.3361 155.9521,317.3222 L157.7758,315.4991 A0.5,0.5 0 0 0 157.7758,314.7921 A0.5,0.5 0 0 0 157.0668,314.7921 L155.2555,316.6028 C154.2509,315.7129 152.9692,315.1303 151.5606,315.0034 L151.5606,312.511 A0.5,0.5 0 0 0 151.0609,312.0108 M150.5608,316.4943 L150.5608,319.9747 C150.4819,320.0007 150.4053,320.0323 150.3318,320.0693 L147.8472,317.5842 C148.5982,316.9739 149.533,316.5793 150.5607,316.4943 M151.5607,316.5114 C152.5623,316.6275 153.472,317.0397 154.1993,317.6596 L151.801,320.0579 C151.7239,320.0206 151.6434,319.9891 151.5607,319.9638 M147.1387,318.2906 L149.6078,320.7592 C149.5634,320.8376 149.5251,320.92 149.4936,321.0051 L146.0375,321.0051 C146.1249,319.9787 146.5231,319.0422 147.1387,318.2905 M154.8917,318.3825 C155.4648,319.1168 155.8353,320.0183 155.9195,321.0051 L152.6629,321.0051 C152.6285,320.912 152.5861,320.8223 152.5363,320.7375 M146.0514,322.005 L149.4465,322.005 C149.474,322.1077 149.5114,322.2074 149.5571,322.3017 L147.2012,324.6571 C146.5793,323.9275 146.1657,323.0139 146.0514,322.0051 M152.7094,322.005 L155.9061,322.005 C155.7969,322.9712 155.4115,323.8524 154.8302,324.5676 L152.5874,322.3248 L152.5874,322.3243 C152.6384,322.223 152.6796,322.116 152.7094,322.005 M150.2377,323.0354 L150.2382,323.0354 C150.3397,323.0947 150.4478,323.1444 150.5607,323.1817 L150.5607,326.3789 C149.5701,326.2971 148.663,325.9263 147.9242,325.3495 M151.897,323.0484 L154.1248,325.2762 C153.4113,325.8608 152.53,326.25 151.5606,326.3624 L151.5606,323.1931 C151.6785,323.1571 151.7912,323.1082 151.897,323.0484" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.9323" x="82.5339" y="344.396">»Risk«</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.6322" x="82.6839" y="360.7401">Driver</text></g><!--entity assessor--><g class="entity" data-qualified-name="M_Group.assessor" data-source-line="270" id="ent0004"><path d="M42,195.0679 L158,195.0679 L170,207.0679 L170,254.7561 L158,266.7561 L42,266.7561 L30,254.7561 L30,207.0679 L42,195.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M156.445,210.5419 L145.582,210.5497 A0.5,0.5 0 0 0 145.5722,210.5497 C144.5839,210.5676 143.7112,211.117 143.1114,211.9269 C142.5116,212.7369 142.1589,213.815 142.1585,214.9949 C142.1581,216.1748 142.5101,217.2549 143.1093,218.0655 C143.7085,218.8761 144.5803,219.4251 145.5686,219.4442 A0.5,0.5 0 0 0 145.5779,219.4442 A0.5,0.5 0 0 0 145.5877,219.4442 L156.5097,219.454 L156.5097,219.453 C157.3349,219.4513 158.1528,219.0413 158.7695,218.2882 A0.5,0.5 0 0 0 158.7887,218.2236 A0.5,0.5 0 0 0 158.8491,218.1885 C160.1454,216.4963 160.2103,213.844 159.0155,212.04 C158.4181,211.138 157.5662,210.6014 156.6678,210.5455 C156.6151,210.5422 156.5624,210.5428 156.5097,210.5429 L156.5097,210.5419 L156.4477,210.5419 C156.4468,210.5419 156.4455,210.5419 156.4446,210.5419 M156.5101,211.5408 C156.5421,211.5409 156.5739,211.5419 156.6057,211.5439 C157.1531,211.578 157.7215,211.8959 158.1818,212.5909 C159.1024,213.9809 159.0368,216.2998 158.0568,217.5792 A0.5,0.5 0 0 0 158.0433,217.6299 A0.5,0.5 0 0 0 157.9963,217.6552 C157.5339,218.2198 157.0163,218.4565 156.5101,218.4541 L156.5075,218.4541 C156.4646,218.4538 156.4215,218.4515 156.3788,218.4479 C155.8315,218.4012 155.2634,218.0693 154.8104,217.3622 C153.9045,215.948 153.9998,213.6313 154.9923,212.378 C155.4393,211.8136 155.9462,211.5615 156.4423,211.5419 L156.51,211.5419 M154.3914,211.5434 C154.3289,211.6113 154.2678,211.6825 154.209,211.7568 C152.8901,213.4222 152.7961,216.073 153.9671,217.9011 C154.0963,218.1028 154.2378,218.2868 154.3899,218.452 L145.5884,218.4442 L145.5878,218.4442 C144.9563,218.432 144.3699,218.0883 143.914,217.4717 C143.4582,216.855 143.1582,215.9739 143.1585,214.9948 C143.1589,214.0158 143.4578,213.1366 143.914,212.5205 C144.3703,211.9044 144.9583,211.5609 145.5899,211.5495" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="88.6419" y="236.896">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.6444" x="75.1778" y="253.2401">Assessor</text></g><!--entity assessment--><g class="entity" data-qualified-name="M_Group.assessment" data-source-line="277" id="ent0005"><path d="M247,195.0679 L363,195.0679 L375,207.0679 L375,254.7561 L363,266.7561 L247,266.7561 L235,254.7561 L235,207.0679 L247,195.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M359.573,206.8589 C356.9045,206.8952 354.7601,209.0967 354.7919,211.7651 C354.8075,213.0746 355.344,214.2587 356.2021,215.122 L349.8133,221.5113 A0.5,0.5 0 0 0 349.8133,222.2182 A0.5,0.5 0 0 0 350.5202,222.2182 L356.9803,215.7581 C357.7578,216.2701 358.6899,216.5642 359.6881,216.554 C362.3567,216.5267 364.5095,214.3339 364.4868,211.6654 C364.4641,208.9969 362.2746,206.8407 359.606,206.859 A0.5,0.5 0 0 0 359.5905,206.8647 A0.5,0.5 0 0 0 359.573,206.859 M359.604,207.8511 L359.6045,207.8511 A0.5,0.5 0 0 0 359.6123,207.8589 C361.7411,207.8443 363.4688,209.5445 363.487,211.6731 C363.5052,213.8017 361.8072,215.5322 359.6784,215.554 C358.7727,215.5633 357.9388,215.2621 357.2775,214.7489 A0.5,0.5 0 0 0 357.1959,214.6838 C356.3494,213.9892 355.806,212.9385 355.7919,211.7532 C355.7665,209.6247 357.4578,207.8878 359.5865,207.8589 A0.5,0.5 0 0 0 359.604,207.8511" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="293.6419" y="236.896">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.1645" x="271.4177" y="253.2401">Assessment</text></g><!--entity goal--><g class="entity" data-qualified-name="goal" data-source-line="280" id="ent0006"><path d="M454,46.0679 L570,46.0679 L582,58.0679 L582,105.7561 L570,117.7561 L454,117.7561 L442,105.7561 L442,58.0679 L454,46.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M563.025,59.8219 A0.5,0.5 0 0 0 563.0038,59.8317 A0.5,0.5 0 0 0 562.9842,59.8239 C559.565,59.8705 556.8182,62.6879 556.859,66.1072 C556.8997,69.5265 559.7111,72.2767 563.1305,72.2417 C566.5499,72.2068 569.3066,69.3995 569.2774,65.9801 C569.2482,62.5607 566.4446,59.7984 563.0251,59.8218 M563.0234,60.812 A0.5,0.5 0 0 0 563.0327,60.8218 C565.9124,60.8021 568.2528,63.1083 568.2773,65.9879 C568.3019,68.8675 566.0006,71.2124 563.121,71.2418 C560.2414,71.2713 557.8936,68.9749 557.8593,66.0953 C557.825,63.2158 560.118,60.863 562.9975,60.8238 A0.5,0.5 0 0 0 563.0233,60.8119 M563.0151,62.1639 C560.8867,62.1929 559.1734,63.9494 559.1988,66.0779 C559.2242,68.2064 560.9786,69.9237 563.1071,69.902 C565.2356,69.8803 566.9555,68.1285 566.9374,65.9999 C566.9192,63.8714 565.1696,62.1494 563.041,62.164 A0.5,0.5 0 0 0 563.0291,62.1754 A0.5,0.5 0 0 0 563.0152,62.164 M563.0425,63.1577 A0.5,0.5 0 0 0 563.0487,63.1639 C564.6374,63.153 565.9239,64.4189 565.9374,66.0077 C565.9509,67.5964 564.686,68.8859 563.0973,68.9021 C561.5086,68.9183 560.2177,67.6548 560.1988,66.0661 C560.1799,64.4774 561.4405,63.1856 563.0291,63.164 A0.5,0.5 0 0 0 563.0425,63.1578 M563.0446,64.3452 C562.1253,64.3577 561.3697,65.1333 561.3806,66.0526 C561.3916,66.9719 562.1666,67.7296 563.0859,67.7202 C564.0052,67.7108 564.7634,66.9368 564.7556,66.0175 C564.7478,65.0981 563.9758,64.339 563.0565,64.3453 A0.959,0.959 0 0 0 563.0503,64.3515 A0.959,0.959 0 0 0 563.0446,64.3453" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="106.7888" x="458.6056" y="87.896">«ControlObjective»</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.8242" x="499.0879" y="104.2401">Goal</text></g><!--entity req--><g class="entity" data-qualified-name="req" data-source-line="289" id="ent0007"><path d="M247,46.0679 L363,46.0679 L375,58.0679 L375,105.7561 L363,117.7561 L247,117.7561 L235,105.7561 L235,58.0679 L247,46.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M351.1,62.6129 A0.5001,0.5001 0 0 0 350.6527,62.8903 L346.6879,70.8551 A0.5001,0.5001 0 0 0 347.1372,71.5777 C351.7776,71.5641 356.4131,71.6294 361.0672,71.5836 A0.5001,0.5001 0 0 0 361.5105,71.3063 L365.4734,63.3356 A0.5001,0.5001 0 0 0 365.0262,62.6129 M351.4086,63.6129 L364.2196,63.6129 L360.7528,70.5836 C356.4859,70.6213 352.2201,70.573 347.9418,70.5777" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="48.0124" x="251.7436" y="87.896">«Control</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="299.756" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="55.3804" x="302.876" y="87.896">Measure»</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="73.5845" x="268.2077" y="104.2401">Requirement</text></g><!--link driver to assessment--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk8"><path d="M170.29,301.3879 C191.31,290.3079 214.39,278.1379 235.36,267.0879" fill="none" id="driver-assessment" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="201" y="280.236"> </text></g><!--link assessor to assessment--><g class="link" data-entity-1="ent0004" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk9"><path d="M170.29,230.9079 C191.08,230.9079 213.88,230.9079 234.67,230.9079" fill="none" id="assessor-assessment" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="201" y="226.736"> </text></g><!--link assessment to goal--><g class="link" data-entity-1="ent0005" data-entity-2="ent0006" data-link-type="association" data-source-line="349" id="lnk10"><path d="M355.89,194.6479 C387.89,171.3879 429.27,141.3079 461.25,118.0679" fill="none" id="assessment-goal" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="408" y="152.236"> </text></g><!--link req to goal--><g class="link" data-entity-1="ent0007" data-entity-2="ent0006" data-link-type="extension" data-source-line="349" id="lnk11"><path d="M375.4,81.9079 C396.78,81.9079 402.3,81.9079 423.67,81.9079" fill="none" id="req-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="441.67,81.9079,423.67,75.9079,423.67,87.9079,441.67,81.9079" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="408" y="77.736"> </text></g><?plantuml-src XP5DJiCm44RtFiMG3Qr4OGsgAXLQM1LGouwYoYH3CjJOr9aK1E94784T9yFZG1D-93RsoFCzU_IyHJOrLORGrpujw4upxWs_ge4oUCF03Zpb1KD67bCcPvMw83O8SAvpXFq3W6FATwKuHJwSZM3a7gnnEeCfbKiObYMMvHrQ3W0pUWjAdNXNtPFDEvD5B7SIoOuVxz4JsXIJxhFQXh51uL2nov4BzCzgufZMMiPOZ3ojqNUokEr0ylucTxo_pctTIRhGZizOBx5m9WkCZZCveOIPs-7dGT9LBwfDDTD_GbB-mEGeW4B-FUc9qwQJXoM0_VwHi-oTERk-5Pzh70pcLX9oHGkQugeAokFJ7bTj52Qeoyf7iXMhXm_UQYNGkomeoz1UzGR0lYevjEB-hUEnT9LFCJGfkBRoU1F8mbzky7Zv8JuH5fNDqQef6Z7aKeepR_wYKTNzbMdS_v-AiaLSK2E9AMf3JtL2dDIj3m00?></g></svg>
\ No newline at end of file +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="373px" preserveAspectRatio="none" style="width:796px;height:373px;background:#FFFFFF;" version="1.1" viewBox="0 0 796 373" width="796px" zoomAndPan="magnify"><title>Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern</title><defs><filter height="300%" id="f1xmu1tudueo7v" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4" dy="4" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><g class="title" data-source-line="4"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="404.2764" x="189.0644" y="24.9659">Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern</text></g><!--cluster M_Group--><g class="cluster" data-qualified-name="M_Group" data-source-line="340" id="ent0002"><path d="M8.5,141.9079 L100.1006,141.9079 A3.75,3.75 0 0 1 102.6006,144.4079 L109.6006,164.252 L461.41,164.252 A2.5,2.5 0 0 1 463.91,166.752 L463.91,363.4079 A2.5,2.5 0 0 1 461.41,365.9079 L8.5,365.9079 A2.5,2.5 0 0 1 6,363.4079 L6,144.4079 A2.5,2.5 0 0 1 8.5,141.9079" fill="#FFFFFF" filter="url(#f1xmu1tudueo7v)" style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;"/><line style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;" x1="6" x2="109.6006" y1="164.252" y2="164.252"/><text fill="#000000" font-family="Verdana" font-size="12" font-weight="bold" lengthAdjust="spacing" textLength="90.6006" x="10" y="156.736">RiskExperience</text></g><!--entity driver--><g class="entity" data-qualified-name="M_Group.driver" data-source-line="274" id="ent0003"><path d="M42,285.7379 L171.6689,285.7379 L183.6689,297.7379 L183.6689,330.082 L171.6689,342.082 L42,342.082 L30,330.082 L30,297.7379 L42,285.7379" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M164.7299,296.1809 A0.5,0.5 0 0 0 164.2297,296.6811 L164.2297,299.1605 C162.7941,299.253 161.4861,299.8164 160.4573,300.6958 L158.7236,298.9621 A0.5,0.5 0 0 0 158.3701,298.8159 A0.5,0.5 0 0 0 158.0166,298.9621 A0.5,0.5 0 0 0 158.0166,299.6691 L159.7493,301.4018 C158.8639,302.4317 158.2972,303.742 158.2021,305.1752 L155.7356,305.1752 A0.5,0.5 0 0 0 155.2354,305.6749 A0.5,0.5 0 0 0 155.7356,306.1751 L158.213,306.1751 C158.3376,307.5919 158.9221,308.8776 159.8139,309.8839 L158.0517,311.6455 L158.0109,311.6869 A0.5001,0.5001 0 0 0 158.7179,312.3938 L158.72,312.3938 L158.7592,312.353 L160.5327,310.5795 C161.5517,311.4243 162.8322,311.9628 164.2296,312.0528 L164.2296,314.6749 A0.5001,0.5001 0 0 0 165.2296,314.6749 L165.2296,312.0399 C166.6071,311.9161 167.8601,311.3577 168.8521,310.5046 L170.7414,312.3939 A0.5001,0.5001 0 0 0 171.4483,311.6869 L171.4075,311.6456 L169.558,309.7966 C170.4077,308.8021 170.9615,307.5485 171.0819,306.1751 L173.7313,306.1751 A0.5001,0.5001 0 0 0 173.7313,305.1752 L171.0922,305.1752 C170.9994,303.7809 170.4615,302.5061 169.621,301.4922 L171.4447,299.6691 A0.5,0.5 0 0 0 171.4447,298.9621 A0.5,0.5 0 0 0 170.7357,298.9621 L168.9244,300.7728 C167.9198,299.8829 166.6381,299.3003 165.2295,299.1734 L165.2295,296.681 A0.5,0.5 0 0 0 164.7298,296.1808 M164.2297,300.6643 L164.2297,304.1447 C164.1508,304.1707 164.0742,304.2023 164.0008,304.2393 L161.5162,301.7542 C162.2671,301.1439 163.202,300.7493 164.2297,300.6643 M165.2296,300.6814 C166.2312,300.7975 167.1409,301.2097 167.8682,301.8296 L165.4699,304.2279 C165.3928,304.1906 165.3124,304.1591 165.2296,304.1338 M160.8076,302.4606 L163.2767,304.9292 C163.2323,305.0076 163.1941,305.09 163.1625,305.1751 L159.7064,305.1751 C159.7938,304.1487 160.192,303.2122 160.8076,302.4605 M168.5606,302.5525 C169.1337,303.2868 169.5042,304.1883 169.5884,305.1751 L166.3318,305.1751 C166.2974,305.082 166.255,304.9923 166.2052,304.9075 M159.7203,306.175 L163.1154,306.175 C163.1429,306.2777 163.1803,306.3774 163.226,306.4717 L160.8701,308.8271 C160.2482,308.0975 159.8346,307.1839 159.7203,306.1751 M166.3783,306.175 L169.575,306.175 C169.4658,307.1412 169.0804,308.0224 168.4991,308.7376 L166.2563,306.4948 L166.2563,306.4943 C166.3073,306.393 166.3485,306.286 166.3783,306.175 M163.9066,307.2054 L163.9071,307.2054 C164.0087,307.2647 164.1167,307.3144 164.2296,307.3517 L164.2296,310.5489 C163.239,310.4671 162.3319,310.0963 161.5931,309.5195 M165.5659,307.2184 L167.7937,309.4462 C167.0802,310.0308 166.1989,310.42 165.2295,310.5324 L165.2295,307.3631 C165.3474,307.3271 165.4601,307.2782 165.5659,307.2184" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="71.2325" x="40" y="328.566">Manipulated</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="111.2325" y="328.566"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="114.3525" y="328.566">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="134.3806" y="328.566"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="137.5007" y="328.566">Image</text></g><!--entity assessor--><g class="entity" data-qualified-name="M_Group.assessor" data-source-line="270" id="ent0004"><path d="M48.83,195.2379 L164.83,195.2379 L176.83,207.2379 L176.83,238.582 L164.83,250.582 L48.83,250.582 L36.83,238.582 L36.83,207.2379 L48.83,195.2379" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M163.275,210.7119 L152.412,210.7197 A0.5,0.5 0 0 0 152.4022,210.7197 C151.4139,210.7376 150.5412,211.287 149.9414,212.0969 C149.3416,212.9069 148.9889,213.985 148.9885,215.1649 C148.9881,216.3448 149.3401,217.4249 149.9393,218.2355 C150.5385,219.0461 151.4103,219.5951 152.3986,219.6142 A0.5,0.5 0 0 0 152.4079,219.6142 A0.5,0.5 0 0 0 152.4177,219.6142 L163.3397,219.624 L163.3397,219.623 C164.1649,219.6213 164.9828,219.2113 165.5995,218.4582 A0.5,0.5 0 0 0 165.6187,218.3936 A0.5,0.5 0 0 0 165.6791,218.3585 C166.9754,216.6663 167.0403,214.014 165.8455,212.21 C165.2481,211.308 164.3962,210.7714 163.4978,210.7155 C163.4451,210.7122 163.3924,210.7128 163.3397,210.7129 L163.3397,210.7119 L163.2777,210.7119 C163.2768,210.7119 163.2755,210.7119 163.2746,210.7119 M163.3401,211.7108 C163.3721,211.7109 163.4039,211.7119 163.4357,211.7139 C163.9831,211.748 164.5515,212.0659 165.0118,212.7609 C165.9324,214.1509 165.8668,216.4698 164.8867,217.7492 A0.5,0.5 0 0 0 164.8733,217.7999 A0.5,0.5 0 0 0 164.8263,217.8252 C164.3639,218.3898 163.8463,218.6265 163.3401,218.6241 L163.3375,218.6241 C163.2946,218.6238 163.2515,218.6215 163.2088,218.6179 C162.6615,218.5712 162.0934,218.2393 161.6404,217.5322 C160.7344,216.118 160.8298,213.8013 161.8223,212.548 C162.2693,211.9836 162.7762,211.7315 163.2723,211.7119 L163.34,211.7119 M161.2214,211.7134 C161.1589,211.7813 161.0978,211.8525 161.039,211.9268 C159.7201,213.5922 159.6261,216.243 160.7971,218.0711 C160.9263,218.2728 161.0678,218.4568 161.2198,218.622 L152.4183,218.6142 L152.4178,218.6142 C151.7863,218.602 151.1999,218.2583 150.744,217.6417 C150.2882,217.025 149.9882,216.1439 149.9885,215.1648 C149.9889,214.1858 150.2878,213.3066 150.744,212.6905 C151.2003,212.0744 151.7883,211.7309 152.4199,211.7195" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.3683" x="70.4637" y="237.066">NetBSD</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="113.832" y="237.066"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="26.2442" x="116.9521" y="237.066">User</text></g><!--entity assessment--><g class="entity" data-qualified-name="M_Group.assessment" data-source-line="277" id="ent0005"><path d="M292.8,187.0679 L435.909,187.0679 L447.909,199.0679 L447.909,246.7561 L435.909,258.7561 L292.8,258.7561 L280.8,246.7561 L280.8,199.0679 L292.8,187.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M432.482,198.8589 C429.8135,198.8952 427.6691,201.0967 427.7009,203.7651 C427.7165,205.0746 428.253,206.2587 429.1111,207.122 L422.7223,213.5113 A0.5,0.5 0 0 0 422.7223,214.2182 A0.5,0.5 0 0 0 423.4293,214.2182 L429.8894,207.7581 C430.6668,208.2701 431.599,208.5642 432.5972,208.554 C435.2658,208.5267 437.4186,206.3339 437.3959,203.6654 C437.3731,200.9969 435.1837,198.8407 432.5151,198.859 A0.5,0.5 0 0 0 432.4996,198.8647 A0.5,0.5 0 0 0 432.482,198.859 M432.513,199.8511 L432.5136,199.8511 A0.5,0.5 0 0 0 432.5214,199.8589 C434.6502,199.8443 436.3779,201.5445 436.3961,203.6731 C436.4142,205.8017 434.7163,207.5322 432.5875,207.554 C431.6817,207.5633 430.8479,207.2621 430.1866,206.7489 A0.5,0.5 0 0 0 430.1049,206.6838 C429.2584,205.9892 428.715,204.9385 428.7009,203.7532 C428.6755,201.6247 430.3668,199.8878 432.4955,199.8589 A0.5,0.5 0 0 0 432.5131,199.8511" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="345.7424" y="228.896">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="368.4585" y="228.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="371.5786" y="228.896">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="290.8" y="245.2401"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="48.4683" x="293.92" y="245.2401">Integrity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="342.3884" y="245.2401"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="21.5281" x="345.5084" y="245.2401">and</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="367.0365" y="245.2401"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.7525" x="370.1566" y="245.2401">Authenticity</text></g><!--entity goal--><g class="entity" data-qualified-name="goal" data-source-line="280" id="ent0006"><path d="M596.04,46.0679 L777.4053,46.0679 L789.4053,58.0679 L789.4053,105.7561 L777.4053,117.7561 L596.04,117.7561 L584.04,105.7561 L584.04,58.0679 L596.04,46.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M770.4303,59.8219 A0.5,0.5 0 0 0 770.4091,59.8317 A0.5,0.5 0 0 0 770.3895,59.8239 C766.9703,59.8705 764.2235,62.6879 764.2643,66.1072 C764.305,69.5265 767.1164,72.2767 770.5358,72.2417 C773.9552,72.2068 776.7119,69.3995 776.6827,65.9801 C776.6535,62.5607 773.8499,59.7984 770.4304,59.8218 M770.4287,60.812 A0.5,0.5 0 0 0 770.438,60.8218 C773.3177,60.8021 775.6581,63.1083 775.6826,65.9879 C775.7072,68.8675 773.4059,71.2124 770.5263,71.2418 C767.6467,71.2713 765.2989,68.9749 765.2646,66.0953 C765.2303,63.2158 767.5233,60.863 770.4028,60.8238 A0.5,0.5 0 0 0 770.4286,60.8119 M770.4204,62.1639 C768.292,62.1929 766.5787,63.9494 766.6041,66.0779 C766.6295,68.2064 768.3839,69.9237 770.5124,69.902 C772.6409,69.8803 774.3608,68.1285 774.3427,65.9999 C774.3245,63.8714 772.5749,62.1494 770.4463,62.164 A0.5,0.5 0 0 0 770.4344,62.1754 A0.5,0.5 0 0 0 770.4205,62.164 M770.4478,63.1577 A0.5,0.5 0 0 0 770.454,63.1639 C772.0427,63.153 773.3292,64.4189 773.3427,66.0077 C773.3562,67.5964 772.0913,68.8859 770.5026,68.9021 C768.9139,68.9183 767.623,67.6548 767.6041,66.0661 C767.5852,64.4774 768.8458,63.1856 770.4344,63.164 A0.5,0.5 0 0 0 770.4478,63.1578 M770.4499,64.3452 C769.5306,64.3577 768.775,65.1333 768.7859,66.0526 C768.7968,66.9719 769.5719,67.7296 770.4912,67.7202 C771.4105,67.7108 772.1687,66.9368 772.1609,66.0175 C772.1531,65.0981 771.3811,64.339 770.4618,64.3453 A0.959,0.959 0 0 0 770.4556,64.3515 A0.959,0.959 0 0 0 770.4499,64.3453" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="38.2563" x="594.04" y="87.896">Secure</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="632.2963" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="48.4683" x="635.4163" y="87.896">Integrity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="683.8846" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="21.5281" x="687.0047" y="87.896">and</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="708.5328" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.7525" x="711.6528" y="87.896">Authenticity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="625.0062" y="104.2401"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="628.1262" y="104.2401">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="639.5143" y="104.2401"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.3683" x="642.6344" y="104.2401">NetBSD</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="686.0027" y="104.2401"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="689.1227" y="104.2401">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="709.1508" y="104.2401"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="712.2708" y="104.2401">Image</text></g><!--entity req--><g class="entity" data-qualified-name="req" data-source-line="289" id="ent0007"><path d="M260.67,54.2379 L468.0395,54.2379 L480.0395,66.2379 L480.0395,97.582 L468.0395,109.582 L260.67,109.582 L248.67,97.582 L248.67,66.2379 L260.67,54.2379" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M456.1395,70.7829 A0.5001,0.5001 0 0 0 455.6922,71.0603 L451.7274,79.0251 A0.5001,0.5001 0 0 0 452.1767,79.7477 C456.8171,79.7341 461.4526,79.7994 466.1067,79.7536 A0.5001,0.5001 0 0 0 466.55,79.4763 L470.5129,71.5056 A0.5001,0.5001 0 0 0 470.0657,70.7829 M456.4481,71.7829 L469.2591,71.7829 L465.7923,78.7536 C461.5254,78.7913 457.2596,78.743 452.9813,78.7477" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="33.9362" x="258.67" y="96.066">Check</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="292.6062" y="96.066"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.5643" x="295.7263" y="96.066">GnuPG</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="335.2906" y="96.066"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="54.6844" x="338.4106" y="96.066">Signature</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="393.095" y="96.066"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="396.215" y="96.066">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="407.6031" y="96.066"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="410.7231" y="96.066">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="430.7512" y="96.066"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="433.8713" y="96.066">Image</text></g><!--link driver to assessment--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk8"><path d="M184.15,286.7279 C214.59,275.8879 249.71,263.3779 280.75,252.3279" fill="none" id="driver-assessment" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="214.67" y="271.036"> </text></g><!--link assessor to assessment--><g class="link" data-entity-1="ent0004" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk9"><path d="M177.32,222.9079 C209.24,222.9079 247.34,222.9079 280.72,222.9079" fill="none" id="assessor-assessment" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="214.67" y="218.736"> </text></g><!--link assessment to goal--><g class="link" data-entity-1="ent0005" data-entity-2="ent0006" data-link-type="association" data-source-line="349" id="lnk10"><path d="M447.86,186.5979 C495.6,165.5879 555.48,139.2279 603.22,118.2179" fill="none" id="assessment-goal" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="530.54" y="139.796"> </text></g><!--link req to goal--><g class="link" data-entity-1="ent0007" data-entity-2="ent0006" data-link-type="extension" data-source-line="349" id="lnk11"><path d="M480.11,81.9079 C513.95,81.9079 532.75,81.9079 565.73,81.9079" fill="none" id="req-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="583.73,81.9079,565.73,75.9079,565.73,87.9079,583.73,81.9079" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="42.9123" x="511.04" y="77.736">realises</text></g><?plantuml-src XL9DJnin4BtxLqptGbO2UcvL8OK6eXpIeYmzKOGiU_2EujZ1EwPygF-TiKb948XUrYFxlJTltkmd2iPdY_1D9zFJIZD-7l-hZfJ7QmQEaCZr39OI6gOOb3edzWXmfXt2bwy0f-GEI_43-RYRm2J-2Jvg2miQbZ0U1Xo65GOM0ZEc04fDKynh2cuqlwhbVbEm9tThJ8J1ODC-gZquyLXug3Wwv1xJevf7fbjTR5nD4jrY6jbwx4Cpru7MsOjr2xFk9ynMugzfOPVJiLvY7xqLegx6Og5kZFyQC3Mj-gjsALl_6qOfXLE7YzVmEy1CFBf4V0ywM1XdiHgOZ5o8Mf5xVu1fr7xav2Dg7PgSy0CbQIFDDaPtndlbTO4tMTPKpIQy4TtlFPebJ4C-cq97BcWkRKHfLw8ut8Fd8E7WeYThCLmU706dFB0yrVFLIy8XvcHG7aayXz9-2x3o1xpGg_WnFX3sEJWCQe6-f1eDLTSl6zp6sxx1R9VrVrHTKCbLmYc81MfF3y-8aagDF9LBGRVg2G00?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.png b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.png Binary files differnew file mode 100644 index 0000000..39fc0f1 --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.png diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.puml b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.puml new file mode 100644 index 0000000..bafcffa --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.puml @@ -0,0 +1,43 @@ +@startuml +!include <archimate/Archimate> +left to right direction + +Title Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Manipulated Signature + +Grouping(M_Group,"RiskExperience"){ +' Elemente +together{ +Motivation_Driver(driver, "Manipulated ISO Image") +Motivation_Stakeholder(assessor, "NetBSD User") +} + +Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity") + +} + + +together{ +Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image") + +Motivation_Requirement(req, "Check GnuPG Signature of ISO Image") + +Motivation_Requirement(reqwot, "Check WoT of Public Signing Key") +} + + +' driver -[hidden]-> trust +' trust -[hidden]-> resource +' intention -[hidden]down-> trust + + + +' Beziehungen +Rel_Association(driver, assessment) +Rel_Association(assessor, assessment) +Rel_Association(assessment,goal) + +Rel_Realization(req,goal,"realises integrity") +Rel_Realization(reqwot,goal,"realises authenticity") + +@enduml + diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.svg b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.svg new file mode 100644 index 0000000..3721a39 --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.svg @@ -0,0 +1 @@ +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="447px" preserveAspectRatio="none" style="width:866px;height:447px;background:#FFFFFF;" version="1.1" viewBox="0 0 866 447" width="866px" zoomAndPan="magnify"><title>Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Manipulated Signature</title><defs><filter height="300%" id="f1byrxnqenlivy" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4" dy="4" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><g class="title" data-source-line="4"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="576.3639" x="138.0207" y="24.9659">Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Manipulated Signature</text></g><!--cluster M_Group--><g class="cluster" data-qualified-name="M_Group" data-source-line="340" id="ent0002"><path d="M8.5,215.7379 L100.1006,215.7379 A3.75,3.75 0 0 1 102.6006,218.2379 L109.6006,238.082 L461.41,238.082 A2.5,2.5 0 0 1 463.91,240.582 L463.91,437.2379 A2.5,2.5 0 0 1 461.41,439.7379 L8.5,439.7379 A2.5,2.5 0 0 1 6,437.2379 L6,218.2379 A2.5,2.5 0 0 1 8.5,215.7379" fill="#FFFFFF" filter="url(#f1byrxnqenlivy)" style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;"/><line style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;" x1="6" x2="109.6006" y1="238.082" y2="238.082"/><text fill="#000000" font-family="Verdana" font-size="12" font-weight="bold" lengthAdjust="spacing" textLength="90.6006" x="10" y="230.566">RiskExperience</text></g><!--entity driver--><g class="entity" data-qualified-name="M_Group.driver" data-source-line="274" id="ent0003"><path d="M42,359.5679 L171.6689,359.5679 L183.6689,371.5679 L183.6689,403.912 L171.6689,415.912 L42,415.912 L30,403.912 L30,371.5679 L42,359.5679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M164.7299,370.0109 A0.5,0.5 0 0 0 164.2297,370.5111 L164.2297,372.9905 C162.7941,373.083 161.4861,373.6464 160.4573,374.5258 L158.7236,372.7921 A0.5,0.5 0 0 0 158.3701,372.6459 A0.5,0.5 0 0 0 158.0166,372.7921 A0.5,0.5 0 0 0 158.0166,373.4991 L159.7493,375.2318 C158.8639,376.2617 158.2972,377.572 158.2021,379.0052 L155.7356,379.0052 A0.5,0.5 0 0 0 155.2354,379.5049 A0.5,0.5 0 0 0 155.7356,380.0051 L158.213,380.0051 C158.3376,381.4219 158.9221,382.7076 159.8139,383.7139 L158.0517,385.4755 L158.0109,385.5169 A0.5001,0.5001 0 0 0 158.7179,386.2238 L158.72,386.2238 L158.7592,386.183 L160.5327,384.4095 C161.5517,385.2543 162.8322,385.7928 164.2296,385.8828 L164.2296,388.5049 A0.5001,0.5001 0 0 0 165.2296,388.5049 L165.2296,385.8699 C166.6071,385.7461 167.8601,385.1877 168.8521,384.3346 L170.7414,386.2239 A0.5001,0.5001 0 0 0 171.4483,385.5169 L171.4075,385.4756 L169.558,383.6266 C170.4077,382.6321 170.9615,381.3785 171.0819,380.0051 L173.7313,380.0051 A0.5001,0.5001 0 0 0 173.7313,379.0052 L171.0922,379.0052 C170.9994,377.6109 170.4615,376.3361 169.621,375.3222 L171.4447,373.4991 A0.5,0.5 0 0 0 171.4447,372.7921 A0.5,0.5 0 0 0 170.7357,372.7921 L168.9244,374.6028 C167.9198,373.7129 166.6381,373.1303 165.2295,373.0034 L165.2295,370.511 A0.5,0.5 0 0 0 164.7298,370.0108 M164.2297,374.4943 L164.2297,377.9747 C164.1508,378.0007 164.0742,378.0323 164.0008,378.0693 L161.5162,375.5842 C162.2671,374.9739 163.202,374.5793 164.2297,374.4943 M165.2296,374.5114 C166.2312,374.6275 167.1409,375.0397 167.8682,375.6596 L165.4699,378.0579 C165.3928,378.0206 165.3124,377.9891 165.2296,377.9638 M160.8076,376.2906 L163.2767,378.7592 C163.2323,378.8376 163.1941,378.92 163.1625,379.0051 L159.7064,379.0051 C159.7938,377.9787 160.192,377.0422 160.8076,376.2905 M168.5606,376.3825 C169.1337,377.1168 169.5042,378.0183 169.5884,379.0051 L166.3318,379.0051 C166.2974,378.912 166.255,378.8223 166.2052,378.7375 M159.7203,380.005 L163.1154,380.005 C163.1429,380.1077 163.1803,380.2074 163.226,380.3017 L160.8701,382.6571 C160.2482,381.9275 159.8346,381.0139 159.7203,380.0051 M166.3783,380.005 L169.575,380.005 C169.4658,380.9712 169.0804,381.8524 168.4991,382.5676 L166.2563,380.3248 L166.2563,380.3243 C166.3073,380.223 166.3485,380.116 166.3783,380.005 M163.9066,381.0354 L163.9071,381.0354 C164.0087,381.0947 164.1167,381.1444 164.2296,381.1817 L164.2296,384.3789 C163.239,384.2971 162.3319,383.9263 161.5931,383.3495 M165.5659,381.0484 L167.7937,383.2762 C167.0802,383.8608 166.1989,384.25 165.2295,384.3624 L165.2295,381.1931 C165.3474,381.1571 165.4601,381.1082 165.5659,381.0484" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="71.2325" x="40" y="402.396">Manipulated</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="111.2325" y="402.396"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="114.3525" y="402.396">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="134.3806" y="402.396"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="137.5007" y="402.396">Image</text></g><!--entity assessor--><g class="entity" data-qualified-name="M_Group.assessor" data-source-line="270" id="ent0004"><path d="M48.83,269.0679 L164.83,269.0679 L176.83,281.0679 L176.83,312.412 L164.83,324.412 L48.83,324.412 L36.83,312.412 L36.83,281.0679 L48.83,269.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M163.275,284.5419 L152.412,284.5497 A0.5,0.5 0 0 0 152.4022,284.5497 C151.4139,284.5676 150.5412,285.117 149.9414,285.9269 C149.3416,286.7369 148.9889,287.815 148.9885,288.9949 C148.9881,290.1748 149.3401,291.2549 149.9393,292.0655 C150.5385,292.8761 151.4103,293.4251 152.3986,293.4442 A0.5,0.5 0 0 0 152.4079,293.4442 A0.5,0.5 0 0 0 152.4177,293.4442 L163.3397,293.454 L163.3397,293.453 C164.1649,293.4513 164.9828,293.0413 165.5995,292.2882 A0.5,0.5 0 0 0 165.6187,292.2236 A0.5,0.5 0 0 0 165.6791,292.1885 C166.9754,290.4963 167.0403,287.844 165.8455,286.04 C165.2481,285.138 164.3962,284.6014 163.4978,284.5455 C163.4451,284.5422 163.3924,284.5428 163.3397,284.5429 L163.3397,284.5419 L163.2777,284.5419 C163.2768,284.5419 163.2755,284.5419 163.2746,284.5419 M163.3401,285.5408 C163.3721,285.5409 163.4039,285.5419 163.4357,285.5439 C163.9831,285.578 164.5515,285.8959 165.0118,286.5909 C165.9324,287.9809 165.8668,290.2998 164.8867,291.5792 A0.5,0.5 0 0 0 164.8733,291.6299 A0.5,0.5 0 0 0 164.8263,291.6552 C164.3639,292.2198 163.8463,292.4565 163.3401,292.4541 L163.3375,292.4541 C163.2946,292.4538 163.2515,292.4515 163.2088,292.4479 C162.6615,292.4012 162.0934,292.0693 161.6404,291.3622 C160.7344,289.948 160.8298,287.6313 161.8223,286.378 C162.2693,285.8136 162.7762,285.5615 163.2723,285.5419 L163.34,285.5419 M161.2214,285.5434 C161.1589,285.6113 161.0978,285.6825 161.039,285.7568 C159.7201,287.4222 159.6261,290.073 160.7971,291.9011 C160.9263,292.1028 161.0678,292.2868 161.2198,292.452 L152.4183,292.4442 L152.4178,292.4442 C151.7863,292.432 151.1999,292.0883 150.744,291.4717 C150.2882,290.855 149.9882,289.9739 149.9885,288.9948 C149.9889,288.0158 150.2878,287.1366 150.744,286.5205 C151.2003,285.9044 151.7883,285.5609 152.4199,285.5495" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.3683" x="70.4637" y="310.896">NetBSD</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="113.832" y="310.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="26.2442" x="116.9521" y="310.896">User</text></g><!--entity assessment--><g class="entity" data-qualified-name="M_Group.assessment" data-source-line="277" id="ent0005"><path d="M292.8,260.8979 L435.909,260.8979 L447.909,272.8979 L447.909,320.5861 L435.909,332.5861 L292.8,332.5861 L280.8,320.5861 L280.8,272.8979 L292.8,260.8979" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M432.482,272.6889 C429.8135,272.7252 427.6691,274.9267 427.7009,277.5951 C427.7165,278.9046 428.253,280.0887 429.1111,280.952 L422.7223,287.3413 A0.5,0.5 0 0 0 422.7223,288.0482 A0.5,0.5 0 0 0 423.4293,288.0482 L429.8894,281.5881 C430.6668,282.1001 431.599,282.3942 432.5972,282.384 C435.2658,282.3567 437.4186,280.1639 437.3959,277.4954 C437.3731,274.8269 435.1837,272.6707 432.5151,272.689 A0.5,0.5 0 0 0 432.4996,272.6947 A0.5,0.5 0 0 0 432.482,272.689 M432.513,273.6811 L432.5136,273.6811 A0.5,0.5 0 0 0 432.5214,273.6889 C434.6502,273.6743 436.3779,275.3745 436.3961,277.5031 C436.4142,279.6317 434.7163,281.3622 432.5875,281.384 C431.6817,281.3933 430.8479,281.0921 430.1866,280.5789 A0.5,0.5 0 0 0 430.1049,280.5138 C429.2584,279.8192 428.715,278.7685 428.7009,277.5832 C428.6755,275.4547 430.3668,273.7178 432.4955,273.6889 A0.5,0.5 0 0 0 432.5131,273.6811" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="345.7424" y="302.726">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="368.4585" y="302.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="371.5786" y="302.726">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="290.8" y="319.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="48.4683" x="293.92" y="319.0701">Integrity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="342.3884" y="319.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="21.5281" x="345.5084" y="319.0701">and</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="367.0365" y="319.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.7525" x="370.1566" y="319.0701">Authenticity</text></g><!--entity goal--><g class="entity" data-qualified-name="goal" data-source-line="280" id="ent0006"><path d="M666.04,119.8979 L847.4053,119.8979 L859.4053,131.8979 L859.4053,179.5861 L847.4053,191.5861 L666.04,191.5861 L654.04,179.5861 L654.04,131.8979 L666.04,119.8979" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M840.4303,133.6519 A0.5,0.5 0 0 0 840.4091,133.6617 A0.5,0.5 0 0 0 840.3895,133.6539 C836.9703,133.7005 834.2235,136.5179 834.2643,139.9372 C834.305,143.3565 837.1164,146.1067 840.5358,146.0717 C843.9552,146.0368 846.7119,143.2295 846.6827,139.8101 C846.6535,136.3907 843.8499,133.6284 840.4304,133.6518 M840.4287,134.642 A0.5,0.5 0 0 0 840.438,134.6518 C843.3177,134.6321 845.6581,136.9383 845.6826,139.8179 C845.7072,142.6975 843.4059,145.0424 840.5263,145.0718 C837.6467,145.1013 835.2989,142.8049 835.2646,139.9253 C835.2303,137.0458 837.5233,134.693 840.4028,134.6538 A0.5,0.5 0 0 0 840.4286,134.6419 M840.4204,135.9939 C838.292,136.0229 836.5787,137.7794 836.6041,139.9079 C836.6295,142.0364 838.3839,143.7537 840.5124,143.732 C842.6409,143.7103 844.3608,141.9585 844.3427,139.8299 C844.3245,137.7014 842.5749,135.9794 840.4463,135.994 A0.5,0.5 0 0 0 840.4344,136.0054 A0.5,0.5 0 0 0 840.4205,135.994 M840.4478,136.9877 A0.5,0.5 0 0 0 840.454,136.9939 C842.0427,136.983 843.3292,138.2489 843.3427,139.8377 C843.3562,141.4264 842.0913,142.7159 840.5026,142.7321 C838.9139,142.7483 837.623,141.4848 837.6041,139.8961 C837.5852,138.3074 838.8458,137.0156 840.4344,136.994 A0.5,0.5 0 0 0 840.4478,136.9878 M840.4499,138.1752 C839.5306,138.1877 838.775,138.9633 838.7859,139.8826 C838.7968,140.8019 839.5719,141.5596 840.4912,141.5502 C841.4105,141.5408 842.1687,140.7668 842.1609,139.8475 C842.1531,138.9281 841.3811,138.169 840.4618,138.1753 A0.959,0.959 0 0 0 840.4556,138.1815 A0.959,0.959 0 0 0 840.4499,138.1753" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="38.2563" x="664.04" y="161.726">Secure</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="702.2963" y="161.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="48.4683" x="705.4163" y="161.726">Integrity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="753.8846" y="161.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="21.5281" x="757.0047" y="161.726">and</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="778.5328" y="161.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.7525" x="781.6528" y="161.726">Authenticity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="695.0062" y="178.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="698.1262" y="178.0701">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="709.5143" y="178.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.3683" x="712.6344" y="178.0701">NetBSD</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="756.0027" y="178.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="759.1227" y="178.0701">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="779.1508" y="178.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="782.2708" y="178.0701">Image</text></g><!--entity req--><g class="entity" data-qualified-name="req" data-source-line="289" id="ent0007"><path d="M260.67,136.0679 L468.0395,136.0679 L480.0395,148.0679 L480.0395,179.412 L468.0395,191.412 L260.67,191.412 L248.67,179.412 L248.67,148.0679 L260.67,136.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M456.1395,152.6129 A0.5001,0.5001 0 0 0 455.6922,152.8903 L451.7274,160.8551 A0.5001,0.5001 0 0 0 452.1767,161.5777 C456.8171,161.5641 461.4526,161.6294 466.1067,161.5836 A0.5001,0.5001 0 0 0 466.55,161.3063 L470.5129,153.3356 A0.5001,0.5001 0 0 0 470.0657,152.6129 M456.4481,153.6129 L469.2591,153.6129 L465.7923,160.5836 C461.5254,160.6213 457.2596,160.573 452.9813,160.5777" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="33.9362" x="258.67" y="177.896">Check</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="292.6062" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.5643" x="295.7263" y="177.896">GnuPG</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="335.2906" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="54.6844" x="338.4106" y="177.896">Signature</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="393.095" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="396.215" y="177.896">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="407.6031" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="410.7231" y="177.896">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="430.7512" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="433.8713" y="177.896">Image</text></g><!--entity reqwot--><g class="entity" data-qualified-name="reqwot" data-source-line="289" id="ent0008"><path d="M275,46.0679 L453.7133,46.0679 L465.7133,58.0679 L465.7133,89.412 L453.7133,101.412 L275,101.412 L263,89.412 L263,58.0679 L275,46.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M441.8133,62.6129 A0.5001,0.5001 0 0 0 441.3661,62.8903 L437.4013,70.8551 A0.5001,0.5001 0 0 0 437.8505,71.5777 C442.4909,71.5641 447.1264,71.6294 451.7805,71.5836 A0.5001,0.5001 0 0 0 452.2238,71.3063 L456.1867,63.3356 A0.5001,0.5001 0 0 0 455.7395,62.6129 M442.1219,63.6129 L454.9329,63.6129 L451.4661,70.5836 C447.1992,70.6213 442.9334,70.573 438.6551,70.5777" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="33.9362" x="273" y="87.896">Check</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="306.9362" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.0922" x="310.0563" y="87.896">WoT</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="335.1485" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="338.2685" y="87.896">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="349.6566" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.0082" x="352.7766" y="87.896">Public</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="386.7848" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="42.3723" x="389.9049" y="87.896">Signing</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="432.2771" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.3161" x="435.3972" y="87.896">Key</text></g><!--link driver to assessment--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk9"><path d="M184.15,360.5579 C214.59,349.7179 249.71,337.2079 280.75,326.1579" fill="none" id="driver-assessment" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="214.67" y="344.866"> </text></g><!--link assessor to assessment--><g class="link" data-entity-1="ent0004" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk10"><path d="M177.32,296.7379 C209.24,296.7379 247.34,296.7379 280.72,296.7379" fill="none" id="assessor-assessment" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="214.67" y="292.566"> </text></g><!--link assessment to goal--><g class="link" data-entity-1="ent0005" data-entity-2="ent0006" data-link-type="association" data-source-line="349" id="lnk11"><path d="M448.14,266.8379 C508.68,244.9679 591.1,215.1979 655.39,191.9779" fill="none" id="assessment-goal" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="565.54" y="201.196"> </text></g><!--link req to goal--><g class="link" data-entity-1="ent0007" data-entity-2="ent0006" data-link-type="extension" data-source-line="349" id="lnk12"><path d="M480.37,161.3779 C535.35,160.2579 582.6238,159.2868 635.8038,158.1968" fill="none" id="req-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="653.8,157.8279,635.6808,152.198,635.9267,164.1955,653.8,157.8279" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="42.9123" x="520.54" y="154.386">realises</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="563.4523" y="154.386"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="47.4963" x="566.5723" y="154.386">integrity</text></g><!--link reqwot to goal--><g class="link" data-entity-1="ent0008" data-entity-2="ent0006" data-link-type="extension" data-source-line="349" id="lnk13"><path d="M466.14,94.9079 C523.74,107.0079 578.1841,118.4492 636.0041,130.5892" fill="none" id="reqwot-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="653.62,134.2879,637.237,124.7173,634.7712,136.4612,653.62,134.2879" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="42.9123" x="511.04" y="100.806">realises</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="553.9523" y="100.806"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="66.8165" x="557.0723" y="100.806">authenticity</text></g><?plantuml-src ZLB1RXCn4BtxAuQza4WDd46eKafA5A50b2tY0AWozdHt5CTElUEMjkg_CtP2De4AkEoExFVUl9ddP-IDInRXZOwcfRLcV3d-LPqgXrSC721Iqp9OYcYOWbVgWjWXm48t2AzU0xoZvaKkFY2VrHEOX5llWhQmf6u5uwx3hbkZPo4mO_GmWhdsj4bEsbYegV6QKqIbfZ6a3VbcCByivKcL9Sv_R30IUeFLy44zXtE7MGuLXmQvnVYWve7fHcTtbvD8DnW7jlnEe3fiDQi_mcmjjgiX779grYjiWxD2rCLloDJTF9ywZDLGFQf3IZ_MZf5BuPIPmnLyzJ0JZqqalWFjBOoJMFLCHWv4BSizFS0qQ3Tev2DgDHfPp5-Kf8qqsnaz6E_8wnAlawHNp4Qy5jstBPeLJ7rQJFlzPwN_bBWDl5Vv72uoSv6-Ep95JHA4ztYttPa4jiq2HbzQiXRzjz4fS4mTorNv7zr4x4AA1kMIP6oVs_S0AszhJo_YPtXFs2RVe5TBT3cOOAYutZ-2Fg7X7vW-xt-ZIiOv6bbEHYnHExhV8l9YIsfLpAS2B_vBRDNmANXUucyCVVn8VW80?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.png b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.png Binary files differnew file mode 100644 index 0000000..792d0b4 --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.png diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml new file mode 100644 index 0000000..0f63748 --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml @@ -0,0 +1,63 @@ +@startuml +!include <archimate/Archimate> +left to right direction + +Title Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Malicious Security Officer + +Grouping(M_Group,"RiskExperience"){ +' Elemente +together{ +Motivation_Driver(driver, "Manipulated ISO Image") +Motivation_Stakeholder(assessor, "NetBSD User") +} + +Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity") + +} + + + +Strategy_Resource(trust_anchor, "Trust Anchor\nPublic Signature Key") +Strategy_Resource(artifact, "NetBSD ISO Image") +Rel_Association(trust_anchor,artifact) + + + +together{ +Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image") + +Motivation_Requirement(req, "Check GnuPG Signature of ISO Image") + +Motivation_Requirement(reqwot, "Check WoT of Public Signing Key") +} + + + +Business_Actor(threat_agent, "Malicious Security Officer") +Business_Event(threat_event, "signs manipulated ISO image") +Business_Event(loss_event, "loss of trust in ISO image") + +Rel_Assignment(threat_agent,threat_event,Assign) + + + + + + + +' driver -[hidden]-> trust +' trust -[hidden]-> resource +' intention -[hidden]down-> trust + + + +' Beziehungen +Rel_Association(driver, assessment) +Rel_Association(assessor, assessment) +Rel_Association(assessment,goal) + +Rel_Realization(req,goal,"realises integrity") +Rel_Realization(reqwot,goal,"realises authenticity") + +@enduml + diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.svg b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.svg new file mode 100644 index 0000000..c10899c --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.svg @@ -0,0 +1 @@ +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="714px" preserveAspectRatio="none" style="width:904px;height:714px;background:#FFFFFF;" version="1.1" viewBox="0 0 904 714" width="904px" zoomAndPan="magnify"><title>Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Malicious Security Officer</title><defs><filter height="300%" id="f8bw8phf2hj1a" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4" dy="4" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><g class="title" data-source-line="4"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="594.3956" x="148.2298" y="24.9659">Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Malicious Security Officer</text></g><!--cluster M_Group--><g class="cluster" data-qualified-name="M_Group" data-source-line="340" id="ent0002"><path d="M8.5,215.7479 L100.1006,215.7479 A3.75,3.75 0 0 1 102.6006,218.2479 L109.6006,238.092 L499.86,238.092 A2.5,2.5 0 0 1 502.36,240.592 L502.36,437.2479 A2.5,2.5 0 0 1 499.86,439.7479 L8.5,439.7479 A2.5,2.5 0 0 1 6,437.2479 L6,218.2479 A2.5,2.5 0 0 1 8.5,215.7479" fill="#FFFFFF" filter="url(#f8bw8phf2hj1a)" style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;"/><line style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;" x1="6" x2="109.6006" y1="238.092" y2="238.092"/><text fill="#000000" font-family="Verdana" font-size="12" font-weight="bold" lengthAdjust="spacing" textLength="90.6006" x="10" y="230.576">RiskExperience</text></g><!--entity driver--><g class="entity" data-qualified-name="M_Group.driver" data-source-line="274" id="ent0003"><path d="M42,359.5679 L171.6689,359.5679 L183.6689,371.5679 L183.6689,403.912 L171.6689,415.912 L42,415.912 L30,403.912 L30,371.5679 L42,359.5679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M164.7299,370.0109 A0.5,0.5 0 0 0 164.2297,370.5111 L164.2297,372.9905 C162.7941,373.083 161.4861,373.6464 160.4573,374.5258 L158.7236,372.7921 A0.5,0.5 0 0 0 158.3701,372.6459 A0.5,0.5 0 0 0 158.0166,372.7921 A0.5,0.5 0 0 0 158.0166,373.4991 L159.7493,375.2318 C158.8639,376.2617 158.2972,377.572 158.2021,379.0052 L155.7356,379.0052 A0.5,0.5 0 0 0 155.2354,379.5049 A0.5,0.5 0 0 0 155.7356,380.0051 L158.213,380.0051 C158.3376,381.4219 158.9221,382.7076 159.8139,383.7139 L158.0517,385.4755 L158.0109,385.5169 A0.5001,0.5001 0 0 0 158.7179,386.2238 L158.72,386.2238 L158.7592,386.183 L160.5327,384.4095 C161.5517,385.2543 162.8322,385.7928 164.2296,385.8828 L164.2296,388.5049 A0.5001,0.5001 0 0 0 165.2296,388.5049 L165.2296,385.8699 C166.6071,385.7461 167.8601,385.1877 168.8521,384.3346 L170.7414,386.2239 A0.5001,0.5001 0 0 0 171.4483,385.5169 L171.4075,385.4756 L169.558,383.6266 C170.4077,382.6321 170.9615,381.3785 171.0819,380.0051 L173.7313,380.0051 A0.5001,0.5001 0 0 0 173.7313,379.0052 L171.0922,379.0052 C170.9994,377.6109 170.4615,376.3361 169.621,375.3222 L171.4447,373.4991 A0.5,0.5 0 0 0 171.4447,372.7921 A0.5,0.5 0 0 0 170.7357,372.7921 L168.9244,374.6028 C167.9198,373.7129 166.6381,373.1303 165.2295,373.0034 L165.2295,370.511 A0.5,0.5 0 0 0 164.7298,370.0108 M164.2297,374.4943 L164.2297,377.9747 C164.1508,378.0007 164.0742,378.0323 164.0008,378.0693 L161.5162,375.5842 C162.2671,374.9739 163.202,374.5793 164.2297,374.4943 M165.2296,374.5114 C166.2312,374.6275 167.1409,375.0397 167.8682,375.6596 L165.4699,378.0579 C165.3928,378.0206 165.3124,377.9891 165.2296,377.9638 M160.8076,376.2906 L163.2767,378.7592 C163.2323,378.8376 163.1941,378.92 163.1625,379.0051 L159.7064,379.0051 C159.7938,377.9787 160.192,377.0422 160.8076,376.2905 M168.5606,376.3825 C169.1337,377.1168 169.5042,378.0183 169.5884,379.0051 L166.3318,379.0051 C166.2974,378.912 166.255,378.8223 166.2052,378.7375 M159.7203,380.005 L163.1154,380.005 C163.1429,380.1077 163.1803,380.2074 163.226,380.3017 L160.8701,382.6571 C160.2482,381.9275 159.8346,381.0139 159.7203,380.0051 M166.3783,380.005 L169.575,380.005 C169.4658,380.9712 169.0804,381.8524 168.4991,382.5676 L166.2563,380.3248 L166.2563,380.3243 C166.3073,380.223 166.3485,380.116 166.3783,380.005 M163.9066,381.0354 L163.9071,381.0354 C164.0087,381.0947 164.1167,381.1444 164.2296,381.1817 L164.2296,384.3789 C163.239,384.2971 162.3319,383.9263 161.5931,383.3495 M165.5659,381.0484 L167.7937,383.2762 C167.0802,383.8608 166.1989,384.25 165.2295,384.3624 L165.2295,381.1931 C165.3474,381.1571 165.4601,381.1082 165.5659,381.0484" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="71.2325" x="40" y="402.396">Manipulated</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="111.2325" y="402.396"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="114.3525" y="402.396">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="134.3806" y="402.396"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="137.5007" y="402.396">Image</text></g><!--entity assessor--><g class="entity" data-qualified-name="M_Group.assessor" data-source-line="270" id="ent0004"><path d="M48.83,269.0679 L164.83,269.0679 L176.83,281.0679 L176.83,312.412 L164.83,324.412 L48.83,324.412 L36.83,312.412 L36.83,281.0679 L48.83,269.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M163.275,284.5419 L152.412,284.5497 A0.5,0.5 0 0 0 152.4022,284.5497 C151.4139,284.5676 150.5412,285.117 149.9414,285.9269 C149.3416,286.7369 148.9889,287.815 148.9885,288.9949 C148.9881,290.1748 149.3401,291.2549 149.9393,292.0655 C150.5385,292.8761 151.4103,293.4251 152.3986,293.4442 A0.5,0.5 0 0 0 152.4079,293.4442 A0.5,0.5 0 0 0 152.4177,293.4442 L163.3397,293.454 L163.3397,293.453 C164.1649,293.4513 164.9828,293.0413 165.5995,292.2882 A0.5,0.5 0 0 0 165.6187,292.2236 A0.5,0.5 0 0 0 165.6791,292.1885 C166.9754,290.4963 167.0403,287.844 165.8455,286.04 C165.2481,285.138 164.3962,284.6014 163.4978,284.5455 C163.4451,284.5422 163.3924,284.5428 163.3397,284.5429 L163.3397,284.5419 L163.2777,284.5419 C163.2768,284.5419 163.2755,284.5419 163.2746,284.5419 M163.3401,285.5408 C163.3721,285.5409 163.4039,285.5419 163.4357,285.5439 C163.9831,285.578 164.5515,285.8959 165.0118,286.5909 C165.9324,287.9809 165.8668,290.2998 164.8867,291.5792 A0.5,0.5 0 0 0 164.8733,291.6299 A0.5,0.5 0 0 0 164.8263,291.6552 C164.3639,292.2198 163.8463,292.4565 163.3401,292.4541 L163.3375,292.4541 C163.2946,292.4538 163.2515,292.4515 163.2088,292.4479 C162.6615,292.4012 162.0934,292.0693 161.6404,291.3622 C160.7344,289.948 160.8298,287.6313 161.8223,286.378 C162.2693,285.8136 162.7762,285.5615 163.2723,285.5419 L163.34,285.5419 M161.2214,285.5434 C161.1589,285.6113 161.0978,285.6825 161.039,285.7568 C159.7201,287.4222 159.6261,290.073 160.7971,291.9011 C160.9263,292.1028 161.0678,292.2868 161.2198,292.452 L152.4183,292.4442 L152.4178,292.4442 C151.7863,292.432 151.1999,292.0883 150.744,291.4717 C150.2882,290.855 149.9882,289.9739 149.9885,288.9948 C149.9889,288.0158 150.2878,287.1366 150.744,286.5205 C151.2003,285.9044 151.7883,285.5609 152.4199,285.5495" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.3683" x="70.4637" y="310.896">NetBSD</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="113.832" y="310.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="26.2442" x="116.9521" y="310.896">User</text></g><!--entity assessment--><g class="entity" data-qualified-name="M_Group.assessment" data-source-line="277" id="ent0005"><path d="M331.25,260.8979 L474.359,260.8979 L486.359,272.8979 L486.359,320.5861 L474.359,332.5861 L331.25,332.5861 L319.25,320.5861 L319.25,272.8979 L331.25,260.8979" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M470.932,272.6889 C468.2635,272.7252 466.1191,274.9267 466.1509,277.5951 C466.1665,278.9046 466.703,280.0887 467.5611,280.952 L461.1723,287.3413 A0.5,0.5 0 0 0 461.1723,288.0482 A0.5,0.5 0 0 0 461.8793,288.0482 L468.3394,281.5881 C469.1168,282.1001 470.049,282.3942 471.0472,282.384 C473.7158,282.3567 475.8686,280.1639 475.8459,277.4954 C475.8231,274.8269 473.6337,272.6707 470.9651,272.689 A0.5,0.5 0 0 0 470.9496,272.6947 A0.5,0.5 0 0 0 470.932,272.689 M470.963,273.6811 L470.9636,273.6811 A0.5,0.5 0 0 0 470.9714,273.6889 C473.1002,273.6743 474.8279,275.3745 474.8461,277.5031 C474.8642,279.6317 473.1663,281.3622 471.0375,281.384 C470.1317,281.3933 469.2979,281.0921 468.6366,280.5789 A0.5,0.5 0 0 0 468.5549,280.5138 C467.7084,279.8192 467.165,278.7685 467.1509,277.5832 C467.1255,275.4547 468.8168,273.7178 470.9455,273.6889 A0.5,0.5 0 0 0 470.9631,273.6811" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="384.1924" y="302.726">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="406.9085" y="302.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="410.0286" y="302.726">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="329.25" y="319.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="48.4683" x="332.37" y="319.0701">Integrity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="380.8384" y="319.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="21.5281" x="383.9584" y="319.0701">and</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="405.4865" y="319.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.7525" x="408.6066" y="319.0701">Authenticity</text></g><!--entity trust_anchor--><g class="entity" data-qualified-name="trust_anchor" data-source-line="89" id="ent0006"><rect fill="#F8E7C0" height="71.6882" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="36.83" y="636.8979"/><path d="M148.91,652.0799 A0.5001,0.5001 0 0 0 148.4082,652.5796 L148.4082,662.0033 A0.5001,0.5001 0 0 0 148.9079,662.5036 L163.8299,662.5036 A0.5001,0.5001 0 0 0 164.3296,662.0095 L164.3472,660.2303 L165.8923,660.2128 A0.5001,0.5001 0 0 0 166.3863,659.7125 L166.3863,654.7299 A0.5001,0.5001 0 0 0 165.8923,654.2302 L164.3864,654.2126 L164.3766,652.5993 A0.5001,0.5001 0 0 0 163.8764,652.1033 M149.4082,653.0799 L163.3792,653.101 L163.3947,655.3861 L163.3342,661.5036 L149.4082,661.5036 M153.8379,654.3785 A0.25,0.25 0 0 0 153.5877,654.6286 L153.5996,659.9079 A0.25,0.25 0 0 0 153.6079,659.9725 A0.25,0.25 0 0 0 153.6183,660.0035 A0.25,0.25 0 0 0 153.8493,660.158 A0.25,0.25 0 0 0 154.0994,659.9079 L154.0875,654.6286 A0.25,0.25 0 0 0 153.8379,654.3785 M150.9295,654.3847 A0.25,0.25 0 0 0 150.6793,654.6343 L150.6597,659.8769 A0.25,0.25 0 0 0 150.9098,660.1285 A0.25,0.25 0 0 0 151.1599,659.8784 L151.1796,654.6363 A0.25,0.25 0 0 0 150.9295,654.3846 M156.7948,654.3883 A0.25,0.25 0 0 0 156.5447,654.6363 L156.5348,659.898 A0.25,0.25 0 0 0 156.785,660.1481 A0.25,0.25 0 0 0 157.0351,659.9001 L157.0449,654.6384 A0.25,0.25 0 0 0 156.7948,654.3883 M164.3964,655.2125 L165.3865,655.2244 L165.3865,659.2185 L164.4175,659.2304 L164.3943,655.3474" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="29.1242" x="70.4697" y="678.726">Trust</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="99.5939" y="678.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="40.4763" x="102.714" y="678.726">Anchor</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.0082" x="49.2056" y="695.0701">Public</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="83.2138" y="695.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="54.6844" x="86.3339" y="695.0701">Signature</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="141.0182" y="695.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.3161" x="144.1383" y="695.0701">Key</text></g><!--entity artifact--><g class="entity" data-qualified-name="artifact" data-source-line="89" id="ent0007"><rect fill="#F8E7C0" height="55.3441" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="332.81" y="645.0679"/><path d="M444.89,660.2499 A0.5001,0.5001 0 0 0 444.3882,660.7496 L444.3882,670.1733 A0.5001,0.5001 0 0 0 444.8879,670.6736 L459.8099,670.6736 A0.5001,0.5001 0 0 0 460.3096,670.1795 L460.3272,668.4003 L461.8723,668.3828 A0.5001,0.5001 0 0 0 462.3663,667.8825 L462.3663,662.8999 A0.5001,0.5001 0 0 0 461.8723,662.4002 L460.3664,662.3826 L460.3566,660.7693 A0.5001,0.5001 0 0 0 459.8564,660.2733 M445.3882,661.2499 L459.3592,661.271 L459.3747,663.5561 L459.3142,669.6736 L445.3882,669.6736 M449.8179,662.5485 A0.25,0.25 0 0 0 449.5678,662.7986 L449.5796,668.0779 A0.25,0.25 0 0 0 449.5879,668.1425 A0.25,0.25 0 0 0 449.5983,668.1735 A0.25,0.25 0 0 0 449.8293,668.328 A0.25,0.25 0 0 0 450.0794,668.0779 L450.0675,662.7986 A0.25,0.25 0 0 0 449.8179,662.5485 M446.9095,662.5547 A0.25,0.25 0 0 0 446.6594,662.8043 L446.6397,668.0469 A0.25,0.25 0 0 0 446.8898,668.2985 A0.25,0.25 0 0 0 447.1399,668.0484 L447.1596,662.8063 A0.25,0.25 0 0 0 446.9095,662.5546 M452.7748,662.5583 A0.25,0.25 0 0 0 452.5247,662.8063 L452.5149,668.068 A0.25,0.25 0 0 0 452.765,668.3181 A0.25,0.25 0 0 0 453.0151,668.0701 L453.0249,662.8084 A0.25,0.25 0 0 0 452.7748,662.5583 M460.3764,663.3825 L461.3665,663.3944 L461.3665,667.3885 L460.3976,667.4004 L460.3743,663.5174" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.3683" x="349.9076" y="686.896">NetBSD</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="393.2759" y="686.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="396.396" y="686.896">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="416.4241" y="686.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="419.5441" y="686.896">Image</text></g><!--entity goal--><g class="entity" data-qualified-name="goal" data-source-line="280" id="ent0009"><path d="M704.49,119.8979 L885.8553,119.8979 L897.8553,131.8979 L897.8553,179.5861 L885.8553,191.5861 L704.49,191.5861 L692.49,179.5861 L692.49,131.8979 L704.49,119.8979" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M878.8803,133.6519 A0.5,0.5 0 0 0 878.8591,133.6617 A0.5,0.5 0 0 0 878.8395,133.6539 C875.4203,133.7005 872.6735,136.5179 872.7143,139.9372 C872.755,143.3565 875.5664,146.1067 878.9858,146.0717 C882.4052,146.0368 885.1619,143.2295 885.1327,139.8101 C885.1035,136.3907 882.2999,133.6284 878.8804,133.6518 M878.8787,134.642 A0.5,0.5 0 0 0 878.888,134.6518 C881.7677,134.6321 884.1081,136.9383 884.1326,139.8179 C884.1572,142.6975 881.8559,145.0424 878.9763,145.0718 C876.0967,145.1013 873.7489,142.8049 873.7146,139.9253 C873.6803,137.0458 875.9733,134.693 878.8528,134.6538 A0.5,0.5 0 0 0 878.8786,134.6419 M878.8704,135.9939 C876.742,136.0229 875.0287,137.7794 875.0541,139.9079 C875.0795,142.0364 876.8339,143.7537 878.9624,143.732 C881.0909,143.7103 882.8108,141.9585 882.7927,139.8299 C882.7745,137.7014 881.0249,135.9794 878.8963,135.994 A0.5,0.5 0 0 0 878.8844,136.0054 A0.5,0.5 0 0 0 878.8705,135.994 M878.8978,136.9877 A0.5,0.5 0 0 0 878.904,136.9939 C880.4927,136.983 881.7792,138.2489 881.7927,139.8377 C881.8062,141.4264 880.5413,142.7159 878.9526,142.7321 C877.3639,142.7483 876.073,141.4848 876.0541,139.8961 C876.0352,138.3074 877.2958,137.0156 878.8844,136.994 A0.5,0.5 0 0 0 878.8978,136.9878 M878.8999,138.1752 C877.9806,138.1877 877.225,138.9633 877.2359,139.8826 C877.2468,140.8019 878.0219,141.5596 878.9412,141.5502 C879.8605,141.5408 880.6187,140.7668 880.6109,139.8475 C880.6031,138.9281 879.8311,138.169 878.9118,138.1753 A0.959,0.959 0 0 0 878.9056,138.1815 A0.959,0.959 0 0 0 878.8999,138.1753" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="38.2563" x="702.49" y="161.726">Secure</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="740.7463" y="161.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="48.4683" x="743.8663" y="161.726">Integrity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="792.3346" y="161.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="21.5281" x="795.4547" y="161.726">and</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="816.9828" y="161.726"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.7525" x="820.1028" y="161.726">Authenticity</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="733.4562" y="178.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="736.5762" y="178.0701">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="747.9643" y="178.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.3683" x="751.0844" y="178.0701">NetBSD</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="794.4527" y="178.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="797.5727" y="178.0701">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="817.6008" y="178.0701"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="820.7208" y="178.0701">Image</text></g><!--entity req--><g class="entity" data-qualified-name="req" data-source-line="289" id="ent0010"><path d="M299.12,136.0679 L506.4895,136.0679 L518.4895,148.0679 L518.4895,179.412 L506.4895,191.412 L299.12,191.412 L287.12,179.412 L287.12,148.0679 L299.12,136.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M494.5895,152.6129 A0.5001,0.5001 0 0 0 494.1422,152.8903 L490.1774,160.8551 A0.5001,0.5001 0 0 0 490.6267,161.5777 C495.2671,161.5641 499.9026,161.6294 504.5567,161.5836 A0.5001,0.5001 0 0 0 505,161.3063 L508.9629,153.3356 A0.5001,0.5001 0 0 0 508.5157,152.6129 M494.8981,153.6129 L507.7091,153.6129 L504.2423,160.5836 C499.9754,160.6213 495.7096,160.573 491.4313,160.5777" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="33.9362" x="297.12" y="177.896">Check</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="331.0562" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.5643" x="334.1763" y="177.896">GnuPG</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="373.7406" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="54.6844" x="376.8606" y="177.896">Signature</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="431.545" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="434.665" y="177.896">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="446.0531" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="449.1731" y="177.896">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="469.2012" y="177.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.1682" x="472.3213" y="177.896">Image</text></g><!--entity reqwot--><g class="entity" data-qualified-name="reqwot" data-source-line="289" id="ent0011"><path d="M313.45,46.0679 L492.1633,46.0679 L504.1633,58.0679 L504.1633,89.412 L492.1633,101.412 L313.45,101.412 L301.45,89.412 L301.45,58.0679 L313.45,46.0679" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M480.2633,62.6129 A0.5001,0.5001 0 0 0 479.8161,62.8903 L475.8513,70.8551 A0.5001,0.5001 0 0 0 476.3005,71.5777 C480.9409,71.5641 485.5764,71.6294 490.2305,71.5836 A0.5001,0.5001 0 0 0 490.6738,71.3063 L494.6367,63.3356 A0.5001,0.5001 0 0 0 494.1895,62.6129 M480.5719,63.6129 L493.3829,63.6129 L489.9161,70.5836 C485.6492,70.6213 481.3834,70.573 477.1051,70.5777" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="33.9362" x="311.45" y="87.896">Check</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="345.3862" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.0922" x="348.5063" y="87.896">WoT</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="373.5985" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="376.7185" y="87.896">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="388.1066" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.0082" x="391.2266" y="87.896">Public</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="425.2348" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="42.3723" x="428.3549" y="87.896">Signing</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="470.7271" y="87.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.3161" x="473.8472" y="87.896">Key</text></g><!--entity threat_agent--><g class="entity" data-qualified-name="threat_agent" data-source-line="110" id="ent0012"><rect fill="#FFFFCC" height="55.3441" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="162.573" x="25.55" y="546.0679"/><path d="M169.0189,557.0179 C167.0205,557.0451 165.4113,558.6952 165.4351,560.6937 C165.4568,562.5153 166.8291,564.0153 168.5853,564.2511 L168.5853,565.4609 L163.1009,565.4454 A0.5,0.5 0 0 0 162.5991,565.9436 A0.5,0.5 0 0 0 163.0973,566.4454 L168.5853,566.4609 L168.5853,569.6643 L165.6418,574.7911 A0.5,0.5 0 0 0 165.8273,575.4727 A0.5,0.5 0 0 0 166.5089,575.2892 L169.0266,570.9024 L171.6321,575.2639 A0.5006,0.5006 0 0 0 172.4915,574.7502 L169.5852,569.875 L169.5852,566.4633 L175.1027,566.4788 A0.5,0.5 0 0 0 175.605,565.9786 A0.5,0.5 0 0 0 175.1068,565.4789 L169.5852,565.4634 L169.5852,564.2469 C171.3565,563.9934 172.718,562.4554 172.7023,560.6192 C172.6853,558.6207 171.0426,557.0042 169.0441,557.0179 A0.5,0.5 0 0 0 169.0328,557.0239 A0.5,0.5 0 0 0 169.0188,557.0179 M169.0421,558.0137 A0.5,0.5 0 0 0 169.052,558.0177 C170.5107,558.0077 171.69,559.1682 171.7025,560.6268 C171.7149,562.0855 170.5556,563.2686 169.097,563.2835 C167.6384,563.2984 166.4525,562.1402 166.4351,560.6816 C166.4177,559.223 167.5743,558.0375 169.0329,558.0177 A0.5,0.5 0 0 0 169.0422,558.0137" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="53.0884" x="35.55" y="587.896">Malicious</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="88.6384" y="587.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="45.0363" x="91.7584" y="587.896">Security</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="136.7947" y="587.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="38.2083" x="139.9147" y="587.896">Officer</text></g><!--entity threat_event--><g class="entity" data-qualified-name="threat_event" data-source-line="136" id="ent0013"><rect fill="#FFFFCC" height="55.3441" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="185.5412" x="310.04" y="546.0679"/><path d="M467.7012,562.4779 A0.5001,0.5001 0 0 0 467.3616,563.345 L471.7872,567.4378 C471.3257,567.8485 470.5393,568.55 469.7542,569.2589 C469.1438,569.8102 468.5343,570.3651 468.0763,570.7942 C467.8473,571.0088 467.6563,571.1918 467.5177,571.3312 C467.4484,571.4009 467.3936,571.4579 467.3456,571.5131 C467.3217,571.5407 467.3,571.5651 467.2717,571.6066 C467.2575,571.6274 467.2408,571.6516 467.219,571.7007 C467.2081,571.7253 467.1965,571.7566 467.1859,571.8076 C467.1809,571.8331 467.174,571.9011 467.174,571.9017 C467.174,571.9024 467.1914,572.0418 467.1916,572.0423 A0.5001,0.5001 0 0 0 467.6743,572.4133 L480.3243,572.4133 A0.5,0.5 0 0 0 480.3283,572.4133 C483.0155,572.3885 485.1755,570.1354 485.1544,567.4059 C485.1332,564.6781 482.9424,562.4621 480.2575,562.478 C480.2565,562.478 480.2555,562.478 480.2535,562.478 L480.2475,562.478 M468.9786,563.4779 L480.2536,563.4779 A0.5,0.5 0 0 0 480.2576,563.4779 A0.5,0.5 0 0 0 480.2616,563.4779 C482.3946,563.4654 484.1368,565.2136 484.1539,567.4136 C484.171,569.6115 482.4605,571.388 480.3304,571.4134 C480.3284,571.4134 480.3264,571.4133 480.3244,571.4134 L468.8804,571.4134 C469.3174,571.0059 469.8596,570.5102 470.4235,570.0011 C471.547,568.9865 472.6749,567.9848 472.8404,567.8379 A0.5,0.5 0 0 0 472.8983,567.7847 A0.5,0.5 0 0 0 472.9789,567.6642 A0.5,0.5 0 0 0 472.9799,567.6622 A0.5,0.5 0 0 0 473.0026,567.6069 A0.5,0.5 0 0 0 473.0066,567.594 A0.5,0.5 0 0 0 473.02,567.5434 A0.5,0.5 0 0 0 473.022,567.5279 A0.5,0.5 0 0 0 473.028,567.4829 A0.5,0.5 0 0 0 473.029,567.455 A0.5,0.5 0 0 0 473.0284,567.4162 A0.5,0.5 0 0 0 473.0254,567.3935 A0.5,0.5 0 0 0 473.0194,567.3511 A0.5,0.5 0 0 0 473.0124,567.3222 A0.5,0.5 0 0 0 473.0044,567.2928 A0.5,0.5 0 0 0 472.9899,567.2546 A0.5,0.5 0 0 0 472.9809,567.2319 A0.5,0.5 0 0 0 472.9137,567.127 A0.5,0.5 0 0 0 472.9127,567.126 A0.5,0.5 0 0 0 472.9037,567.1146 A0.5,0.5 0 0 0 472.8474,567.0598" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="29.3882" x="320.04" y="587.896">signs</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="349.4282" y="587.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="71.5685" x="352.5482" y="587.896">manipulated</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="424.1167" y="587.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="427.2367" y="587.896">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="447.2649" y="587.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="35.1962" x="450.3849" y="587.896">image</text></g><!--entity loss_event--><g class="entity" data-qualified-name="loss_event" data-source-line="136" id="ent0014"><rect fill="#FFFFCC" height="55.3441" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="161.361" x="26.15" y="456.0679"/><path d="M159.631,472.4779 A0.5001,0.5001 0 0 0 159.2915,473.345 L163.7171,477.4378 C163.2556,477.8485 162.4692,478.55 161.6841,479.2589 C161.0737,479.8102 160.4642,480.3651 160.0062,480.7942 C159.7772,481.0088 159.5862,481.1918 159.4476,481.3312 C159.3783,481.4009 159.3234,481.4579 159.2755,481.5131 C159.2516,481.5407 159.2299,481.5651 159.2016,481.6066 C159.1874,481.6274 159.1707,481.6516 159.1489,481.7007 C159.138,481.7253 159.1264,481.7566 159.1158,481.8076 C159.1108,481.8331 159.1039,481.9011 159.1039,481.9017 C159.1039,481.9024 159.1213,482.0418 159.1215,482.0423 A0.5001,0.5001 0 0 0 159.6042,482.4133 L172.2542,482.4133 A0.5,0.5 0 0 0 172.2582,482.4133 C174.9454,482.3885 177.1054,480.1354 177.0843,477.4059 C177.0631,474.6781 174.8723,472.4621 172.1874,472.478 C172.1864,472.478 172.1854,472.478 172.1834,472.478 L172.1774,472.478 M160.9084,473.4779 L172.1834,473.4779 A0.5,0.5 0 0 0 172.1874,473.4779 A0.5,0.5 0 0 0 172.1914,473.4779 C174.3244,473.4654 176.0666,475.2136 176.0837,477.4136 C176.1008,479.6115 174.3903,481.388 172.2602,481.4134 C172.2582,481.4134 172.2562,481.4133 172.2542,481.4134 L160.8102,481.4134 C161.2473,481.0059 161.7895,480.5102 162.3533,480.0011 C163.4768,478.9865 164.6047,477.9848 164.7702,477.8379 A0.5,0.5 0 0 0 164.8281,477.7847 A0.5,0.5 0 0 0 164.9087,477.6642 A0.5,0.5 0 0 0 164.9097,477.6622 A0.5,0.5 0 0 0 164.9324,477.6069 A0.5,0.5 0 0 0 164.9364,477.594 A0.5,0.5 0 0 0 164.9498,477.5434 A0.5,0.5 0 0 0 164.9518,477.5279 A0.5,0.5 0 0 0 164.9578,477.4829 A0.5,0.5 0 0 0 164.9588,477.455 A0.5,0.5 0 0 0 164.9583,477.4162 A0.5,0.5 0 0 0 164.9553,477.3935 A0.5,0.5 0 0 0 164.9493,477.3511 A0.5,0.5 0 0 0 164.9423,477.3222 A0.5,0.5 0 0 0 164.9343,477.2928 A0.5,0.5 0 0 0 164.9198,477.2546 A0.5,0.5 0 0 0 164.9108,477.2319 A0.5,0.5 0 0 0 164.8436,477.127 A0.5,0.5 0 0 0 164.8426,477.126 A0.5,0.5 0 0 0 164.8336,477.1146 A0.5,0.5 0 0 0 164.7773,477.0598" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="21.8522" x="36.15" y="497.896">loss</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="58.0022" y="497.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.3881" x="61.1222" y="497.896">of</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="72.5103" y="497.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="26.7842" x="75.6303" y="497.896">trust</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="102.4145" y="497.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="10.5121" x="105.5345" y="497.896">in</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="116.0466" y="497.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.0281" x="119.1666" y="497.896">ISO</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="139.1948" y="497.896"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="35.1962" x="142.3148" y="497.896">image</text></g><!--link trust_anchor to artifact--><g class="link" data-entity-1="ent0006" data-entity-2="ent0007" data-link-type="association" data-source-line="349" id="lnk8"><path d="M177.13,672.7479 C223.98,672.7479 285.61,672.7479 332.47,672.7479" fill="none" id="trust_anchor-artifact" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="236.12" y="668.576"> </text></g><!--link threat_agent to threat_event--><g class="link" data-entity-1="ent0012" data-entity-2="ent0013" data-link-type="dependency" data-source-line="349" id="lnk15"><path d="M200.55,573.7479 C238.03,573.7479 262.78,573.7479 301.59,573.7479" fill="none" id="threat_agent-threat_event" style="stroke:#000000;stroke-width:1;"/><ellipse cx="194.55" cy="573.7479" fill="#000000" rx="6" ry="6" style="stroke:#000000;stroke-width:1.5;"/><polygon fill="#000000" points="309.59,573.7479,301.59,570.7479,301.59,576.7479,309.59,573.7479" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="37.0563" x="219.12" y="569.576">Assign</text></g><!--link driver to assessment--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk16"><path d="M183.92,364.1879 C225.26,351.3979 276.44,335.5479 318.81,322.4379" fill="none" id="driver-assessment" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="236.12" y="338.076"> </text></g><!--link assessor to assessment--><g class="link" data-entity-1="ent0004" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk17"><path d="M177.13,296.7479 C219.57,296.7479 274.13,296.7479 318.86,296.7479" fill="none" id="assessor-assessment" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="236.12" y="292.576"> </text></g><!--link assessment to goal--><g class="link" data-entity-1="ent0005" data-entity-2="ent0009" data-link-type="association" data-source-line="349" id="lnk18"><path d="M486.59,266.8379 C547.13,244.9779 629.56,215.2079 693.84,191.9879" fill="none" id="assessment-goal" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="603.99" y="201.206"> </text></g><!--link req to goal--><g class="link" data-entity-1="ent0010" data-entity-2="ent0009" data-link-type="extension" data-source-line="349" id="lnk19"><path d="M518.82,161.3879 C573.81,160.2579 621.0738,159.2868 674.2538,158.1968" fill="none" id="req-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="692.25,157.8279,674.1308,152.198,674.3767,164.1955,692.25,157.8279" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="42.9123" x="558.99" y="154.386">realises</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="601.9023" y="154.386"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="47.4963" x="605.0223" y="154.386">integrity</text></g><!--link reqwot to goal--><g class="link" data-entity-1="ent0011" data-entity-2="ent0009" data-link-type="extension" data-source-line="349" id="lnk20"><path d="M504.59,94.9179 C562.19,107.0179 616.6346,118.4469 674.4646,130.5969" fill="none" id="reqwot-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="692.08,134.2979,675.6982,124.7251,673.2309,136.4687,692.08,134.2979" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="42.9123" x="549.49" y="100.816">realises</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="592.4023" y="100.816"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="66.8165" x="595.5223" y="100.816">authenticity</text></g><?plantuml-src ZLDDRnen4BtxLqpt4f2IzjogYWHDYb154q6g7feAkTvXTvJ59junQHBrltViNM21z8C3s7ZUcpSpRrwHDLN84TvhRqfQQiOtWytfN5MuO607degI8IUFXibPfMw8AmIurWN2stS07wbu7G-VaOUp2xXm3xPoEeSfrNSmg6kiwoLQ5W0pUWjdCD4L6NAXXXcQu8aVuMgn88DUgP5tOKMsw4tcwNYQHPxBdolqXDPWrdzM9t1POUH4nQv0Bj4_gubZMkieSNxXQOs-bwUVKyWcsj8gL59M3kFP5OoNeZthGnSpOts7fQjo0UeasaLeMzIN6dtMLxzK5xAhhKN4es1IuMu1jnR6eh581MgRmo28LCjIEpyAMwHJQiPUX1MFyodMBdY3FVQXvhcsfamIRk8L1kbwQw_33saUpAYmceD7-8IHwvX5UwQ5DhmhebEwcc8LzJj3gPRzd1jeF-fxiSCZfwjU8L_2dcQ8VobL-Y3TU454bt6Azq4ybhhfyLvuFvHexc1am_MeKwum_IV5W-CjorTt4v6Tved5sjQbAGn3JLP6E1yOThx7fKSj_IYQYVxPi8BVGY_NCNCBnNK3hILN3Si31r8h_m1REJcsI80iNgFiD1mWkmVTZ53ubvsyZUGz4KrG6cRyd42p673shQGyH_lzxBn98KzDgkwBRmqbZoGZjh7Lku1SjdqBJ-H3V28iWnKTHoxRREHkNOwTk5k-VqUbXOisRDinHHdKKnCHJPGSclduhuGd_ScYxG8SX4V3723q_iR-1W00?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/README.adoc b/PlantUML-ModelingTrust/README.adoc index f45ee1b..39940da 100644 --- a/PlantUML-ModelingTrust/README.adoc +++ b/PlantUML-ModelingTrust/README.adoc @@ -29,5 +29,7 @@ I will extend the process from SLSA Level 1 to SLSA Level 4, which will include | image::8-7a-Trust-Composition.png[] | | image::8-7-GnuPG-Trust-Composition.png[] | image::RSO9-10-RiskSecurityOverlay.png[] | | image::RSO9-10-GnuPG-RiskSecurityOverlay.png[] | image::9-9-RiskAssessmentPattern.png[] | | image::9-9-GnuPG-RiskAssessmentPattern.png[] +| | | image::9-9-GnuPG-RiskAssessmentPattern2.png[] +| | | image::9-9-GnuPG-RiskAssessmentPattern3.png[] |=== diff --git a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.png b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.png Binary files differindex 23b4d54..396e104 100644 --- a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.png +++ b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.png diff --git a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml index 9800e0c..33c58af 100644 --- a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml +++ b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml @@ -83,12 +83,5 @@ Rel_Assignment(threat_agent,threat_event,Assign) - -Strategy_Resource(root, "<<Trust Anchor>>\nRoot Public Key") -Strategy_Resource(system, "Application") -Rel_Association(root, system) - - - @enduml diff --git a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.svg b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.svg index 72398f4..671bb01 100644 --- a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.svg +++ b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.svg @@ -1 +1 @@ -<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="1094px" preserveAspectRatio="none" style="width:1210px;height:1094px;background:#FFFFFF;" version="1.1" viewBox="0 0 1210 1094" width="1210px" zoomAndPan="magnify"><title>RSO Page 9: Fig. 20: Risk and Security Overlay</title><defs><filter height="300%" id="f1vs37k1ehrn95" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4" dy="4" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="318.1208" x="439.3546" y="24.9659">RSO Page 9: Fig. 20: Risk and Security Overlay</text></g><!--cluster riskex--><g class="cluster" data-qualified-name="riskex" data-source-line="340" id="ent0002"><path d="M8.5,46.0839 L103.2207,46.0839 A3.75,3.75 0 0 1 105.7207,48.5839 L112.7207,68.4281 L725.33,68.4281 A2.5,2.5 0 0 1 727.83,70.9281 L727.83,541.5839 A2.5,2.5 0 0 1 725.33,544.0839 L8.5,544.0839 A2.5,2.5 0 0 1 6,541.5839 L6,48.5839 A2.5,2.5 0 0 1 8.5,46.0839" fill="#FFFFFF" filter="url(#f1vs37k1ehrn95)" style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;"/><line style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;" x1="6" x2="112.7207" y1="68.4281" y2="68.4281"/><text fill="#000000" font-family="Verdana" font-size="12" font-weight="bold" lengthAdjust="spacing" textLength="93.7207" x="10" y="60.912">Risk Experience</text></g><!--entity hazard_ass--><g class="entity" data-qualified-name="riskex.hazard_ass" data-source-line="277" id="ent0003"><path d="M42,382.4039 L158,382.4039 L170,394.4039 L170,425.7481 L158,437.7481 L42,437.7481 L30,425.7481 L30,394.4039 L42,382.4039" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M154.573,394.1949 C151.9045,394.2313 149.7601,396.4327 149.7919,399.1011 C149.8075,400.4106 150.344,401.5947 151.2021,402.458 L144.8133,408.8473 A0.5,0.5 0 0 0 144.8133,409.5543 A0.5,0.5 0 0 0 145.5202,409.5543 L151.9803,403.0942 C152.7578,403.6062 153.6899,403.9002 154.6881,403.89 C157.3567,403.8627 159.5095,401.6699 159.4868,399.0014 C159.4641,396.3329 157.2746,394.1767 154.606,394.195 A0.5,0.5 0 0 0 154.5905,394.2007 A0.5,0.5 0 0 0 154.573,394.195 M154.604,395.1871 L154.6045,395.1871 A0.5,0.5 0 0 0 154.6123,395.1949 C156.7411,395.1804 158.4688,396.8805 158.487,399.0091 C158.5052,401.1377 156.8072,402.8682 154.6784,402.89 C153.7727,402.8993 152.9388,402.5982 152.2775,402.0849 A0.5,0.5 0 0 0 152.1959,402.0198 C151.3494,401.3252 150.806,400.2745 150.7919,399.0892 C150.7665,396.9607 152.4578,395.2238 154.5865,395.1949 A0.5,0.5 0 0 0 154.604,395.1871" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="40.3323" x="44.6916" y="424.232">Hazard</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="85.0239" y="424.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.1645" x="88.1439" y="424.232">Assessment</text></g><!--entity threat_enabler--><g class="entity" data-qualified-name="riskex.threat_enabler" data-source-line="89" id="ent0004"><rect fill="#F8E7C0" height="55.3441" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="563.83" y="187.4039"/><path d="M675.91,202.5859 A0.5001,0.5001 0 0 0 675.4082,203.0857 L675.4082,212.5094 A0.5001,0.5001 0 0 0 675.9079,213.0096 L690.8299,213.0096 A0.5001,0.5001 0 0 0 691.3296,212.5156 L691.3472,210.7364 L692.8923,210.7188 A0.5001,0.5001 0 0 0 693.3863,210.2186 L693.3863,205.236 A0.5001,0.5001 0 0 0 692.8923,204.7362 L691.3864,204.7187 L691.3766,203.1054 A0.5001,0.5001 0 0 0 690.8764,202.6093 M676.4082,203.5859 L690.3792,203.6071 L690.3947,205.8922 L690.3342,212.0097 L676.4082,212.0097 M680.8379,204.8845 A0.25,0.25 0 0 0 680.5878,205.1346 L680.5996,210.4139 A0.25,0.25 0 0 0 680.6079,210.4785 A0.25,0.25 0 0 0 680.6183,210.5095 A0.25,0.25 0 0 0 680.8493,210.664 A0.25,0.25 0 0 0 681.0994,210.4139 L681.0875,205.1346 A0.25,0.25 0 0 0 680.8379,204.8845 M677.9295,204.8907 A0.25,0.25 0 0 0 677.6794,205.1403 L677.6597,210.3829 A0.25,0.25 0 0 0 677.9098,210.6345 A0.25,0.25 0 0 0 678.1599,210.3844 L678.1796,205.1423 A0.25,0.25 0 0 0 677.9295,204.8907 M683.7948,204.8943 A0.25,0.25 0 0 0 683.5447,205.1423 L683.5349,210.404 A0.25,0.25 0 0 0 683.785,210.6541 A0.25,0.25 0 0 0 684.0351,210.4061 L684.0449,205.1444 A0.25,0.25 0 0 0 683.7948,204.8943 M691.3964,205.7185 L692.3865,205.7304 L692.3865,209.7245 L691.4176,209.7364 L691.3943,205.8534" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.8763" x="592.3217" y="229.232">Threat</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="629.198" y="229.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.0203" x="632.318" y="229.232">Enabler</text></g><!--entity asset--><g class="entity" data-qualified-name="riskex.asset" data-source-line="89" id="ent0005"><rect fill="#F8E7C0" height="55.3441" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="563.83" y="358.4039"/><path d="M675.91,373.5859 A0.5001,0.5001 0 0 0 675.4082,374.0857 L675.4082,383.5094 A0.5001,0.5001 0 0 0 675.9079,384.0096 L690.8299,384.0096 A0.5001,0.5001 0 0 0 691.3296,383.5156 L691.3472,381.7364 L692.8923,381.7188 A0.5001,0.5001 0 0 0 693.3863,381.2186 L693.3863,376.236 A0.5001,0.5001 0 0 0 692.8923,375.7362 L691.3864,375.7187 L691.3766,374.1054 A0.5001,0.5001 0 0 0 690.8764,373.6093 M676.4082,374.5859 L690.3792,374.6071 L690.3947,376.8922 L690.3342,383.0097 L676.4082,383.0097 M680.8379,375.8845 A0.25,0.25 0 0 0 680.5878,376.1346 L680.5996,381.4139 A0.25,0.25 0 0 0 680.6079,381.4785 A0.25,0.25 0 0 0 680.6183,381.5095 A0.25,0.25 0 0 0 680.8493,381.664 A0.25,0.25 0 0 0 681.0994,381.4139 L681.0875,376.1346 A0.25,0.25 0 0 0 680.8379,375.8845 M677.9295,375.8907 A0.25,0.25 0 0 0 677.6794,376.1403 L677.6597,381.3829 A0.25,0.25 0 0 0 677.9098,381.6345 A0.25,0.25 0 0 0 678.1599,381.3844 L678.1796,376.1423 A0.25,0.25 0 0 0 677.9295,375.8907 M683.7948,375.8943 A0.25,0.25 0 0 0 683.5447,376.1423 L683.5349,381.404 A0.25,0.25 0 0 0 683.785,381.6541 A0.25,0.25 0 0 0 684.0351,381.4061 L684.0449,376.1444 A0.25,0.25 0 0 0 683.7948,375.8943 M691.3964,376.7185 L692.3865,376.7304 L692.3865,380.7245 L691.4176,380.7364 L691.3943,376.8534" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="30.2642" x="598.6877" y="400.232">Asset</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="628.952" y="400.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.0641" x="632.072" y="400.232">at</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="643.1361" y="400.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="646.2561" y="400.232">Risk</text></g><!--entity vuln--><g class="entity" data-qualified-name="riskex.vuln" data-source-line="92" id="ent0006"><rect fill="#F8E7C0" height="71.6882" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="30" y="240.2339"/><path d="M152.917,252.5979 A0.5001,0.5001 0 0 0 152.4132,253.0977 L152.4132,257.6235 L147.9111,257.6018 A0.5001,0.5001 0 0 0 147.4093,258.102 L147.4093,262.6547 L142.8819,262.6547 A0.5001,0.5001 0 0 0 142.3817,263.1585 L142.4287,268.0941 A0.5001,0.5001 0 0 0 142.9289,268.5882 L157.9429,268.5882 A0.5001,0.5001 0 0 0 158.4431,268.0879 L158.4194,253.1209 A0.5001,0.5001 0 0 0 157.9212,252.6207 M153.4131,253.5999 L157.4191,253.6196 L157.4248,257.6467 L153.4132,257.627 M148.4093,258.6037 L152.4132,258.6234 L152.4132,262.6547 L148.4093,262.6547 M153.4131,258.627 L157.4191,258.6466 L157.4191,262.6546 L153.4131,262.6546 M143.3861,263.6546 L147.4096,263.6546 L147.4096,267.5882 L143.4253,267.5882 M148.4096,263.6546 L152.4135,263.6546 L152.4135,267.5644 L148.4096,267.5644 M153.4134,263.6546 L157.4349,263.6546 L157.4427,267.5882 L153.4135,267.5882" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="70.7045" x="64.6478" y="282.062">Vulnerability</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="55.5484" x="72.2258" y="298.4061">Capability</text></g><!--entity threat_agent--><g class="entity" data-qualified-name="riskex.threat_agent" data-source-line="110" id="ent0007"><rect fill="#FFFFCC" height="71.6882" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="30" y="99.2339"/><path d="M150.8958,110.1839 C148.8974,110.2111 147.2882,111.8612 147.312,113.8597 C147.3338,115.6813 148.706,117.1813 150.4622,117.4171 L150.4622,118.6269 L144.9778,118.6114 A0.5,0.5 0 0 0 144.4761,119.1096 A0.5,0.5 0 0 0 144.9742,119.6114 L150.4622,119.6269 L150.4622,122.8303 L147.5187,127.9571 A0.5,0.5 0 0 0 147.7042,128.6387 A0.5,0.5 0 0 0 148.3859,128.4552 L150.9036,124.0684 L153.5091,128.4299 A0.5006,0.5006 0 0 0 154.3684,127.9163 L151.4621,123.0411 L151.4621,119.6294 L156.9796,119.6449 A0.5,0.5 0 0 0 157.4819,119.1446 A0.5,0.5 0 0 0 156.9838,118.6449 L151.4622,118.6294 L151.4622,117.4129 C153.2335,117.1595 154.595,115.6214 154.5793,113.7852 C154.5622,111.7867 152.9196,110.1702 150.9211,110.1839 A0.5,0.5 0 0 0 150.9097,110.1899 A0.5,0.5 0 0 0 150.8958,110.1839 M150.9191,111.1798 A0.5,0.5 0 0 0 150.9289,111.1838 C152.3876,111.1738 153.5669,112.3343 153.5794,113.7929 C153.5919,115.2516 152.4325,116.4347 150.9739,116.4496 C149.5153,116.4645 148.3294,115.3063 148.312,113.8477 C148.2946,112.3891 149.4512,111.2036 150.9098,111.1838 A0.5,0.5 0 0 0 150.9191,111.1798" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="70.4405" x="64.7798" y="141.062">ThreatAgent</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.7404" x="58.5817" y="157.4061">Business</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="108.3221" y="157.4061"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="29.9762" x="111.4421" y="157.4061">Actor</text></g><!--entity threat_event--><g class="entity" data-qualified-name="riskex.threat_event" data-source-line="136" id="ent0008"><rect fill="#FFFFCC" height="55.3441" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="144.1409" x="293.85" y="187.4039"/><path d="M410.1109,203.8139 A0.5001,0.5001 0 0 0 409.7714,204.6811 L414.197,208.7739 C413.7355,209.1845 412.9491,209.8861 412.164,210.595 C411.5535,211.1462 410.9441,211.7012 410.4861,212.1303 C410.257,212.3448 410.066,212.5278 409.9274,212.6672 C409.8581,212.7369 409.8033,212.794 409.7554,212.8491 C409.7315,212.8767 409.7098,212.9011 409.6815,212.9426 C409.6673,212.9634 409.6506,212.9876 409.6288,213.0367 C409.6179,213.0613 409.6063,213.0926 409.5957,213.1437 C409.5907,213.1692 409.5838,213.2372 409.5838,213.2378 C409.5837,213.2384 409.6012,213.3778 409.6014,213.3783 A0.5001,0.5001 0 0 0 410.084,213.7494 L422.734,213.7494 A0.5,0.5 0 0 0 422.738,213.7494 C425.4252,213.7246 427.5852,211.4715 427.5641,208.742 C427.5429,206.0142 425.3521,203.7982 422.6672,203.8141 C422.6662,203.8141 422.6652,203.8141 422.6632,203.8141 L422.6572,203.8141 M411.3883,204.8139 L422.6633,204.8139 A0.5,0.5 0 0 0 422.6673,204.8139 A0.5,0.5 0 0 0 422.6713,204.8139 C424.8043,204.8014 426.5465,206.5496 426.5636,208.7496 C426.5807,210.9475 424.8702,212.724 422.7401,212.7494 C422.7381,212.7494 422.7361,212.7494 422.7341,212.7494 L411.2901,212.7494 C411.7271,212.342 412.2693,211.8462 412.8332,211.3371 C413.9567,210.3225 415.0846,209.3208 415.2501,209.1739 A0.5,0.5 0 0 0 415.308,209.1207 A0.5,0.5 0 0 0 415.3886,209.0003 A0.5,0.5 0 0 0 415.3896,208.9983 A0.5,0.5 0 0 0 415.4123,208.943 A0.5,0.5 0 0 0 415.4163,208.9301 A0.5,0.5 0 0 0 415.4297,208.8795 A0.5,0.5 0 0 0 415.4317,208.864 A0.5,0.5 0 0 0 415.4377,208.819 A0.5,0.5 0 0 0 415.4387,208.7911 A0.5,0.5 0 0 0 415.4381,208.7523 A0.5,0.5 0 0 0 415.4351,208.7296 A0.5,0.5 0 0 0 415.4291,208.6872 A0.5,0.5 0 0 0 415.4221,208.6583 A0.5,0.5 0 0 0 415.4141,208.6289 A0.5,0.5 0 0 0 415.3996,208.5907 A0.5,0.5 0 0 0 415.3906,208.568 A0.5,0.5 0 0 0 415.3234,208.4631 A0.5,0.5 0 0 0 415.3224,208.4621 A0.5,0.5 0 0 0 415.3134,208.4507 A0.5,0.5 0 0 0 415.2571,208.3959" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.7404" x="303.85" y="229.232">Business</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="353.5904" y="229.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.8763" x="356.7104" y="229.232">Threat</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="393.5866" y="229.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="31.2842" x="396.7067" y="229.232">Event</text></g><!--entity loss_event--><g class="entity" data-qualified-name="riskex.loss_event" data-source-line="136" id="ent0009"><rect fill="#FFFFCC" height="55.3441" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="295.92" y="456.4039"/><path d="M408.04,472.8139 A0.5001,0.5001 0 0 0 407.7005,473.6811 L412.1261,477.7739 C411.6646,478.1845 410.8782,478.8861 410.0931,479.595 C409.4827,480.1462 408.8732,480.7012 408.4152,481.1303 C408.1862,481.3448 407.9951,481.5278 407.8566,481.6672 C407.7873,481.7369 407.7324,481.794 407.6845,481.8491 C407.6606,481.8767 407.6389,481.9011 407.6106,481.9426 C407.5964,481.9634 407.5797,481.9876 407.5579,482.0367 C407.547,482.0613 407.5354,482.0926 407.5248,482.1437 C407.5198,482.1692 407.5129,482.2372 407.5129,482.2378 C407.5129,482.2384 407.5303,482.3778 407.5305,482.3783 A0.5001,0.5001 0 0 0 408.0132,482.7494 L420.6632,482.7494 A0.5,0.5 0 0 0 420.6672,482.7494 C423.3544,482.7246 425.5144,480.4715 425.4933,477.742 C425.4721,475.0142 423.2813,472.7982 420.5964,472.8141 C420.5954,472.8141 420.5944,472.8141 420.5924,472.8141 L420.5864,472.8141 M409.3174,473.8139 L420.5924,473.8139 A0.5,0.5 0 0 0 420.5964,473.8139 A0.5,0.5 0 0 0 420.6004,473.8139 C422.7334,473.8014 424.4756,475.5496 424.4927,477.7496 C424.5098,479.9475 422.7993,481.724 420.6692,481.7494 C420.6672,481.7494 420.6652,481.7494 420.6632,481.7494 L409.2192,481.7494 C409.6562,481.342 410.1985,480.8462 410.7623,480.3371 C411.8858,479.3225 413.0137,478.3208 413.1792,478.1739 A0.5,0.5 0 0 0 413.2371,478.1207 A0.5,0.5 0 0 0 413.3177,478.0003 A0.5,0.5 0 0 0 413.3187,477.9983 A0.5,0.5 0 0 0 413.3414,477.943 A0.5,0.5 0 0 0 413.3454,477.9301 A0.5,0.5 0 0 0 413.3588,477.8795 A0.5,0.5 0 0 0 413.3608,477.864 A0.5,0.5 0 0 0 413.3668,477.819 A0.5,0.5 0 0 0 413.3678,477.7911 A0.5,0.5 0 0 0 413.3673,477.7523 A0.5,0.5 0 0 0 413.3643,477.7296 A0.5,0.5 0 0 0 413.3583,477.6872 A0.5,0.5 0 0 0 413.3513,477.6583 A0.5,0.5 0 0 0 413.3433,477.6289 A0.5,0.5 0 0 0 413.3288,477.5907 A0.5,0.5 0 0 0 413.3198,477.568 A0.5,0.5 0 0 0 413.2526,477.4631 A0.5,0.5 0 0 0 413.2516,477.4621 A0.5,0.5 0 0 0 413.2426,477.4507 A0.5,0.5 0 0 0 413.1863,477.3959" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.7404" x="309.7656" y="498.232">Business</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="359.506" y="498.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.0442" x="362.626" y="498.232">Loss</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="387.6702" y="498.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="31.2842" x="390.7902" y="498.232">Event</text></g><!--entity control--><g class="entity" data-qualified-name="riskex.control" data-source-line="142" id="ent0010"><rect fill="#FFFFCC" height="55.3441" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="193.8333" x="269" y="277.4039"/><path d="M440.3333,293.3139 C437.6577,293.3079 435.4802,295.518 435.4561,298.2361 C435.432,300.9542 437.5702,303.2056 440.2455,303.2497 A0.5,0.5 0 0 0 440.261,303.2497 L447.802,303.2497 A0.5,0.5 0 0 0 447.808,303.2497 C450.4952,303.2249 452.6532,300.9713 452.632,298.2417 C452.6109,295.5235 450.435,293.3151 447.763,293.3154 L447.763,293.3134 L447.7299,293.3134 M440.3313,294.3139 A0.5,0.5 0 0 0 440.3353,294.3139 L447.7627,294.3139 C449.8852,294.314 451.6147,296.0575 451.6317,298.2496 C451.6488,300.4496 449.935,302.2279 447.802,302.2499 C447.801,302.2499 447.799,302.2499 447.798,302.2499 L440.2631,302.2499 C438.1379,302.2148 436.4366,300.4381 436.4561,298.246 C436.4756,296.0539 438.2058,294.3096 440.3313,294.3139" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="76.4165" x="279" y="319.232">Implemented</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="355.4165" y="319.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="41.9043" x="358.5366" y="319.232">Control</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="400.4409" y="319.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.2724" x="403.5609" y="319.232">Measure</text></g><!--entity global_goal--><g class="entity" data-qualified-name="global_goal" data-source-line="280" id="ent0011"><path d="M834.83,773.4039 L950.83,773.4039 L962.83,785.4039 L962.83,816.7481 L950.83,828.7481 L834.83,828.7481 L822.83,816.7481 L822.83,785.4039 L834.83,773.4039" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M943.855,787.1579 A0.5,0.5 0 0 0 943.8338,787.1677 A0.5,0.5 0 0 0 943.8142,787.1599 C940.395,787.2065 937.6482,790.0239 937.689,793.4432 C937.7297,796.8625 940.5411,799.6127 943.9605,799.5777 C947.3799,799.5428 950.1366,796.7355 950.1074,793.3161 C950.0782,789.8967 947.2746,787.1344 943.8551,787.1578 M943.8534,788.1481 A0.5,0.5 0 0 0 943.8627,788.1579 C946.7424,788.1382 949.0828,790.4444 949.1073,793.324 C949.1319,796.2036 946.8306,798.5485 943.951,798.5779 C941.0714,798.6073 938.7236,796.311 938.6893,793.4314 C938.655,790.5519 940.948,788.1991 943.8275,788.1599 A0.5,0.5 0 0 0 943.8533,788.148 M943.8451,789.5 C941.7167,789.5289 940.0034,791.2855 940.0288,793.414 C940.0542,795.5425 941.8086,797.2598 943.9371,797.2381 C946.0656,797.2163 947.7855,795.4646 947.7674,793.336 C947.7492,791.2075 945.9996,789.4855 943.871,789.5001 A0.5,0.5 0 0 0 943.8591,789.5114 A0.5,0.5 0 0 0 943.8452,789.5001 M943.8725,790.4937 A0.5,0.5 0 0 0 943.8787,790.4999 C945.4674,790.489 946.7539,791.7549 946.7674,793.3437 C946.7809,794.9324 945.516,796.2219 943.9273,796.2381 C942.3386,796.2543 941.0477,794.9908 941.0288,793.4021 C941.0099,791.8134 942.2705,790.5216 943.8591,790.5 A0.5,0.5 0 0 0 943.8725,790.4938 M943.8746,791.6812 C942.9553,791.6938 942.1997,792.4693 942.2106,793.3886 C942.2216,794.3079 942.9966,795.0656 943.9159,795.0562 C944.8352,795.0468 945.5934,794.2728 945.5856,793.3535 C945.5778,792.4342 944.8058,791.675 943.8865,791.6813 A0.959,0.959 0 0 0 943.8803,791.6875 A0.959,0.959 0 0 0 943.8746,791.6813" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.8242" x="879.9179" y="815.232">Goal</text></g><!--entity risk_assessment--><g class="entity" data-qualified-name="risk_assessment" data-source-line="277" id="ent0012"><path d="M834.83,863.4039 L950.83,863.4039 L962.83,875.4039 L962.83,906.7481 L950.83,918.7481 L834.83,918.7481 L822.83,906.7481 L822.83,875.4039 L834.83,863.4039" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M947.403,875.1949 C944.7345,875.2313 942.5901,877.4327 942.6219,880.1011 C942.6375,881.4106 943.174,882.5947 944.0321,883.458 L937.6433,889.8473 A0.5,0.5 0 0 0 937.6433,890.5543 A0.5,0.5 0 0 0 938.3502,890.5543 L944.8103,884.0942 C945.5878,884.6062 946.5199,884.9002 947.5181,884.89 C950.1867,884.8627 952.3395,882.6699 952.3168,880.0014 C952.2941,877.3329 950.1046,875.1767 947.436,875.195 A0.5,0.5 0 0 0 947.4205,875.2007 A0.5,0.5 0 0 0 947.403,875.195 M947.434,876.1871 L947.4345,876.1871 A0.5,0.5 0 0 0 947.4423,876.1949 C949.5711,876.1804 951.2988,877.8805 951.317,880.0091 C951.3352,882.1377 949.6372,883.8682 947.5084,883.89 C946.6027,883.8993 945.7688,883.5982 945.1075,883.0849 A0.5,0.5 0 0 0 945.0259,883.0198 C944.1794,882.3252 943.636,881.2745 943.6219,880.0892 C943.5965,877.9607 945.2878,876.2238 947.4165,876.1949 A0.5,0.5 0 0 0 947.434,876.1871" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="846.3296" y="905.232">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="869.0458" y="905.232"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.1645" x="872.1658" y="905.232">Assessment</text></g><!--entity goal--><g class="entity" data-qualified-name="goal" data-source-line="280" id="ent0013"><path d="M1075.83,633.2339 L1191.83,633.2339 L1203.83,645.2339 L1203.83,692.9222 L1191.83,704.9222 L1075.83,704.9222 L1063.83,692.9222 L1063.83,645.2339 L1075.83,633.2339" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M1184.855,646.9879 A0.5,0.5 0 0 0 1184.8338,646.9977 A0.5,0.5 0 0 0 1184.8142,646.9899 C1181.395,647.0365 1178.6482,649.8539 1178.689,653.2732 C1178.7297,656.6925 1181.5411,659.4427 1184.9605,659.4077 C1188.3799,659.3728 1191.1366,656.5655 1191.1074,653.1461 C1191.0782,649.7267 1188.2746,646.9644 1184.8551,646.9878 M1184.8534,647.9781 A0.5,0.5 0 0 0 1184.8627,647.9879 C1187.7424,647.9682 1190.0828,650.2744 1190.1073,653.154 C1190.1319,656.0336 1187.8306,658.3785 1184.951,658.4079 C1182.0714,658.4373 1179.7236,656.141 1179.6893,653.2614 C1179.655,650.3819 1181.948,648.0291 1184.8275,647.9899 A0.5,0.5 0 0 0 1184.8533,647.978 M1184.8451,649.33 C1182.7167,649.3589 1181.0034,651.1155 1181.0288,653.244 C1181.0542,655.3725 1182.8086,657.0898 1184.9371,657.0681 C1187.0656,657.0463 1188.7855,655.2946 1188.7674,653.166 C1188.7492,651.0375 1186.9996,649.3155 1184.871,649.3301 A0.5,0.5 0 0 0 1184.8591,649.3414 A0.5,0.5 0 0 0 1184.8452,649.3301 M1184.8725,650.3237 A0.5,0.5 0 0 0 1184.8787,650.3299 C1186.4674,650.319 1187.7539,651.5849 1187.7674,653.1737 C1187.7809,654.7624 1186.516,656.0519 1184.9273,656.0681 C1183.3386,656.0843 1182.0477,654.8208 1182.0288,653.2321 C1182.0099,651.6434 1183.2705,650.3516 1184.8591,650.33 A0.5,0.5 0 0 0 1184.8725,650.3238 M1184.8746,651.5112 C1183.9553,651.5238 1183.1997,652.2993 1183.2106,653.2186 C1183.2216,654.1379 1183.9966,654.8956 1184.9159,654.8862 C1185.8352,654.8768 1186.5934,654.1028 1186.5856,653.1835 C1186.5778,652.2642 1185.8058,651.505 1184.8865,651.5113 A0.959,0.959 0 0 0 1184.8803,651.5175 A0.959,0.959 0 0 0 1184.8746,651.5113" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="106.7888" x="1080.4356" y="675.062">«ControlObjective»</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.8242" x="1120.9179" y="691.4061">Goal</text></g><!--entity risk_driver--><g class="entity" data-qualified-name="risk_driver" data-source-line="274" id="ent0014"><path d="M1075.83,846.7339 L1191.83,846.7339 L1203.83,858.7339 L1203.83,907.4222 L1191.83,919.4222 L1075.83,919.4222 L1063.83,907.4222 L1063.83,858.7339 L1075.83,846.7339" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M1184.891,857.1769 A0.5,0.5 0 0 0 1184.3908,857.6772 L1184.3908,860.1566 C1182.9552,860.249 1181.6472,860.8124 1180.6184,861.6919 L1178.8847,859.9582 A0.5,0.5 0 0 0 1178.5312,859.8119 A0.5,0.5 0 0 0 1178.1777,859.9582 A0.5,0.5 0 0 0 1178.1777,860.6651 L1179.9104,862.3978 C1179.025,863.4277 1178.4583,864.738 1178.3632,866.1712 L1175.8967,866.1712 A0.5,0.5 0 0 0 1175.3965,866.6709 A0.5,0.5 0 0 0 1175.8967,867.1711 L1178.3741,867.1711 C1178.4987,868.5879 1179.0832,869.8736 1179.975,870.8799 L1178.2128,872.6415 L1178.172,872.6829 A0.5001,0.5001 0 0 0 1178.8789,873.3898 L1178.881,873.3898 L1178.9203,873.349 L1180.6938,871.5755 C1181.7128,872.4204 1182.9933,872.9588 1184.3907,873.0488 L1184.3907,875.6709 A0.5001,0.5001 0 0 0 1185.3906,875.6709 L1185.3906,873.0359 C1186.7681,872.9121 1188.0212,872.3537 1189.0132,871.5006 L1190.9025,873.3899 A0.5001,0.5001 0 0 0 1191.6094,872.683 L1191.5686,872.6416 L1189.7191,870.7926 C1190.5688,869.7982 1191.1226,868.5445 1191.243,867.1711 L1193.8924,867.1711 A0.5001,0.5001 0 0 0 1193.8924,866.1712 L1191.2533,866.1712 C1191.1604,864.7769 1190.6226,863.5021 1189.7821,862.4882 L1191.6058,860.6651 A0.5,0.5 0 0 0 1191.6058,859.9582 A0.5,0.5 0 0 0 1190.8968,859.9582 L1189.0855,861.7689 C1188.0809,860.879 1186.7992,860.2964 1185.3906,860.1695 L1185.3906,857.6771 A0.5,0.5 0 0 0 1184.8909,857.1768 M1184.3908,861.6603 L1184.3908,865.1407 C1184.3119,865.1667 1184.2353,865.1984 1184.1618,865.2353 L1181.6772,862.7502 C1182.4282,862.1399 1183.363,861.7453 1184.3907,861.6603 M1185.3907,861.6774 C1186.3923,861.7936 1187.302,862.2058 1188.0293,862.8256 L1185.631,865.2239 C1185.5539,865.1866 1185.4734,865.1551 1185.3907,865.1298 M1180.9687,863.4566 L1183.4378,865.9252 C1183.3934,866.0036 1183.3551,866.086 1183.3236,866.1712 L1179.8675,866.1712 C1179.9549,865.1448 1180.3531,864.2083 1180.9687,863.4566 M1188.7217,863.5486 C1189.2948,864.2828 1189.6653,865.1844 1189.7495,866.1712 L1186.4929,866.1712 C1186.4584,866.078 1186.4161,865.9884 1186.3663,865.9035 M1179.8814,867.1711 L1183.2765,867.1711 C1183.304,867.2738 1183.3414,867.3734 1183.3871,867.4677 L1181.0312,869.8231 C1180.4093,869.0936 1179.9957,868.1799 1179.8814,867.1711 M1186.5394,867.1711 L1189.7361,867.1711 C1189.6268,868.1373 1189.2415,869.0185 1188.6602,869.7337 L1186.4174,867.4909 L1186.4174,867.4904 C1186.4684,867.3891 1186.5096,867.2821 1186.5394,867.171 M1184.0677,868.2015 L1184.0682,868.2015 C1184.1697,868.2608 1184.2778,868.3105 1184.3907,868.3477 L1184.3907,871.5449 C1183.4001,871.4632 1182.493,871.0923 1181.7542,870.5155 M1185.727,868.2144 L1187.9548,870.4422 C1187.2413,871.0268 1186.36,871.416 1185.3906,871.5284 L1185.3906,868.3591 C1185.5085,868.3231 1185.6212,868.2742 1185.727,868.2144" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.9323" x="1116.3639" y="889.562">»Risk«</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.6322" x="1116.5139" y="905.9061">Driver</text></g><!--entity risk_assessor--><g class="entity" data-qualified-name="risk_assessor" data-source-line="270" id="ent0015"><path d="M1075.83,740.2339 L1191.83,740.2339 L1203.83,752.2339 L1203.83,799.9222 L1191.83,811.9222 L1075.83,811.9222 L1063.83,799.9222 L1063.83,752.2339 L1075.83,740.2339" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M1190.275,755.7079 L1179.412,755.7157 A0.5,0.5 0 0 0 1179.4022,755.7157 C1178.4139,755.7337 1177.5412,756.283 1176.9414,757.0929 C1176.3416,757.9029 1175.9889,758.981 1175.9885,760.1609 C1175.9881,761.3408 1176.3401,762.4209 1176.9393,763.2315 C1177.5385,764.0421 1178.4103,764.5911 1179.3986,764.6102 A0.5,0.5 0 0 0 1179.4079,764.6102 A0.5,0.5 0 0 0 1179.4177,764.6102 L1190.3397,764.62 L1190.3397,764.619 C1191.1649,764.6173 1191.9828,764.2073 1192.5995,763.4542 A0.5,0.5 0 0 0 1192.6187,763.3896 A0.5,0.5 0 0 0 1192.6791,763.3545 C1193.9754,761.6623 1194.0403,759.01 1192.8455,757.206 C1192.2481,756.304 1191.3962,755.7674 1190.4978,755.7115 C1190.4451,755.7082 1190.3924,755.7088 1190.3397,755.7089 L1190.3397,755.7079 L1190.2777,755.7079 C1190.2768,755.7079 1190.2755,755.7079 1190.2746,755.7079 M1190.3401,756.7069 C1190.3721,756.7069 1190.4039,756.708 1190.4357,756.71 C1190.983,756.744 1191.5515,757.0619 1192.0118,757.757 C1192.9324,759.147 1192.8668,761.4659 1191.8868,762.7453 A0.5,0.5 0 0 0 1191.8733,762.7959 A0.5,0.5 0 0 0 1191.8263,762.8212 C1191.3639,763.3859 1190.8463,763.6225 1190.3401,763.6201 L1190.3375,763.6201 C1190.2946,763.6199 1190.2515,763.6175 1190.2088,763.6139 C1189.6615,763.5672 1189.0934,763.2353 1188.6404,762.5282 C1187.7345,761.114 1187.8298,758.7973 1188.8223,757.544 C1189.2693,756.9796 1189.7762,756.7275 1190.2723,756.7079 L1190.34,756.7079 M1188.2214,756.7095 C1188.1589,756.7773 1188.0978,756.8486 1188.039,756.9229 C1186.7201,758.5883 1186.6261,761.2391 1187.7971,763.0672 C1187.9263,763.2688 1188.0678,763.4528 1188.2199,763.618 L1179.4184,763.6102 L1179.4178,763.6102 C1178.7863,763.598 1178.1999,763.2544 1177.744,762.6377 C1177.2882,762.021 1176.9882,761.1399 1176.9885,760.1608 C1176.9889,759.1818 1177.2878,758.3026 1177.744,757.6865 C1178.2003,757.0704 1178.7883,756.727 1179.4199,756.7155" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="1122.4719" y="782.062">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.6444" x="1109.0078" y="798.4061">Assessor</text></g><!--entity risk_subj--><g class="entity" data-qualified-name="risk_subj" data-source-line="270" id="ent0016"><path d="M575.83,683.2339 L691.83,683.2339 L703.83,695.2339 L703.83,742.9222 L691.83,754.9222 L575.83,754.9222 L563.83,742.9222 L563.83,695.2339 L575.83,683.2339" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M690.275,698.7079 L679.412,698.7157 A0.5,0.5 0 0 0 679.4022,698.7157 C678.4139,698.7337 677.5412,699.283 676.9414,700.0929 C676.3416,700.9029 675.9889,701.981 675.9885,703.1609 C675.9881,704.3408 676.3401,705.4209 676.9393,706.2315 C677.5385,707.0421 678.4103,707.5911 679.3986,707.6102 A0.5,0.5 0 0 0 679.4079,707.6102 A0.5,0.5 0 0 0 679.4177,707.6102 L690.3397,707.62 L690.3397,707.619 C691.1649,707.6173 691.9828,707.2073 692.5995,706.4542 A0.5,0.5 0 0 0 692.6187,706.3896 A0.5,0.5 0 0 0 692.6791,706.3545 C693.9754,704.6623 694.0403,702.01 692.8455,700.206 C692.2481,699.304 691.3962,698.7674 690.4978,698.7115 C690.4451,698.7082 690.3924,698.7088 690.3397,698.7089 L690.3397,698.7079 L690.2777,698.7079 C690.2768,698.7079 690.2755,698.7079 690.2746,698.7079 M690.3401,699.7069 C690.3721,699.7069 690.4039,699.708 690.4357,699.71 C690.9831,699.744 691.5515,700.0619 692.0118,700.757 C692.9324,702.147 692.8668,704.4659 691.8868,705.7453 A0.5,0.5 0 0 0 691.8733,705.7959 A0.5,0.5 0 0 0 691.8263,705.8212 C691.3639,706.3859 690.8463,706.6225 690.3401,706.6201 L690.3375,706.6201 C690.2946,706.6199 690.2515,706.6175 690.2088,706.6139 C689.6615,706.5672 689.0934,706.2353 688.6404,705.5282 C687.7345,704.114 687.8298,701.7973 688.8223,700.544 C689.2693,699.9796 689.7762,699.7275 690.2723,699.7079 L690.34,699.7079 M688.2214,699.7095 C688.1589,699.7773 688.0978,699.8486 688.039,699.9229 C686.7201,701.5883 686.6261,704.2391 687.7971,706.0672 C687.9263,706.2688 688.0678,706.4528 688.2199,706.618 L679.4184,706.6102 L679.4178,706.6102 C678.7863,706.598 678.1999,706.2544 677.744,705.6377 C677.2882,705.021 676.9882,704.1399 676.9885,703.1608 C676.9889,702.1818 677.2878,701.3026 677.744,700.6865 C678.2003,700.0704 678.7883,699.727 679.4199,699.7155" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="622.4719" y="725.062">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="41.3403" x="613.1599" y="741.4061">Subject</text></g><!--entity sec_req--><g class="entity" data-qualified-name="sec_req" data-source-line="289" id="ent0017"><path d="M834.83,576.2339 L950.83,576.2339 L962.83,588.2339 L962.83,635.9222 L950.83,647.9222 L834.83,647.9222 L822.83,635.9222 L822.83,588.2339 L834.83,576.2339" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M938.93,592.7789 A0.5001,0.5001 0 0 0 938.4827,593.0563 L934.5179,601.0211 A0.5001,0.5001 0 0 0 934.9672,601.7437 C939.6076,601.7301 944.2431,601.7955 948.8972,601.7496 A0.5001,0.5001 0 0 0 949.3405,601.4723 L953.3034,593.5016 A0.5001,0.5001 0 0 0 952.8562,592.7789 M939.2386,593.7789 L952.0496,593.7789 L948.5828,600.7496 C944.3159,600.7873 940.0501,600.739 935.7718,600.7437" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="45.0363" x="870.3118" y="618.062">Security</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="73.5845" x="856.0377" y="634.4061">Requirement</text></g><!--entity control_req--><g class="entity" data-qualified-name="control_req" data-source-line="289" id="ent0018"><path d="M575.83,576.2339 L691.83,576.2339 L703.83,588.2339 L703.83,635.9222 L691.83,647.9222 L575.83,647.9222 L563.83,635.9222 L563.83,588.2339 L575.83,576.2339" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M679.93,592.7789 A0.5001,0.5001 0 0 0 679.4827,593.0563 L675.5179,601.0211 A0.5001,0.5001 0 0 0 675.9672,601.7437 C680.6076,601.7301 685.2431,601.7955 689.8972,601.7496 A0.5001,0.5001 0 0 0 690.3405,601.4723 L694.3034,593.5016 A0.5001,0.5001 0 0 0 693.8562,592.7789 M680.2386,593.7789 L693.0496,593.7789 L689.5828,600.7496 C685.3159,600.7873 681.0501,600.739 676.7718,600.7437" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="91.1767" x="588.2417" y="618.062">ControlMeasure</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="73.5845" x="597.0377" y="634.4061">Requirement</text></g><!--entity sec_princ--><g class="entity" data-qualified-name="sec_princ" data-source-line="286" id="ent0019"><path d="M834.83,683.4039 L950.83,683.4039 L962.83,695.4039 L962.83,726.7481 L950.83,738.7481 L834.83,738.7481 L822.83,726.7481 L822.83,695.4039 L834.83,683.4039" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M943.87,696.7709 C942.2283,696.7749 940.5853,696.8437 939.2661,696.9761 C938.6065,697.0423 938.029,697.1236 937.5629,697.2257 C937.2303,697.2985 937.0072,697.4193 936.7702,697.5461 L936.5945,697.5461 L936.4519,697.6753 C936.1717,697.9293 936.0636,698.2448 935.9537,698.6303 C935.8438,699.0158 935.7626,699.4771 935.6979,699.9992 C935.5684,701.0433 935.5133,702.3255 935.5222,703.6088 C935.5312,704.8921 935.6036,706.1722 935.7372,707.2143 C935.8039,707.7353 935.8852,708.196 935.9868,708.5775 C936.0884,708.9589 936.1779,709.2582 936.4245,709.519 C936.7298,709.842 937.0554,709.8824 937.5087,709.9779 C937.9619,710.0733 938.5301,710.1476 939.1825,710.2063 C940.4873,710.3238 942.1291,710.3784 943.7724,710.3743 C945.4158,710.3702 947.0562,710.3061 948.3582,710.1867 C949.0091,710.1269 949.5742,710.0544 950.0242,709.9624 C950.4743,709.8704 950.7881,709.839 951.0986,709.5288 C951.3566,709.271 951.4548,708.9643 951.5611,708.5816 C951.6673,708.1988 951.7514,707.7394 951.8189,707.2199 C951.9539,706.181 952.0237,704.9063 952.0318,703.6284 C952.0398,702.3505 951.9858,701.0731 951.868,700.0307 C951.8091,699.5095 951.7339,699.0477 951.6376,698.6633 C951.5413,698.2789 951.4527,697.9772 951.2154,697.7124 C950.9213,697.3845 950.5801,697.3183 950.124,697.2122 C949.6678,697.1061 949.1015,697.0238 948.4502,696.9585 C947.1476,696.8279 945.5118,696.7669 943.8701,696.7709 M943.874,697.7709 C945.4893,697.767 947.1008,697.829 948.3507,697.9543 C948.9757,698.017 949.5105,698.0969 949.8974,698.1869 C950.2244,698.263 950.4493,698.3916 950.4772,698.392 L950.4782,698.392 L950.4788,698.3915 C950.5054,698.4427 950.6012,698.6375 950.6689,698.9078 C950.7484,699.2249 950.8184,699.6515 950.8741,700.1439 C950.9854,701.1285 951.0401,702.3768 951.0322,703.6222 C951.0242,704.8676 950.9541,706.1131 950.8271,707.0912 C950.7636,707.5802 950.6851,708.0026 950.5987,708.3139 C950.5304,708.56 950.4386,708.7367 950.4049,708.7981 C950.3753,708.7954 950.1411,708.9187 949.8235,708.9836 C949.4337,709.0633 948.895,709.1352 948.2665,709.1929 C947.0095,709.3082 945.3882,709.3702 943.7686,709.3743 C942.149,709.3783 940.5277,709.3236 939.2707,709.2104 C938.6422,709.1538 938.1046,709.081 937.7157,708.9991 C937.3988,708.9324 937.1722,708.8086 937.1411,708.8094 C937.1103,708.7486 937.02,708.5673 936.954,708.3195 C936.8703,708.0052 936.7928,707.5793 936.7297,707.087 C936.6036,706.1026 936.5312,704.8507 936.5225,703.6009 C936.5135,702.3511 936.5691,701.101 936.6904,700.1226 C936.7511,699.6334 936.8297,699.211 936.9173,698.9036 C936.997,698.6241 937.1089,698.4438 937.123,698.4184 C937.1395,698.4183 937.4032,698.2842 937.7767,698.2024 C938.1816,698.1137 938.7309,698.0357 939.3663,697.9719 C940.6371,697.8444 942.2587,697.7748 943.874,697.7709 M942.6746,699.0561 A0.5001,0.5001 0 0 0 942.1868,699.6597 L943.288,704.9059 A0.5001,0.5001 0 0 0 944.2704,704.8842 L945.1494,699.638 A0.5001,0.5001 0 0 0 944.6574,699.0561 M943.7645,706.4996 C943.2853,706.5062 942.8917,706.9107 942.8974,707.39 C942.9034,707.8693 943.3069,708.2641 943.7862,708.2592 C944.2655,708.2543 944.6616,707.8517 944.6575,707.3724 C944.6545,707.028 944.4149,706.785 944.12,706.6438 A0.5,0.5 0 0 0 943.9872,706.5895 C943.9099,706.5674 943.8544,706.499 943.7707,706.4996 A0.5,0.5 0 0 0 943.7687,706.5017 A0.5,0.5 0 0 0 943.7647,706.4996" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="99.1927" x="843.2336" y="725.232">Security_Principle</text></g><!--entity root--><g class="entity" data-qualified-name="root" data-source-line="89" id="ent0040"><rect fill="#F8E7C0" height="71.6882" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="30" y="1017.2339"/><path d="M142.08,1032.4159 A0.5001,0.5001 0 0 0 141.5782,1032.9157 L141.5782,1042.3394 A0.5001,0.5001 0 0 0 142.0779,1042.8396 L156.9999,1042.8396 A0.5001,0.5001 0 0 0 157.4996,1042.3456 L157.5172,1040.5664 L159.0623,1040.5488 A0.5001,0.5001 0 0 0 159.5563,1040.0486 L159.5563,1035.066 A0.5001,0.5001 0 0 0 159.0623,1034.5662 L157.5564,1034.5487 L157.5466,1032.9354 A0.5001,0.5001 0 0 0 157.0464,1032.4393 M142.5782,1033.4159 L156.5492,1033.4371 L156.5647,1035.7222 L156.5042,1041.8397 L142.5782,1041.8397 M147.0079,1034.7145 A0.25,0.25 0 0 0 146.7578,1034.9646 L146.7696,1040.2439 A0.25,0.25 0 0 0 146.7779,1040.3085 A0.25,0.25 0 0 0 146.7883,1040.3395 A0.25,0.25 0 0 0 147.0193,1040.494 A0.25,0.25 0 0 0 147.2694,1040.2439 L147.2575,1034.9646 A0.25,0.25 0 0 0 147.0079,1034.7145 M144.0995,1034.7207 A0.25,0.25 0 0 0 143.8494,1034.9703 L143.8297,1040.2129 A0.25,0.25 0 0 0 144.0798,1040.4645 A0.25,0.25 0 0 0 144.3299,1040.2144 L144.3496,1034.9723 A0.25,0.25 0 0 0 144.0995,1034.7207 M149.9648,1034.7243 A0.25,0.25 0 0 0 149.7147,1034.9723 L149.7049,1040.234 A0.25,0.25 0 0 0 149.955,1040.4841 A0.25,0.25 0 0 0 150.2051,1040.2361 L150.2149,1034.9744 A0.25,0.25 0 0 0 149.9648,1034.7243 M157.5664,1035.5485 L158.5565,1035.5604 L158.5565,1039.5545 L157.5876,1039.5664 L157.5643,1035.6834" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="35.2323" x="57.5317" y="1059.062">«Trust</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="92.7639" y="1059.062"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="46.5843" x="95.884" y="1059.062">Anchor»</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="26.3162" x="56.5597" y="1075.4061">Root</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="82.8759" y="1075.4061"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.0082" x="85.9959" y="1075.4061">Public</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="120.0041" y="1075.4061"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="20.3161" x="123.1242" y="1075.4061">Key</text></g><!--entity system--><g class="entity" data-qualified-name="system" data-source-line="89" id="ent0041"><rect fill="#F8E7C0" height="55.3441" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="295.92" y="1025.4039"/><path d="M408,1040.5859 A0.5001,0.5001 0 0 0 407.4982,1041.0857 L407.4982,1050.5094 A0.5001,0.5001 0 0 0 407.9979,1051.0096 L422.9199,1051.0096 A0.5001,0.5001 0 0 0 423.4196,1050.5156 L423.4372,1048.7364 L424.9823,1048.7188 A0.5001,0.5001 0 0 0 425.4763,1048.2186 L425.4763,1043.236 A0.5001,0.5001 0 0 0 424.9823,1042.7362 L423.4764,1042.7187 L423.4666,1041.1054 A0.5001,0.5001 0 0 0 422.9664,1040.6093 M408.4982,1041.5859 L422.4692,1041.6071 L422.4847,1043.8922 L422.4242,1050.0097 L408.4982,1050.0097 M412.9279,1042.8845 A0.25,0.25 0 0 0 412.6778,1043.1346 L412.6896,1048.4139 A0.25,0.25 0 0 0 412.6979,1048.4785 A0.25,0.25 0 0 0 412.7083,1048.5095 A0.25,0.25 0 0 0 412.9393,1048.664 A0.25,0.25 0 0 0 413.1894,1048.4139 L413.1775,1043.1346 A0.25,0.25 0 0 0 412.9279,1042.8845 M410.0195,1042.8907 A0.25,0.25 0 0 0 409.7694,1043.1403 L409.7497,1048.3829 A0.25,0.25 0 0 0 409.9998,1048.6345 A0.25,0.25 0 0 0 410.2499,1048.3844 L410.2696,1043.1423 A0.25,0.25 0 0 0 410.0195,1042.8907 M415.8848,1042.8943 A0.25,0.25 0 0 0 415.6347,1043.1423 L415.6249,1048.404 A0.25,0.25 0 0 0 415.875,1048.6541 A0.25,0.25 0 0 0 416.1251,1048.4061 L416.1349,1043.1444 A0.25,0.25 0 0 0 415.8848,1042.8943 M423.4864,1043.7185 L424.4765,1043.7304 L424.4765,1047.7245 L423.5076,1047.7364 L423.4843,1043.8534" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="63.2164" x="334.3118" y="1067.232">Application</text></g><!--link hazard_ass to threat_event--><g class="link" data-entity-1="ent0003" data-entity-2="ent0008" data-link-type="association" data-source-line="349" id="lnk20"><path d="M132.21,382.2139 C180.79,338.8339 269,260.0839 269,260.0839 C269,260.0839 285.6,252.2939 304.99,243.1939" fill="none" id="hazard_ass-threat_event" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="218" y="284.602"> </text></g><!--link vuln to threat_event--><g class="link" data-entity-1="ent0006" data-entity-2="ent0008" data-link-type="association" data-source-line="349" id="lnk21"><path d="M170.34,260.0539 C208.37,251.2639 255.43,240.3839 293.74,231.5339" fill="none" id="vuln-threat_event" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="218" y="241.412"> </text></g><!--link vuln to threat_enabler--><g class="link" data-entity-1="ent0006" data-entity-2="ent0004" data-link-type="association" data-source-line="349" id="lnk22"><path d="M158.35,239.8939 C207.01,209.1939 269,170.0839 269,170.0839 C269,170.0839 462.83,170.0839 462.83,170.0839 C462.83,170.0839 516.62,184.3139 563.69,196.7739" fill="none" id="vuln-threat_enabler" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="364.42" y="165.912"> </text></g><!--link vuln to loss_event--><g class="link" data-entity-1="ent0006" data-entity-2="ent0009" data-link-type="association" data-source-line="349" id="lnk23"><path d="M140.81,312.3339 C190.49,357.5839 269,429.0839 269,429.0839 C269,429.0839 292.24,442.4039 315.83,455.9339" fill="none" id="vuln-loss_event" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="218" y="362.112"> </text></g><!--link vuln to asset--><g class="link" data-entity-1="ent0006" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk24"><path d="M166.92,312.1739 C213.98,337.9539 269,368.0839 269,368.0839 C269,368.0839 457.98,377.4339 563.54,382.6539" fill="none" id="vuln-asset" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="364.42" y="363.912"> </text></g><!--link control to threat_enabler--><g class="link" data-entity-1="ent0010" data-entity-2="ent0004" data-link-type="association" data-source-line="349" id="lnk25"><path d="M449.96,276.9739 C486.38,264.6439 528.65,250.3439 563.37,238.5939" fill="none" id="control-threat_enabler" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="511.83" y="245.202"> </text></g><!--link control to asset--><g class="link" data-entity-1="ent0010" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk26"><path d="M459.18,333.1839 C493.38,343.6039 531.55,355.2339 563.38,364.9239" fill="none" id="control-asset" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="511.83" y="341.412"> </text></g><!--link threat_event to threat_enabler--><g class="link" data-entity-1="ent0008" data-entity-2="ent0004" data-link-type="association" data-source-line="349" id="lnk27"><path d="M438.18,215.0839 C477.1,215.0839 525.09,215.0839 563.67,215.0839" fill="none" id="threat_event-threat_enabler" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="511.83" y="210.912"> </text></g><!--link loss_event to asset--><g class="link" data-entity-1="ent0009" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk28"><path d="M436.09,458.5839 C475.33,444.1239 524.29,426.0839 563.55,411.6139" fill="none" id="loss_event-asset" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="511.83" y="419.252"> </text></g><!--link riskex to risk_driver--><g class="link" data-entity-1="ent0002" data-entity-2="ent0014" data-link-type="association" data-source-line="349" id="lnk29"><path d="M105.9695,544.2898 C106.1226,544.5426 106.279,544.8009 106.4386,545.0647 C107.0773,546.1197 107.7686,547.2616 108.5105,548.4872 C109.9943,550.9383 111.6806,553.7241 113.5538,556.8185 C121.0466,569.1962 131.5284,586.5122 143.9925,607.103 C168.9206,648.2846 201.7775,702.5652 234.5075,756.6364 C299.9675,864.7789 364.92,972.0839 364.92,972.0839 C364.92,972.0839 364.92,972.0839 893.83,972.0839 C893.83,972.0839 992.82,935.2239 1063.38,908.9439" fill="none" id="riskex-risk_driver" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="632.33" y="967.912"> </text></g><!--link risk_subj to global_goal--><g class="link" data-entity-1="ent0016" data-entity-2="ent0011" data-link-type="association" data-source-line="349" id="lnk30"><path d="M704.04,741.1639 C740.76,752.8739 785.76,767.2339 822.5,778.9539" fill="none" id="risk_subj-global_goal" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="770.83" y="753.452"> </text></g><!--link risk_assessment to risk_driver--><g class="link" data-entity-1="ent0012" data-entity-2="ent0014" data-link-type="association" data-source-line="349" id="lnk31"><path d="M963.28,888.7539 C994.84,887.6939 1032.09,886.4539 1063.62,885.3939" fill="none" id="risk_assessment-risk_driver" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="1011.83" y="882.432"> </text></g><!--link risk_assessment to risk_assessor--><g class="link" data-entity-1="ent0012" data-entity-2="ent0015" data-link-type="association" data-source-line="349" id="lnk32"><path d="M952.3,862.9439 C985.88,846.7939 1028.25,826.4039 1063.51,809.4339" fill="none" id="risk_assessment-risk_assessor" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="1011.83" y="822.522"> </text></g><!--link risk_assessment to goal--><g class="link" data-entity-1="ent0012" data-entity-2="ent0013" data-link-type="association" data-source-line="349" id="lnk33"><path d="M936.75,863.0939 C950.78,853.9439 962.83,846.0839 962.83,846.0839 C962.83,846.0839 992.83,801.0839 992.83,801.0839 C992.83,801.0839 1063.83,723.0839 1063.83,723.0839 C1063.83,723.0839 1073.94,715.1639 1086.43,705.3939" fill="none" id="risk_assessment-goal" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="1011.83" y="753.242"> </text></g><!--link sec_req to goal--><g class="link" data-entity-1="ent0017" data-entity-2="ent0013" data-link-type="extension" data-source-line="349" id="lnk34"><path d="M963.28,628.6439 C994.84,636.1739 1014.5811,640.878 1046.1111,648.398" fill="none" id="sec_req-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="1063.62,652.5739,1047.5031,642.5617,1044.7191,654.2343,1063.62,652.5739" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.6723" x="993.83" y="632.992">Realise</text></g><!--link sec_princ to goal--><g class="link" data-entity-1="ent0019" data-entity-2="ent0013" data-link-type="extension" data-source-line="349" id="lnk35"><path d="M963.28,698.8739 C994.84,693.3239 1014.3616,689.8989 1045.8916,684.3589" fill="none" id="sec_princ-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="1063.62,681.2439,1044.8533,678.4495,1046.9299,690.2684,1063.62,681.2439" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.6723" x="993.83" y="683.392">Realise</text></g><!--link control_req to sec_princ--><g class="link" data-entity-1="ent0018" data-entity-2="ent0019" data-link-type="extension" data-source-line="349" id="lnk36"><path d="M704.04,638.7439 C740.76,652.8839 768.9643,663.7407 805.7043,677.9007" fill="none" id="control_req-to-sec_princ" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="822.5,684.3739,807.862,672.3021,803.5465,683.4993,822.5,684.3739" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.6723" x="752.83" y="654.442">Realise</text></g><!--link control to control_req--><g class="link" data-entity-1="ent0010" data-entity-2="ent0018" data-link-type="extension" data-source-line="349" id="lnk37"><path d="M416,333.2239 C439.6,346.7539 462.83,360.0839 462.83,360.0839 C462.83,360.0839 492.83,461.0839 492.83,461.0839 C492.83,461.0839 545.6413,518.0449 587.0613,562.7149" fill="none" id="control-to-control_req" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="599.3,575.9139,591.461,558.6354,582.6616,566.7945,599.3,575.9139" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.6723" x="493.83" y="456.912">Realise</text></g><!--link loss_event to global_goal--><g class="link" data-entity-1="ent0009" data-entity-2="ent0011" data-link-type="dependency" data-source-line="349" id="lnk38"><path d="M384.18,512.0439 C430.82,587.5839 555.83,790.0839 555.83,790.0839 C555.83,790.0839 716.2643,795.3322 814.6243,798.5522" fill="none" id="loss_event-to-global_goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#000000" points="822.62,798.8139,814.7224,795.5538,814.5261,801.5506,822.62,798.8139" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="26.0162" x="620.83" y="785.912">Flow</text></g><!--link threat_agent to threat_event--><g class="link" data-entity-1="ent0007" data-entity-2="ent0008" data-link-type="dependency" data-source-line="349" id="lnk39"><path d="M181.8238,159.5756 C219.8538,171.1056 247.7739,179.5737 286.0839,191.1837" fill="none" id="threat_agent-threat_event" style="stroke:#000000;stroke-width:1;"/><ellipse cx="176.0819" cy="157.8348" fill="#000000" rx="6" ry="6" style="stroke:#000000;stroke-width:1.5;"/><polygon fill="#000000" points="293.74,193.5039,286.9539,188.3127,285.2138,194.0548,293.74,193.5039" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="37.0563" x="201" y="161.392">Assign</text></g><!--link root to system--><g class="link" data-entity-1="ent0040" data-entity-2="ent0041" data-link-type="association" data-source-line="349" id="lnk42"><path d="M170.34,1053.0839 C208.98,1053.0839 256.94,1053.0839 295.58,1053.0839" fill="none" id="root-system" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="218" y="1048.912"> </text></g><?plantuml-src fLNDJXin4BxlKqnp8P5GM_LMX9023RHg4MWJLQeKAN8sqrs3Oo-sTqj0VQ8-GcyyMSVh_IKRQ4ikySvydsSy_cRyYij8P2k4GwQZXA-PnJVZQdKK2FnkmIhGF4uihBZ6o78b0tFDPSeqMuFW4kqcHKYLsBYF80Xct0e42ASNSCbYXFS70ASyVWtltXv0oCqrCBc2AKQPvdO35pbgmJOG17iGQvMbNCR1MRaOQiBZxJuC2kBaDaNDKKOu6Dq7mRcoF6SkfSNO63HcZT8E4tR7z6h1Z27Qn-836lTWv0Bj_U-FkDDPE9vDphxHqgeOROBwFfXQJIMBDuiGZSfqX4ERQ6HsWP8j1MfAPLOOOE8DbCSsXt96Ir2NhWK2krEtaISiPKikg6x3F1EIe5_f3tLfdCi6GBGz-FdImoupGxTgJEUmnwLnCOwiqjL9wQwbhSyvTbzpMK6XW59EDNUIkykggfHxRWslYfNxAtl44egMMvmlPAqPxkmrQuewvrJVI4chbI3IftKgqEa1Lt3YhN2Ep6GQlK9gARwuX8rAWwQ4BUcUAIQ6iL1B9XOnhIaxPw8q-lNjMiAfk_okUgCZyQtj_Rw7X-LPBvPNhfTpF3gQo-re7pIvj8-qAjP4VlZjuZpycall7eoWpPbQTes94gkAw5DKkanmBiUbeHjhYsUovLNDcMP5fbrAY3SP3QEY6WQZXSOR8bGJPIvR_jt4KWibkQnBAO4djhZKD3CvYQU8dBglLkp6JInI3bt_CTvnJ399_H24ADnDgeWNctL6LRiJHbj8t-t_Wl5ZPXUgwQ1TY68MKIiyzjOzz5oW6hXhfsxlFxTTk-Uh7RT0rNFHKkukcDTPg-z6_R1MftLs_IjmrGFFmtq6i0UFWVjGbYv49lYTDrQgB_gwS1WSzQAyGf_6jLkXuTJmm2VLm-X5xyAsetJHfqBzQDzlUnWwNwCT7ijrwzdmJqv7HnxaBZteUM2rKhQOWpET6GjZ6ILAknaOaWCkiwNW4Np6JU_hR3R6ujezpsbAkE9qWvwRBM9uiClZ3m00?></g></svg>
\ No newline at end of file +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="980px" preserveAspectRatio="none" style="width:1210px;height:980px;background:#FFFFFF;" version="1.1" viewBox="0 0 1210 980" width="1210px" zoomAndPan="magnify"><title>RSO Page 9: Fig. 20: Risk and Security Overlay</title><defs><filter height="300%" id="f1qip4ltn965ai" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4" dy="4" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="318.1208" x="439.3546" y="24.9659">RSO Page 9: Fig. 20: Risk and Security Overlay</text></g><!--cluster riskex--><g class="cluster" data-qualified-name="riskex" data-source-line="340" id="ent0002"><path d="M8.5,46.0839 L103.2207,46.0839 A3.75,3.75 0 0 1 105.7207,48.5839 L112.7207,68.4281 L725.33,68.4281 A2.5,2.5 0 0 1 727.83,70.9281 L727.83,542.5839 A2.5,2.5 0 0 1 725.33,545.0839 L8.5,545.0839 A2.5,2.5 0 0 1 6,542.5839 L6,48.5839 A2.5,2.5 0 0 1 8.5,46.0839" fill="#FFFFFF" filter="url(#f1qip4ltn965ai)" style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;"/><line style="stroke:#444444;stroke-width:1.5;stroke-dasharray:8,5;" x1="6" x2="112.7207" y1="68.4281" y2="68.4281"/><text fill="#000000" font-family="Verdana" font-size="12" font-weight="bold" lengthAdjust="spacing" textLength="93.7207" x="10" y="60.912">Risk Experience</text></g><!--entity hazard_ass--><g class="entity" data-qualified-name="riskex.hazard_ass" data-source-line="277" id="ent0003"><path d="M42,99.4139 L158,99.4139 L170,111.4139 L170,142.7581 L158,154.7581 L42,154.7581 L30,142.7581 L30,111.4139 L42,99.4139" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M154.573,111.2049 C151.9045,111.2413 149.7601,113.4427 149.7919,116.1111 C149.8075,117.4206 150.344,118.6047 151.2021,119.468 L144.8133,125.8573 A0.5,0.5 0 0 0 144.8133,126.5643 A0.5,0.5 0 0 0 145.5202,126.5643 L151.9803,120.1042 C152.7578,120.6162 153.6899,120.9102 154.6881,120.9 C157.3567,120.8727 159.5095,118.6799 159.4868,116.0114 C159.4641,113.3429 157.2746,111.1867 154.606,111.205 A0.5,0.5 0 0 0 154.5905,111.2107 A0.5,0.5 0 0 0 154.573,111.205 M154.604,112.1971 L154.6045,112.1971 A0.5,0.5 0 0 0 154.6123,112.2049 C156.7411,112.1904 158.4688,113.8905 158.487,116.0191 C158.5052,118.1477 156.8072,119.8782 154.6784,119.9 C153.7727,119.9093 152.9388,119.6082 152.2775,119.0949 A0.5,0.5 0 0 0 152.1959,119.0298 C151.3494,118.3352 150.806,117.2845 150.7919,116.0992 C150.7665,113.9707 152.4578,112.2338 154.5865,112.2049 A0.5,0.5 0 0 0 154.604,112.1971" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="40.3323" x="44.6916" y="141.242">Hazard</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="85.0239" y="141.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.1645" x="88.1439" y="141.242">Assessment</text></g><!--entity threat_enabler--><g class="entity" data-qualified-name="riskex.threat_enabler" data-source-line="89" id="ent0004"><rect fill="#F8E7C0" height="55.3441" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="563.83" y="180.4139"/><path d="M675.91,195.5959 A0.5001,0.5001 0 0 0 675.4082,196.0957 L675.4082,205.5194 A0.5001,0.5001 0 0 0 675.9079,206.0196 L690.8299,206.0196 A0.5001,0.5001 0 0 0 691.3296,205.5256 L691.3472,203.7464 L692.8923,203.7288 A0.5001,0.5001 0 0 0 693.3863,203.2286 L693.3863,198.246 A0.5001,0.5001 0 0 0 692.8923,197.7462 L691.3864,197.7287 L691.3766,196.1154 A0.5001,0.5001 0 0 0 690.8764,195.6193 M676.4082,196.5959 L690.3792,196.6171 L690.3947,198.9022 L690.3342,205.0197 L676.4082,205.0197 M680.8379,197.8945 A0.25,0.25 0 0 0 680.5878,198.1446 L680.5996,203.4239 A0.25,0.25 0 0 0 680.6079,203.4885 A0.25,0.25 0 0 0 680.6183,203.5195 A0.25,0.25 0 0 0 680.8493,203.674 A0.25,0.25 0 0 0 681.0994,203.4239 L681.0875,198.1446 A0.25,0.25 0 0 0 680.8379,197.8945 M677.9295,197.9007 A0.25,0.25 0 0 0 677.6794,198.1503 L677.6597,203.3929 A0.25,0.25 0 0 0 677.9098,203.6445 A0.25,0.25 0 0 0 678.1599,203.3944 L678.1796,198.1523 A0.25,0.25 0 0 0 677.9295,197.9007 M683.7948,197.9043 A0.25,0.25 0 0 0 683.5447,198.1523 L683.5349,203.414 A0.25,0.25 0 0 0 683.785,203.6641 A0.25,0.25 0 0 0 684.0351,203.4161 L684.0449,198.1544 A0.25,0.25 0 0 0 683.7948,197.9043 M691.3964,198.7285 L692.3865,198.7404 L692.3865,202.7345 L691.4176,202.7464 L691.3943,198.8634" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.8763" x="592.3217" y="222.242">Threat</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="629.198" y="222.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="43.0203" x="632.318" y="222.242">Enabler</text></g><!--entity asset--><g class="entity" data-qualified-name="riskex.asset" data-source-line="89" id="ent0005"><rect fill="#F8E7C0" height="55.3441" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="563.83" y="359.4139"/><path d="M675.91,374.5959 A0.5001,0.5001 0 0 0 675.4082,375.0957 L675.4082,384.5194 A0.5001,0.5001 0 0 0 675.9079,385.0196 L690.8299,385.0196 A0.5001,0.5001 0 0 0 691.3296,384.5256 L691.3472,382.7464 L692.8923,382.7288 A0.5001,0.5001 0 0 0 693.3863,382.2286 L693.3863,377.246 A0.5001,0.5001 0 0 0 692.8923,376.7462 L691.3864,376.7287 L691.3766,375.1154 A0.5001,0.5001 0 0 0 690.8764,374.6193 M676.4082,375.5959 L690.3792,375.6171 L690.3947,377.9022 L690.3342,384.0197 L676.4082,384.0197 M680.8379,376.8945 A0.25,0.25 0 0 0 680.5878,377.1446 L680.5996,382.4239 A0.25,0.25 0 0 0 680.6079,382.4885 A0.25,0.25 0 0 0 680.6183,382.5195 A0.25,0.25 0 0 0 680.8493,382.674 A0.25,0.25 0 0 0 681.0994,382.4239 L681.0875,377.1446 A0.25,0.25 0 0 0 680.8379,376.8945 M677.9295,376.9007 A0.25,0.25 0 0 0 677.6794,377.1503 L677.6597,382.3929 A0.25,0.25 0 0 0 677.9098,382.6445 A0.25,0.25 0 0 0 678.1599,382.3944 L678.1796,377.1523 A0.25,0.25 0 0 0 677.9295,376.9007 M683.7948,376.9043 A0.25,0.25 0 0 0 683.5447,377.1523 L683.5349,382.414 A0.25,0.25 0 0 0 683.785,382.6641 A0.25,0.25 0 0 0 684.0351,382.4161 L684.0449,377.1544 A0.25,0.25 0 0 0 683.7948,376.9043 M691.3964,377.7285 L692.3865,377.7404 L692.3865,381.7345 L691.4176,381.7464 L691.3943,377.8634" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="30.2642" x="598.6877" y="401.242">Asset</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="628.952" y="401.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="11.0641" x="632.072" y="401.242">at</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="643.1361" y="401.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="646.2561" y="401.242">Risk</text></g><!--entity vuln--><g class="entity" data-qualified-name="riskex.vuln" data-source-line="92" id="ent0006"><rect fill="#F8E7C0" height="71.6882" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="30" y="324.2439"/><path d="M152.917,336.6079 A0.5001,0.5001 0 0 0 152.4132,337.1077 L152.4132,341.6335 L147.9111,341.6118 A0.5001,0.5001 0 0 0 147.4093,342.112 L147.4093,346.6647 L142.8819,346.6647 A0.5001,0.5001 0 0 0 142.3817,347.1685 L142.4287,352.1041 A0.5001,0.5001 0 0 0 142.9289,352.5982 L157.9429,352.5982 A0.5001,0.5001 0 0 0 158.4431,352.0979 L158.4194,337.1309 A0.5001,0.5001 0 0 0 157.9212,336.6307 M153.4131,337.6099 L157.4191,337.6296 L157.4248,341.6567 L153.4132,341.637 M148.4093,342.6137 L152.4132,342.6334 L152.4132,346.6647 L148.4093,346.6647 M153.4131,342.637 L157.4191,342.6566 L157.4191,346.6646 L153.4131,346.6646 M143.3861,347.6646 L147.4096,347.6646 L147.4096,351.5982 L143.4253,351.5982 M148.4096,347.6646 L152.4135,347.6646 L152.4135,351.5744 L148.4096,351.5744 M153.4134,347.6646 L157.4349,347.6646 L157.4427,351.5982 L153.4135,351.5982" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="70.7045" x="64.6478" y="366.072">Vulnerability</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="55.5484" x="72.2258" y="382.4161">Capability</text></g><!--entity threat_agent--><g class="entity" data-qualified-name="riskex.threat_agent" data-source-line="110" id="ent0007"><rect fill="#FFFFCC" height="71.6882" rx="0.5" ry="0.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="30" y="190.2439"/><path d="M150.8958,201.1939 C148.8974,201.2211 147.2882,202.8712 147.312,204.8697 C147.3338,206.6913 148.706,208.1913 150.4622,208.4271 L150.4622,209.6369 L144.9778,209.6214 A0.5,0.5 0 0 0 144.4761,210.1196 A0.5,0.5 0 0 0 144.9742,210.6214 L150.4622,210.6369 L150.4622,213.8403 L147.5187,218.9671 A0.5,0.5 0 0 0 147.7042,219.6487 A0.5,0.5 0 0 0 148.3859,219.4652 L150.9036,215.0784 L153.5091,219.4399 A0.5006,0.5006 0 0 0 154.3684,218.9263 L151.4621,214.0511 L151.4621,210.6394 L156.9796,210.6549 A0.5,0.5 0 0 0 157.4819,210.1546 A0.5,0.5 0 0 0 156.9838,209.6549 L151.4622,209.6394 L151.4622,208.4229 C153.2335,208.1695 154.595,206.6314 154.5793,204.7952 C154.5622,202.7967 152.9196,201.1802 150.9211,201.1939 A0.5,0.5 0 0 0 150.9097,201.1999 A0.5,0.5 0 0 0 150.8958,201.1939 M150.9191,202.1898 A0.5,0.5 0 0 0 150.9289,202.1938 C152.3876,202.1838 153.5669,203.3443 153.5794,204.8029 C153.5919,206.2616 152.4325,207.4447 150.9739,207.4596 C149.5153,207.4745 148.3294,206.3163 148.312,204.8577 C148.2946,203.3991 149.4512,202.2136 150.9098,202.1938 A0.5,0.5 0 0 0 150.9191,202.1898" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="70.4405" x="64.7798" y="232.072">ThreatAgent</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.7404" x="58.5817" y="248.4161">Business</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="108.3221" y="248.4161"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="29.9762" x="111.4421" y="248.4161">Actor</text></g><!--entity threat_event--><g class="entity" data-qualified-name="riskex.threat_event" data-source-line="136" id="ent0008"><rect fill="#FFFFCC" height="55.3441" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="144.1409" x="293.85" y="99.4139"/><path d="M410.1109,115.8239 A0.5001,0.5001 0 0 0 409.7714,116.6911 L414.197,120.7839 C413.7355,121.1945 412.9491,121.8961 412.164,122.605 C411.5535,123.1562 410.9441,123.7112 410.4861,124.1403 C410.257,124.3548 410.066,124.5378 409.9274,124.6772 C409.8581,124.7469 409.8033,124.804 409.7554,124.8591 C409.7315,124.8867 409.7098,124.9111 409.6815,124.9526 C409.6673,124.9734 409.6506,124.9976 409.6288,125.0467 C409.6179,125.0713 409.6063,125.1026 409.5957,125.1537 C409.5907,125.1792 409.5838,125.2472 409.5838,125.2478 C409.5837,125.2484 409.6012,125.3878 409.6014,125.3883 A0.5001,0.5001 0 0 0 410.084,125.7594 L422.734,125.7594 A0.5,0.5 0 0 0 422.738,125.7594 C425.4252,125.7346 427.5852,123.4815 427.5641,120.752 C427.5429,118.0242 425.3521,115.8082 422.6672,115.8241 C422.6662,115.8241 422.6652,115.8241 422.6632,115.8241 L422.6572,115.8241 M411.3883,116.8239 L422.6633,116.8239 A0.5,0.5 0 0 0 422.6673,116.8239 A0.5,0.5 0 0 0 422.6713,116.8239 C424.8043,116.8114 426.5465,118.5596 426.5636,120.7596 C426.5807,122.9575 424.8702,124.734 422.7401,124.7594 C422.7381,124.7594 422.7361,124.7594 422.7341,124.7594 L411.2901,124.7594 C411.7271,124.352 412.2693,123.8562 412.8332,123.3471 C413.9567,122.3325 415.0846,121.3308 415.2501,121.1839 A0.5,0.5 0 0 0 415.308,121.1307 A0.5,0.5 0 0 0 415.3886,121.0103 A0.5,0.5 0 0 0 415.3896,121.0083 A0.5,0.5 0 0 0 415.4123,120.953 A0.5,0.5 0 0 0 415.4163,120.9401 A0.5,0.5 0 0 0 415.4297,120.8895 A0.5,0.5 0 0 0 415.4317,120.874 A0.5,0.5 0 0 0 415.4377,120.829 A0.5,0.5 0 0 0 415.4387,120.8011 A0.5,0.5 0 0 0 415.4381,120.7623 A0.5,0.5 0 0 0 415.4351,120.7396 A0.5,0.5 0 0 0 415.4291,120.6972 A0.5,0.5 0 0 0 415.4221,120.6683 A0.5,0.5 0 0 0 415.4141,120.6389 A0.5,0.5 0 0 0 415.3996,120.6007 A0.5,0.5 0 0 0 415.3906,120.578 A0.5,0.5 0 0 0 415.3234,120.4731 A0.5,0.5 0 0 0 415.3224,120.4721 A0.5,0.5 0 0 0 415.3134,120.4607 A0.5,0.5 0 0 0 415.2571,120.4059" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.7404" x="303.85" y="141.242">Business</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="353.5904" y="141.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="36.8763" x="356.7104" y="141.242">Threat</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="393.5866" y="141.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="31.2842" x="396.7067" y="141.242">Event</text></g><!--entity loss_event--><g class="entity" data-qualified-name="riskex.loss_event" data-source-line="136" id="ent0009"><rect fill="#FFFFCC" height="55.3441" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="140" x="295.92" y="457.4139"/><path d="M408.04,473.8239 A0.5001,0.5001 0 0 0 407.7005,474.6911 L412.1261,478.7839 C411.6646,479.1945 410.8782,479.8961 410.0931,480.605 C409.4827,481.1562 408.8732,481.7112 408.4152,482.1403 C408.1862,482.3548 407.9951,482.5378 407.8566,482.6772 C407.7873,482.7469 407.7324,482.804 407.6845,482.8591 C407.6606,482.8867 407.6389,482.9111 407.6106,482.9526 C407.5964,482.9734 407.5797,482.9976 407.5579,483.0467 C407.547,483.0713 407.5354,483.1026 407.5248,483.1537 C407.5198,483.1792 407.5129,483.2472 407.5129,483.2478 C407.5129,483.2484 407.5303,483.3878 407.5305,483.3883 A0.5001,0.5001 0 0 0 408.0132,483.7594 L420.6632,483.7594 A0.5,0.5 0 0 0 420.6672,483.7594 C423.3544,483.7346 425.5144,481.4815 425.4933,478.752 C425.4721,476.0242 423.2813,473.8082 420.5964,473.8241 C420.5954,473.8241 420.5944,473.8241 420.5924,473.8241 L420.5864,473.8241 M409.3174,474.8239 L420.5924,474.8239 A0.5,0.5 0 0 0 420.5964,474.8239 A0.5,0.5 0 0 0 420.6004,474.8239 C422.7334,474.8114 424.4756,476.5596 424.4927,478.7596 C424.5098,480.9575 422.7993,482.734 420.6692,482.7594 C420.6672,482.7594 420.6652,482.7594 420.6632,482.7594 L409.2192,482.7594 C409.6562,482.352 410.1985,481.8562 410.7623,481.3471 C411.8858,480.3325 413.0137,479.3308 413.1792,479.1839 A0.5,0.5 0 0 0 413.2371,479.1307 A0.5,0.5 0 0 0 413.3177,479.0103 A0.5,0.5 0 0 0 413.3187,479.0083 A0.5,0.5 0 0 0 413.3414,478.953 A0.5,0.5 0 0 0 413.3454,478.9401 A0.5,0.5 0 0 0 413.3588,478.8895 A0.5,0.5 0 0 0 413.3608,478.874 A0.5,0.5 0 0 0 413.3668,478.829 A0.5,0.5 0 0 0 413.3678,478.8011 A0.5,0.5 0 0 0 413.3673,478.7623 A0.5,0.5 0 0 0 413.3643,478.7396 A0.5,0.5 0 0 0 413.3583,478.6972 A0.5,0.5 0 0 0 413.3513,478.6683 A0.5,0.5 0 0 0 413.3433,478.6389 A0.5,0.5 0 0 0 413.3288,478.6007 A0.5,0.5 0 0 0 413.3198,478.578 A0.5,0.5 0 0 0 413.2526,478.4731 A0.5,0.5 0 0 0 413.2516,478.4721 A0.5,0.5 0 0 0 413.2426,478.4607 A0.5,0.5 0 0 0 413.1863,478.4059" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.7404" x="309.7656" y="499.242">Business</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="359.506" y="499.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.0442" x="362.626" y="499.242">Loss</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="387.6702" y="499.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="31.2842" x="390.7902" y="499.242">Event</text></g><!--entity control--><g class="entity" data-qualified-name="riskex.control" data-source-line="142" id="ent0010"><rect fill="#FFFFCC" height="55.3441" rx="12.5" ry="12.5" style="stroke:#181818;stroke-width:0.5;" width="193.8333" x="269" y="278.4139"/><path d="M440.3333,294.3239 C437.6577,294.3179 435.4802,296.528 435.4561,299.2461 C435.432,301.9642 437.5702,304.2156 440.2455,304.2597 A0.5,0.5 0 0 0 440.261,304.2597 L447.802,304.2597 A0.5,0.5 0 0 0 447.808,304.2597 C450.4952,304.2349 452.6532,301.9813 452.632,299.2517 C452.6109,296.5335 450.435,294.3251 447.763,294.3254 L447.763,294.3234 L447.7299,294.3234 M440.3313,295.3239 A0.5,0.5 0 0 0 440.3353,295.3239 L447.7627,295.3239 C449.8852,295.324 451.6147,297.0675 451.6317,299.2596 C451.6488,301.4596 449.935,303.2379 447.802,303.2599 C447.801,303.2599 447.799,303.2599 447.798,303.2599 L440.2631,303.2599 C438.1379,303.2248 436.4366,301.4481 436.4561,299.256 C436.4756,297.0639 438.2058,295.3196 440.3313,295.3239" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="76.4165" x="279" y="320.242">Implemented</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="355.4165" y="320.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="41.9043" x="358.5366" y="320.242">Control</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="400.4409" y="320.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.2724" x="403.5609" y="320.242">Measure</text></g><!--entity global_goal--><g class="entity" data-qualified-name="global_goal" data-source-line="280" id="ent0011"><path d="M834.83,774.4139 L950.83,774.4139 L962.83,786.4139 L962.83,817.7581 L950.83,829.7581 L834.83,829.7581 L822.83,817.7581 L822.83,786.4139 L834.83,774.4139" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M943.855,788.1679 A0.5,0.5 0 0 0 943.8338,788.1777 A0.5,0.5 0 0 0 943.8142,788.1699 C940.395,788.2165 937.6482,791.0339 937.689,794.4532 C937.7297,797.8725 940.5411,800.6227 943.9605,800.5877 C947.3799,800.5528 950.1366,797.7455 950.1074,794.3261 C950.0782,790.9067 947.2746,788.1444 943.8551,788.1678 M943.8534,789.1581 A0.5,0.5 0 0 0 943.8627,789.1679 C946.7424,789.1482 949.0828,791.4544 949.1073,794.334 C949.1319,797.2136 946.8306,799.5585 943.951,799.5879 C941.0714,799.6173 938.7236,797.321 938.6893,794.4414 C938.655,791.5619 940.948,789.2091 943.8275,789.1699 A0.5,0.5 0 0 0 943.8533,789.158 M943.8451,790.51 C941.7167,790.5389 940.0034,792.2955 940.0288,794.424 C940.0542,796.5525 941.8086,798.2698 943.9371,798.2481 C946.0656,798.2263 947.7855,796.4746 947.7674,794.346 C947.7492,792.2175 945.9996,790.4955 943.871,790.5101 A0.5,0.5 0 0 0 943.8591,790.5214 A0.5,0.5 0 0 0 943.8452,790.5101 M943.8725,791.5037 A0.5,0.5 0 0 0 943.8787,791.5099 C945.4674,791.499 946.7539,792.7649 946.7674,794.3537 C946.7809,795.9424 945.516,797.2319 943.9273,797.2481 C942.3386,797.2643 941.0477,796.0008 941.0288,794.4121 C941.0099,792.8234 942.2705,791.5316 943.8591,791.51 A0.5,0.5 0 0 0 943.8725,791.5038 M943.8746,792.6912 C942.9553,792.7038 942.1997,793.4793 942.2106,794.3986 C942.2216,795.3179 942.9966,796.0756 943.9159,796.0662 C944.8352,796.0568 945.5934,795.2828 945.5856,794.3635 C945.5778,793.4442 944.8058,792.685 943.8865,792.6913 A0.959,0.959 0 0 0 943.8803,792.6975 A0.959,0.959 0 0 0 943.8746,792.6913" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.8242" x="879.9179" y="816.242">Goal</text></g><!--entity risk_assessment--><g class="entity" data-qualified-name="risk_assessment" data-source-line="277" id="ent0012"><path d="M834.83,864.4139 L950.83,864.4139 L962.83,876.4139 L962.83,907.7581 L950.83,919.7581 L834.83,919.7581 L822.83,907.7581 L822.83,876.4139 L834.83,864.4139" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M947.403,876.2049 C944.7345,876.2413 942.5901,878.4427 942.6219,881.1111 C942.6375,882.4206 943.174,883.6047 944.0321,884.468 L937.6433,890.8573 A0.5,0.5 0 0 0 937.6433,891.5643 A0.5,0.5 0 0 0 938.3502,891.5643 L944.8103,885.1042 C945.5878,885.6162 946.5199,885.9102 947.5181,885.9 C950.1867,885.8727 952.3395,883.6799 952.3168,881.0114 C952.2941,878.3429 950.1046,876.1867 947.436,876.205 A0.5,0.5 0 0 0 947.4205,876.2107 A0.5,0.5 0 0 0 947.403,876.205 M947.434,877.1971 L947.4345,877.1971 A0.5,0.5 0 0 0 947.4423,877.2049 C949.5711,877.1904 951.2988,878.8905 951.317,881.0191 C951.3352,883.1477 949.6372,884.8782 947.5084,884.9 C946.6027,884.9093 945.7688,884.6082 945.1075,884.0949 A0.5,0.5 0 0 0 945.0259,884.0298 C944.1794,883.3352 943.636,882.2845 943.6219,881.0992 C943.5965,878.9707 945.2878,877.2338 947.4165,877.2049 A0.5,0.5 0 0 0 947.434,877.1971" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="846.3296" y="906.242">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="869.0458" y="906.242"> </text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="67.1645" x="872.1658" y="906.242">Assessment</text></g><!--entity goal--><g class="entity" data-qualified-name="goal" data-source-line="280" id="ent0013"><path d="M1075.83,634.2439 L1191.83,634.2439 L1203.83,646.2439 L1203.83,693.9322 L1191.83,705.9322 L1075.83,705.9322 L1063.83,693.9322 L1063.83,646.2439 L1075.83,634.2439" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M1184.855,647.9979 A0.5,0.5 0 0 0 1184.8338,648.0077 A0.5,0.5 0 0 0 1184.8142,647.9999 C1181.395,648.0465 1178.6482,650.8639 1178.689,654.2832 C1178.7297,657.7025 1181.5411,660.4527 1184.9605,660.4177 C1188.3799,660.3828 1191.1366,657.5755 1191.1074,654.1561 C1191.0782,650.7367 1188.2746,647.9744 1184.8551,647.9978 M1184.8534,648.9881 A0.5,0.5 0 0 0 1184.8627,648.9979 C1187.7424,648.9782 1190.0828,651.2844 1190.1073,654.164 C1190.1319,657.0436 1187.8306,659.3885 1184.951,659.4179 C1182.0714,659.4473 1179.7236,657.151 1179.6893,654.2714 C1179.655,651.3919 1181.948,649.0391 1184.8275,648.9999 A0.5,0.5 0 0 0 1184.8533,648.988 M1184.8451,650.34 C1182.7167,650.3689 1181.0034,652.1255 1181.0288,654.254 C1181.0542,656.3825 1182.8086,658.0998 1184.9371,658.0781 C1187.0656,658.0563 1188.7855,656.3046 1188.7674,654.176 C1188.7492,652.0475 1186.9996,650.3255 1184.871,650.3401 A0.5,0.5 0 0 0 1184.8591,650.3514 A0.5,0.5 0 0 0 1184.8452,650.3401 M1184.8725,651.3337 A0.5,0.5 0 0 0 1184.8787,651.3399 C1186.4674,651.329 1187.7539,652.5949 1187.7674,654.1837 C1187.7809,655.7724 1186.516,657.0619 1184.9273,657.0781 C1183.3386,657.0943 1182.0477,655.8308 1182.0288,654.2421 C1182.0099,652.6534 1183.2705,651.3616 1184.8591,651.34 A0.5,0.5 0 0 0 1184.8725,651.3338 M1184.8746,652.5212 C1183.9553,652.5338 1183.1997,653.3093 1183.2106,654.2286 C1183.2216,655.1479 1183.9966,655.9056 1184.9159,655.8962 C1185.8352,655.8868 1186.5934,655.1128 1186.5856,654.1935 C1186.5778,653.2742 1185.8058,652.515 1184.8865,652.5213 A0.959,0.959 0 0 0 1184.8803,652.5275 A0.959,0.959 0 0 0 1184.8746,652.5213" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="106.7888" x="1080.4356" y="676.072">«ControlObjective»</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="25.8242" x="1120.9179" y="692.4161">Goal</text></g><!--entity risk_driver--><g class="entity" data-qualified-name="risk_driver" data-source-line="274" id="ent0014"><path d="M1075.83,847.7439 L1191.83,847.7439 L1203.83,859.7439 L1203.83,908.4322 L1191.83,920.4322 L1075.83,920.4322 L1063.83,908.4322 L1063.83,859.7439 L1075.83,847.7439" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M1184.891,858.1869 A0.5,0.5 0 0 0 1184.3908,858.6872 L1184.3908,861.1666 C1182.9552,861.259 1181.6472,861.8224 1180.6184,862.7019 L1178.8847,860.9682 A0.5,0.5 0 0 0 1178.5312,860.8219 A0.5,0.5 0 0 0 1178.1777,860.9682 A0.5,0.5 0 0 0 1178.1777,861.6751 L1179.9104,863.4078 C1179.025,864.4377 1178.4583,865.748 1178.3632,867.1812 L1175.8967,867.1812 A0.5,0.5 0 0 0 1175.3965,867.6809 A0.5,0.5 0 0 0 1175.8967,868.1811 L1178.3741,868.1811 C1178.4987,869.5979 1179.0832,870.8836 1179.975,871.8899 L1178.2128,873.6515 L1178.172,873.6929 A0.5001,0.5001 0 0 0 1178.8789,874.3998 L1178.881,874.3998 L1178.9203,874.359 L1180.6938,872.5855 C1181.7128,873.4304 1182.9933,873.9688 1184.3907,874.0588 L1184.3907,876.6809 A0.5001,0.5001 0 0 0 1185.3906,876.6809 L1185.3906,874.0459 C1186.7681,873.9221 1188.0212,873.3637 1189.0132,872.5106 L1190.9025,874.3999 A0.5001,0.5001 0 0 0 1191.6094,873.693 L1191.5686,873.6516 L1189.7191,871.8026 C1190.5688,870.8082 1191.1226,869.5545 1191.243,868.1811 L1193.8924,868.1811 A0.5001,0.5001 0 0 0 1193.8924,867.1812 L1191.2533,867.1812 C1191.1604,865.7869 1190.6226,864.5121 1189.7821,863.4982 L1191.6058,861.6751 A0.5,0.5 0 0 0 1191.6058,860.9682 A0.5,0.5 0 0 0 1190.8968,860.9682 L1189.0855,862.7789 C1188.0809,861.889 1186.7992,861.3064 1185.3906,861.1795 L1185.3906,858.6871 A0.5,0.5 0 0 0 1184.8909,858.1868 M1184.3908,862.6703 L1184.3908,866.1507 C1184.3119,866.1767 1184.2353,866.2084 1184.1618,866.2453 L1181.6772,863.7602 C1182.4282,863.1499 1183.363,862.7553 1184.3907,862.6703 M1185.3907,862.6874 C1186.3923,862.8036 1187.302,863.2158 1188.0293,863.8356 L1185.631,866.2339 C1185.5539,866.1966 1185.4734,866.1651 1185.3907,866.1398 M1180.9687,864.4666 L1183.4378,866.9352 C1183.3934,867.0136 1183.3551,867.096 1183.3236,867.1812 L1179.8675,867.1812 C1179.9549,866.1548 1180.3531,865.2183 1180.9687,864.4666 M1188.7217,864.5586 C1189.2948,865.2928 1189.6653,866.1944 1189.7495,867.1812 L1186.4929,867.1812 C1186.4584,867.088 1186.4161,866.9984 1186.3663,866.9135 M1179.8814,868.1811 L1183.2765,868.1811 C1183.304,868.2838 1183.3414,868.3834 1183.3871,868.4777 L1181.0312,870.8331 C1180.4093,870.1036 1179.9957,869.1899 1179.8814,868.1811 M1186.5394,868.1811 L1189.7361,868.1811 C1189.6268,869.1473 1189.2415,870.0285 1188.6602,870.7437 L1186.4174,868.5009 L1186.4174,868.5004 C1186.4684,868.3991 1186.5096,868.2921 1186.5394,868.181 M1184.0677,869.2115 L1184.0682,869.2115 C1184.1697,869.2708 1184.2778,869.3205 1184.3907,869.3577 L1184.3907,872.5549 C1183.4001,872.4732 1182.493,872.1023 1181.7542,871.5255 M1185.727,869.2244 L1187.9548,871.4522 C1187.2413,872.0368 1186.36,872.426 1185.3906,872.5384 L1185.3906,869.3691 C1185.5085,869.3331 1185.6212,869.2842 1185.727,869.2244" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.9323" x="1116.3639" y="890.572">»Risk«</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="34.6322" x="1116.5139" y="906.9161">Driver</text></g><!--entity risk_assessor--><g class="entity" data-qualified-name="risk_assessor" data-source-line="270" id="ent0015"><path d="M1075.83,741.2439 L1191.83,741.2439 L1203.83,753.2439 L1203.83,800.9322 L1191.83,812.9322 L1075.83,812.9322 L1063.83,800.9322 L1063.83,753.2439 L1075.83,741.2439" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M1190.275,756.7179 L1179.412,756.7257 A0.5,0.5 0 0 0 1179.4022,756.7257 C1178.4139,756.7437 1177.5412,757.293 1176.9414,758.1029 C1176.3416,758.9129 1175.9889,759.991 1175.9885,761.1709 C1175.9881,762.3508 1176.3401,763.4309 1176.9393,764.2415 C1177.5385,765.0521 1178.4103,765.6011 1179.3986,765.6202 A0.5,0.5 0 0 0 1179.4079,765.6202 A0.5,0.5 0 0 0 1179.4177,765.6202 L1190.3397,765.63 L1190.3397,765.629 C1191.1649,765.6273 1191.9828,765.2173 1192.5995,764.4642 A0.5,0.5 0 0 0 1192.6187,764.3996 A0.5,0.5 0 0 0 1192.6791,764.3645 C1193.9754,762.6723 1194.0403,760.02 1192.8455,758.216 C1192.2481,757.314 1191.3962,756.7774 1190.4978,756.7215 C1190.4451,756.7182 1190.3924,756.7188 1190.3397,756.7189 L1190.3397,756.7179 L1190.2777,756.7179 C1190.2768,756.7179 1190.2755,756.7179 1190.2746,756.7179 M1190.3401,757.7169 C1190.3721,757.7169 1190.4039,757.718 1190.4357,757.72 C1190.983,757.754 1191.5515,758.0719 1192.0118,758.767 C1192.9324,760.157 1192.8668,762.4759 1191.8868,763.7553 A0.5,0.5 0 0 0 1191.8733,763.8059 A0.5,0.5 0 0 0 1191.8263,763.8312 C1191.3639,764.3959 1190.8463,764.6325 1190.3401,764.6301 L1190.3375,764.6301 C1190.2946,764.6299 1190.2515,764.6275 1190.2088,764.6239 C1189.6615,764.5772 1189.0934,764.2453 1188.6404,763.5382 C1187.7345,762.124 1187.8298,759.8073 1188.8223,758.554 C1189.2693,757.9896 1189.7762,757.7375 1190.2723,757.7179 L1190.34,757.7179 M1188.2214,757.7195 C1188.1589,757.7873 1188.0978,757.8586 1188.039,757.9329 C1186.7201,759.5983 1186.6261,762.2491 1187.7971,764.0772 C1187.9263,764.2788 1188.0678,764.4628 1188.2199,764.628 L1179.4184,764.6202 L1179.4178,764.6202 C1178.7863,764.608 1178.1999,764.2644 1177.744,763.6477 C1177.2882,763.031 1176.9882,762.1499 1176.9885,761.1708 C1176.9889,760.1918 1177.2878,759.3126 1177.744,758.6965 C1178.2003,758.0804 1178.7883,757.737 1179.4199,757.7255" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="1122.4719" y="783.072">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="49.6444" x="1109.0078" y="799.4161">Assessor</text></g><!--entity risk_subj--><g class="entity" data-qualified-name="risk_subj" data-source-line="270" id="ent0016"><path d="M575.83,684.2439 L691.83,684.2439 L703.83,696.2439 L703.83,743.9322 L691.83,755.9322 L575.83,755.9322 L563.83,743.9322 L563.83,696.2439 L575.83,684.2439" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M690.275,699.7179 L679.412,699.7257 A0.5,0.5 0 0 0 679.4022,699.7257 C678.4139,699.7437 677.5412,700.293 676.9414,701.1029 C676.3416,701.9129 675.9889,702.991 675.9885,704.1709 C675.9881,705.3508 676.3401,706.4309 676.9393,707.2415 C677.5385,708.0521 678.4103,708.6011 679.3986,708.6202 A0.5,0.5 0 0 0 679.4079,708.6202 A0.5,0.5 0 0 0 679.4177,708.6202 L690.3397,708.63 L690.3397,708.629 C691.1649,708.6273 691.9828,708.2173 692.5995,707.4642 A0.5,0.5 0 0 0 692.6187,707.3996 A0.5,0.5 0 0 0 692.6791,707.3645 C693.9754,705.6723 694.0403,703.02 692.8455,701.216 C692.2481,700.314 691.3962,699.7774 690.4978,699.7215 C690.4451,699.7182 690.3924,699.7188 690.3397,699.7189 L690.3397,699.7179 L690.2777,699.7179 C690.2768,699.7179 690.2755,699.7179 690.2746,699.7179 M690.3401,700.7169 C690.3721,700.7169 690.4039,700.718 690.4357,700.72 C690.9831,700.754 691.5515,701.0719 692.0118,701.767 C692.9324,703.157 692.8668,705.4759 691.8868,706.7553 A0.5,0.5 0 0 0 691.8733,706.8059 A0.5,0.5 0 0 0 691.8263,706.8312 C691.3639,707.3959 690.8463,707.6325 690.3401,707.6301 L690.3375,707.6301 C690.2946,707.6299 690.2515,707.6275 690.2088,707.6239 C689.6615,707.5772 689.0934,707.2453 688.6404,706.5382 C687.7345,705.124 687.8298,702.8073 688.8223,701.554 C689.2693,700.9896 689.7762,700.7375 690.2723,700.7179 L690.34,700.7179 M688.2214,700.7195 C688.1589,700.7873 688.0978,700.8586 688.039,700.9329 C686.7201,702.5983 686.6261,705.2491 687.7971,707.0772 C687.9263,707.2788 688.0678,707.4628 688.2199,707.628 L679.4184,707.6202 L679.4178,707.6202 C678.7863,707.608 678.1999,707.2644 677.744,706.6477 C677.2882,706.031 676.9882,705.1499 676.9885,704.1708 C676.9889,703.1918 677.2878,702.3126 677.744,701.6965 C678.2003,701.0804 678.7883,700.737 679.4199,700.7255" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="22.7162" x="622.4719" y="726.072">Risk</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="41.3403" x="613.1599" y="742.4161">Subject</text></g><!--entity sec_req--><g class="entity" data-qualified-name="sec_req" data-source-line="289" id="ent0017"><path d="M834.83,577.2439 L950.83,577.2439 L962.83,589.2439 L962.83,636.9322 L950.83,648.9322 L834.83,648.9322 L822.83,636.9322 L822.83,589.2439 L834.83,577.2439" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M938.93,593.7889 A0.5001,0.5001 0 0 0 938.4827,594.0663 L934.5179,602.0311 A0.5001,0.5001 0 0 0 934.9672,602.7537 C939.6076,602.7401 944.2431,602.8055 948.8972,602.7596 A0.5001,0.5001 0 0 0 949.3405,602.4823 L953.3034,594.5116 A0.5001,0.5001 0 0 0 952.8562,593.7889 M939.2386,594.7889 L952.0496,594.7889 L948.5828,601.7596 C944.3159,601.7973 940.0501,601.749 935.7718,601.7537" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="45.0363" x="870.3118" y="619.072">Security</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="73.5845" x="856.0377" y="635.4161">Requirement</text></g><!--entity control_req--><g class="entity" data-qualified-name="control_req" data-source-line="289" id="ent0018"><path d="M575.83,577.2439 L691.83,577.2439 L703.83,589.2439 L703.83,636.9322 L691.83,648.9322 L575.83,648.9322 L563.83,636.9322 L563.83,589.2439 L575.83,577.2439" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M679.93,593.7889 A0.5001,0.5001 0 0 0 679.4827,594.0663 L675.5179,602.0311 A0.5001,0.5001 0 0 0 675.9672,602.7537 C680.6076,602.7401 685.2431,602.8055 689.8972,602.7596 A0.5001,0.5001 0 0 0 690.3405,602.4823 L694.3034,594.5116 A0.5001,0.5001 0 0 0 693.8562,593.7889 M680.2386,594.7889 L693.0496,594.7889 L689.5828,601.7596 C685.3159,601.7973 681.0501,601.749 676.7718,601.7537" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="91.1767" x="588.2417" y="619.072">ControlMeasure</text><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="73.5845" x="597.0377" y="635.4161">Requirement</text></g><!--entity sec_princ--><g class="entity" data-qualified-name="sec_princ" data-source-line="286" id="ent0019"><path d="M834.83,684.4139 L950.83,684.4139 L962.83,696.4139 L962.83,727.7581 L950.83,739.7581 L834.83,739.7581 L822.83,727.7581 L822.83,696.4139 L834.83,684.4139" fill="#CCCCFF" style="stroke:#181818;stroke-width:0.5;"/><path d="M943.87,697.7809 C942.2283,697.7849 940.5853,697.8537 939.2661,697.9861 C938.6065,698.0523 938.029,698.1336 937.5629,698.2357 C937.2303,698.3085 937.0072,698.4293 936.7702,698.5561 L936.5945,698.5561 L936.4519,698.6853 C936.1717,698.9393 936.0636,699.2548 935.9537,699.6403 C935.8438,700.0258 935.7626,700.4871 935.6979,701.0092 C935.5684,702.0533 935.5133,703.3355 935.5222,704.6188 C935.5312,705.9021 935.6036,707.1822 935.7372,708.2243 C935.8039,708.7453 935.8852,709.206 935.9868,709.5875 C936.0884,709.9689 936.1779,710.2682 936.4245,710.529 C936.7298,710.852 937.0554,710.8924 937.5087,710.9879 C937.9619,711.0833 938.5301,711.1576 939.1825,711.2163 C940.4873,711.3338 942.1291,711.3884 943.7724,711.3843 C945.4158,711.3802 947.0562,711.3161 948.3582,711.1967 C949.0091,711.1369 949.5742,711.0644 950.0242,710.9724 C950.4743,710.8804 950.7881,710.849 951.0986,710.5388 C951.3566,710.281 951.4548,709.9743 951.5611,709.5916 C951.6673,709.2088 951.7514,708.7494 951.8189,708.2299 C951.9539,707.191 952.0237,705.9163 952.0318,704.6384 C952.0398,703.3605 951.9858,702.0831 951.868,701.0407 C951.8091,700.5195 951.7339,700.0577 951.6376,699.6733 C951.5413,699.2889 951.4527,698.9872 951.2154,698.7224 C950.9213,698.3945 950.5801,698.3283 950.124,698.2222 C949.6678,698.1161 949.1015,698.0338 948.4502,697.9685 C947.1476,697.8379 945.5118,697.7769 943.8701,697.7809 M943.874,698.7809 C945.4893,698.777 947.1008,698.839 948.3507,698.9643 C948.9757,699.027 949.5105,699.1069 949.8974,699.1969 C950.2244,699.273 950.4493,699.4016 950.4772,699.402 L950.4782,699.402 L950.4788,699.4015 C950.5054,699.4527 950.6012,699.6475 950.6689,699.9178 C950.7484,700.2349 950.8184,700.6615 950.8741,701.1539 C950.9854,702.1385 951.0401,703.3868 951.0322,704.6322 C951.0242,705.8776 950.9541,707.1231 950.8271,708.1012 C950.7636,708.5902 950.6851,709.0126 950.5987,709.3239 C950.5304,709.57 950.4386,709.7467 950.4049,709.8081 C950.3753,709.8054 950.1411,709.9287 949.8235,709.9936 C949.4337,710.0733 948.895,710.1452 948.2665,710.2029 C947.0095,710.3182 945.3882,710.3802 943.7686,710.3843 C942.149,710.3883 940.5277,710.3336 939.2707,710.2204 C938.6422,710.1638 938.1046,710.091 937.7157,710.0091 C937.3988,709.9424 937.1722,709.8186 937.1411,709.8194 C937.1103,709.7586 937.02,709.5773 936.954,709.3295 C936.8703,709.0152 936.7928,708.5893 936.7297,708.097 C936.6036,707.1126 936.5312,705.8607 936.5225,704.6109 C936.5135,703.3611 936.5691,702.111 936.6904,701.1326 C936.7511,700.6434 936.8297,700.221 936.9173,699.9136 C936.997,699.6341 937.1089,699.4538 937.123,699.4284 C937.1395,699.4283 937.4032,699.2942 937.7767,699.2124 C938.1816,699.1237 938.7309,699.0457 939.3663,698.9819 C940.6371,698.8544 942.2587,698.7848 943.874,698.7809 M942.6746,700.0661 A0.5001,0.5001 0 0 0 942.1868,700.6697 L943.288,705.9159 A0.5001,0.5001 0 0 0 944.2704,705.8942 L945.1494,700.648 A0.5001,0.5001 0 0 0 944.6574,700.0661 M943.7645,707.5096 C943.2853,707.5162 942.8917,707.9207 942.8974,708.4 C942.9034,708.8793 943.3069,709.2741 943.7862,709.2692 C944.2655,709.2643 944.6616,708.8617 944.6575,708.3824 C944.6545,708.038 944.4149,707.795 944.12,707.6538 A0.5,0.5 0 0 0 943.9872,707.5995 C943.9099,707.5774 943.8544,707.509 943.7707,707.5096 A0.5,0.5 0 0 0 943.7687,707.5117 A0.5,0.5 0 0 0 943.7647,707.5096" fill="#000000"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="99.1927" x="843.2336" y="726.242">Security_Principle</text></g><!--link hazard_ass to threat_event--><g class="link" data-entity-1="ent0003" data-entity-2="ent0008" data-link-type="association" data-source-line="349" id="lnk20"><path d="M170.34,127.0839 C208.37,127.0839 255.43,127.0839 293.74,127.0839" fill="none" id="hazard_ass-threat_event" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="218" y="122.912"> </text></g><!--link vuln to threat_event--><g class="link" data-entity-1="ent0006" data-entity-2="ent0008" data-link-type="association" data-source-line="349" id="lnk21"><path d="M135.11,323.9939 C175.98,280.7639 239,214.0839 239,214.0839 C239,214.0839 269,182.0839 269,182.0839 C269,182.0839 292.24,168.7639 315.83,155.2239" fill="none" id="vuln-threat_event" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="218" y="209.912"> </text></g><!--link vuln to threat_enabler--><g class="link" data-entity-1="ent0006" data-entity-2="ent0004" data-link-type="association" data-source-line="349" id="lnk22"><path d="M162.6,323.7839 C210.55,295.5239 269,261.0839 269,261.0839 C269,261.0839 492.83,219.0839 492.83,219.0839 C492.83,219.0839 528.38,216.2939 563.65,213.5239" fill="none" id="vuln-threat_enabler" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="364.42" y="220.702"> </text></g><!--link vuln to loss_event--><g class="link" data-entity-1="ent0006" data-entity-2="ent0009" data-link-type="association" data-source-line="349" id="lnk23"><path d="M167.58,396.4039 C185.49,406.1739 200,414.0839 200,414.0839 C200,414.0839 253.64,437.1739 299.74,457.0239" fill="none" id="vuln-loss_event" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="218" y="409.912"> </text></g><!--link vuln to asset--><g class="link" data-entity-1="ent0006" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk24"><path d="M170.3,363.7939 C216.58,366.2739 269,369.0839 269,369.0839 C269,369.0839 457.98,378.4339 563.54,383.6539" fill="none" id="vuln-asset" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="364.42" y="364.912"> </text></g><!--link control to threat_enabler--><g class="link" data-entity-1="ent0010" data-entity-2="ent0004" data-link-type="association" data-source-line="349" id="lnk25"><path d="M443.12,278.0039 C481.03,264.0339 526.51,247.2639 563.44,233.6539" fill="none" id="control-threat_enabler" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="511.83" y="241.252"> </text></g><!--link control to asset--><g class="link" data-entity-1="ent0010" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk26"><path d="M459.18,334.1839 C493.38,344.6039 531.55,356.2339 563.38,365.9339" fill="none" id="control-asset" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="511.83" y="342.412"> </text></g><!--link threat_event to threat_enabler--><g class="link" data-entity-1="ent0008" data-entity-2="ent0004" data-link-type="association" data-source-line="349" id="lnk27"><path d="M438.18,148.7939 C477.1,160.6439 525.09,175.2639 563.67,187.0139" fill="none" id="threat_event-threat_enabler" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="511.83" y="163.412"> </text></g><!--link loss_event to asset--><g class="link" data-entity-1="ent0009" data-entity-2="ent0005" data-link-type="association" data-source-line="349" id="lnk28"><path d="M436.09,459.5939 C475.33,445.1339 524.29,427.0839 563.55,412.6139" fill="none" id="loss_event-asset" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="511.83" y="420.252"> </text></g><!--link riskex to risk_driver--><g class="link" data-entity-1="ent0002" data-entity-2="ent0014" data-link-type="association" data-source-line="349" id="lnk29"><path d="M105.9695,545.2917 C106.1226,545.5446 106.279,545.8029 106.4386,546.0667 C107.0773,547.1218 107.7686,548.2638 108.5105,549.4895 C109.9943,551.9408 111.6806,554.7268 113.5538,557.8214 C121.0466,570.1998 131.5284,587.5162 143.9925,608.1072 C168.9206,649.2893 201.7775,703.5696 234.5075,757.6402 C299.9675,865.7814 364.92,973.0839 364.92,973.0839 C364.92,973.0839 364.92,973.0839 893.83,973.0839 C893.83,973.0839 992.82,936.2239 1063.38,909.9439" fill="none" id="riskex-risk_driver" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="632.33" y="968.912"> </text></g><!--link risk_subj to global_goal--><g class="link" data-entity-1="ent0016" data-entity-2="ent0011" data-link-type="association" data-source-line="349" id="lnk30"><path d="M704.04,742.1639 C740.76,753.8839 785.76,768.2439 822.5,779.9639" fill="none" id="risk_subj-global_goal" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="770.83" y="754.452"> </text></g><!--link risk_assessment to risk_driver--><g class="link" data-entity-1="ent0012" data-entity-2="ent0014" data-link-type="association" data-source-line="349" id="lnk31"><path d="M963.28,889.7639 C994.84,888.7039 1032.09,887.4539 1063.62,886.4039" fill="none" id="risk_assessment-risk_driver" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="1011.83" y="883.432"> </text></g><!--link risk_assessment to risk_assessor--><g class="link" data-entity-1="ent0012" data-entity-2="ent0015" data-link-type="association" data-source-line="349" id="lnk32"><path d="M952.3,863.9539 C985.88,847.7939 1028.25,827.4039 1063.51,810.4439" fill="none" id="risk_assessment-risk_assessor" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="1011.83" y="823.522"> </text></g><!--link risk_assessment to goal--><g class="link" data-entity-1="ent0012" data-entity-2="ent0013" data-link-type="association" data-source-line="349" id="lnk33"><path d="M936.75,864.0939 C950.78,854.9439 962.83,847.0839 962.83,847.0839 C962.83,847.0839 992.83,802.0839 992.83,802.0839 C992.83,802.0839 1063.83,724.0839 1063.83,724.0839 C1063.83,724.0839 1073.94,716.1739 1086.43,706.4039" fill="none" id="risk_assessment-goal" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="3.12" x="1011.83" y="754.242"> </text></g><!--link sec_req to goal--><g class="link" data-entity-1="ent0017" data-entity-2="ent0013" data-link-type="extension" data-source-line="349" id="lnk34"><path d="M963.28,629.6439 C994.84,637.1739 1014.5811,641.878 1046.1111,649.398" fill="none" id="sec_req-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="1063.62,653.5739,1047.5031,643.5617,1044.7191,655.2343,1063.62,653.5739" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.6723" x="993.83" y="634.002">Realise</text></g><!--link sec_princ to goal--><g class="link" data-entity-1="ent0019" data-entity-2="ent0013" data-link-type="extension" data-source-line="349" id="lnk35"><path d="M963.28,699.8839 C994.84,694.3339 1014.3616,690.8989 1045.8916,685.3589" fill="none" id="sec_princ-to-goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="1063.62,682.2439,1044.8533,679.4495,1046.9299,691.2684,1063.62,682.2439" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.6723" x="993.83" y="684.402">Realise</text></g><!--link control_req to sec_princ--><g class="link" data-entity-1="ent0018" data-entity-2="ent0019" data-link-type="extension" data-source-line="349" id="lnk36"><path d="M704.04,639.7439 C740.76,653.8939 768.9627,664.7547 805.7027,678.9047" fill="none" id="control_req-to-sec_princ" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="822.5,685.3739,807.8592,673.3056,803.5463,684.5038,822.5,685.3739" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.6723" x="752.83" y="655.442">Realise</text></g><!--link control to control_req--><g class="link" data-entity-1="ent0010" data-entity-2="ent0018" data-link-type="extension" data-source-line="349" id="lnk37"><path d="M416,334.2239 C439.6,347.7639 462.83,361.0839 462.83,361.0839 C462.83,361.0839 492.83,462.0839 492.83,462.0839 C492.83,462.0839 545.6413,519.0449 587.0613,563.7149" fill="none" id="control-to-control_req" style="stroke:#000000;stroke-width:1;stroke-dasharray:1,3;"/><polygon fill="none" points="599.3,576.9139,591.461,559.6354,582.6616,567.7945,599.3,576.9139" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="39.6723" x="493.83" y="457.912">Realise</text></g><!--link loss_event to global_goal--><g class="link" data-entity-1="ent0009" data-entity-2="ent0011" data-link-type="dependency" data-source-line="349" id="lnk38"><path d="M384.18,513.0539 C430.82,588.5939 555.83,791.0839 555.83,791.0839 C555.83,791.0839 716.2643,796.3322 814.6243,799.5522" fill="none" id="loss_event-to-global_goal" style="stroke:#000000;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#000000" points="822.62,799.8139,814.7224,796.5538,814.5261,802.5506,822.62,799.8139" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="26.0162" x="620.83" y="786.912">Flow</text></g><!--link threat_agent to threat_event--><g class="link" data-entity-1="ent0007" data-entity-2="ent0008" data-link-type="dependency" data-source-line="349" id="lnk39"><path d="M181.5751,195.8582 C219.6051,181.5882 247.9396,170.9636 286.2496,156.5936" fill="none" id="threat_agent-threat_event" style="stroke:#000000;stroke-width:1;"/><ellipse cx="175.9576" cy="197.9661" fill="#000000" rx="6" ry="6" style="stroke:#000000;stroke-width:1.5;"/><polygon fill="#000000" points="293.74,153.7839,285.196,153.7847,287.3032,159.4025,293.74,153.7839" style="stroke:#000000;stroke-width:1;"/><text fill="#000000" font-family="Verdana" font-size="12" lengthAdjust="spacing" textLength="37.0563" x="201" y="172.412">Assign</text></g><?plantuml-src fLNDRXCn4BxlKmov994gGDoegaffIGiILQiaGaAA53cROUFMiRUsTscAU28UWLkVZF5wVxpTf0MQI-oPxviPZx_nlk8o5jaAuOZfUCqtpEARKRKwZWH-is0LQ9wiBQounjXo9IDpmsNADDk0u1BjDaL8bTYwJHH5Csu50aocbt354eJtXm1dF7aDxzuUmeIR6s1o1LECCytj5Yvpr89j8Ohwa6YLfLmcqNcv66Z2uzq1z0hY-2v5pL76s1l-YA8BPNdEN4cBaJ5ep0Qb7QpPFTEh1JE6Q1-B3JJktj0bwl_lZxZJsMGq6vz_fQLL2TerwX_Hr6fgMR9TJD2eJCSui6kDp2vGigL0JQNC2WEClO7gw7AePhG4TULQ8B0xTOWyPIbRSa5z6-IPa0JzGd-eI-DSDW2YzU7dIm-xp0pTgZ6jmvwKniKejafN9wMxbhO-vyZjvhA2GW6bcchkE7UNLNKfzzmQNZKhzrVsY2KKBJkSpsIj6UxiDMkAEkVKtrX9gvKWqgTDAj3f0LTmwgrmWSna6hr2QYc-k8MDIgEcXO5qpnKJWqIe9HEBXDPKdJDH6RlrxKR2gRlSLxFHadWdl8zxT5IUzN9vxMOvn-FZkUnc-w39fNscLR4cyiDlb-VXrrnwTsy88MTgsGskbLXLH5-YqcM1Spag3UrS7Px9bjSrPveLbROf4xpDw34gkc4mNcYy9KBreinbuDzFBBLGaik-b19u8iILfZUJatYApAdR1RaRDx58ENJz9tZFSPr9ceTeWiBTf8fv4QprL8MJCEmW_RJ_2yO_C_jGpGJjGnHl4Ot2OsyzGyybge7x8hLd_xbmuSnN4JkWwdCHA7SVpEiicBlXRbWmQQseVmMkPk1vkAy0-l0OU01bwoR81B_tnahrnLmN3eF3dIYlqATnuIWqd1eU-Q9sC7QYzs73B6tqcL3Vm_iD7qFdQxJ34xa9FXl-azFIaGUvI_y3?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/index.adoc b/PlantUML-ModelingTrust/index.adoc index ed40f79..218c327 100644 --- a/PlantUML-ModelingTrust/index.adoc +++ b/PlantUML-ModelingTrust/index.adoc @@ -25,9 +25,11 @@ I will extend the process from SLSA Level 1 to SLSA Level 4, which will include |=== | Example from Paper | | Applied to the NetBSD download -| image::6-3a.svg[] | | image::6-3c.svg[] -| image::8-7a-Trust-Composition.svg[] | | image::8-7-GnuPG-Trust-Composition.svg[] +| image::6-3a.svg[] | | image::6-3c.svg[] +| image::8-7a-Trust-Composition.svg[] | | image::8-7-GnuPG-Trust-Composition.svg[] | image::RSO9-10-RiskSecurityOverlay.svg[] | | image::RSO9-10-GnuPG-RiskSecurityOverlay.svg[] -| image::9-9-RiskAssessmentPattern.svg[] | | image::9-9-GnuPG-RiskAssessmentPattern.svg[] +| image::9-9-RiskAssessmentPattern.svg[] | | image::9-9-GnuPG-RiskAssessmentPattern.svg[] +| | | image::9-9-GnuPG-RiskAssessmentPattern2.svg[] +| | | image::9-9-GnuPG-RiskAssessmentPattern3.svg[] |=== diff --git a/PlantUML-ModelingTrust/index.html b/PlantUML-ModelingTrust/index.html index e2906d4..9f9b0bb 100644 --- a/PlantUML-ModelingTrust/index.html +++ b/PlantUML-ModelingTrust/index.html @@ -1,578 +1,870 @@ -<!DOCTYPE html> -<html lang="en"> -<head> -<meta charset="UTF-8"> -<meta http-equiv="X-UA-Compatible" content="IE=edge"> -<meta name="viewport" content="width=device-width, initial-scale=1.0"> -<meta name="generator" content="Asciidoctor 2.0.26"> -<meta name="author" content="0.0.1"> -<title>Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate</title> -<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Open+Sans:300,300italic,400,400italic,600,600italic%7CNoto+Serif:400,400italic,700,700italic%7CDroid+Sans+Mono:400,700"> -<style> -/*! Asciidoctor default stylesheet | MIT License | https://asciidoctor.org */ -/* Uncomment the following line when using as a custom stylesheet */ -/* @import "https://fonts.googleapis.com/css?family=Open+Sans:300,300italic,400,400italic,600,600italic%7CNoto+Serif:400,400italic,700,700italic%7CDroid+Sans+Mono:400,700"; */ -html{font-family:sans-serif;-webkit-text-size-adjust:100%} -a{background:none} -a:focus{outline:thin dotted} -a:active,a:hover{outline:0} -h1{font-size:2em;margin:.67em 0} -b,strong{font-weight:bold} -abbr{font-size:.9em} -abbr[title]{cursor:help;border-bottom:1px dotted #dddddf;text-decoration:none} -dfn{font-style:italic} -hr{height:0} -mark{background:#ff0;color:#000} -code,kbd,pre,samp{font-family:monospace;font-size:1em} -pre{white-space:pre-wrap} -q{quotes:"\201C" "\201D" "\2018" "\2019"} -small{font-size:80%} -sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline} -sup{top:-.5em} -sub{bottom:-.25em} -img{border:0} -svg:not(:root){overflow:hidden} -figure{margin:0} -audio,video{display:inline-block} -audio:not([controls]){display:none;height:0} -fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em} -legend{border:0;padding:0} -button,input,select,textarea{font-family:inherit;font-size:100%;margin:0} -button,input{line-height:normal} -button,select{text-transform:none} -button,html input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer} -button[disabled],html input[disabled]{cursor:default} -input[type=checkbox],input[type=radio]{padding:0} -button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0} -textarea{overflow:auto;vertical-align:top} -table{border-collapse:collapse;border-spacing:0} -*,::before,::after{box-sizing:border-box} -html,body{font-size:100%} -body{background:#fff;color:rgba(0,0,0,.8);padding:0;margin:0;font-family:"Noto Serif","DejaVu Serif",serif;line-height:1;position:relative;cursor:auto;-moz-tab-size:4;-o-tab-size:4;tab-size:4;word-wrap:anywhere;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased} -a:hover{cursor:pointer} -img,object,embed{max-width:100%;height:auto} -object,embed{height:100%} -img{-ms-interpolation-mode:bicubic} -.left{float:left!important} -.right{float:right!important} -.text-left{text-align:left!important} -.text-right{text-align:right!important} -.text-center{text-align:center!important} -.text-justify{text-align:justify!important} -.hide{display:none} -img,object,svg{display:inline-block;vertical-align:middle} -textarea{height:auto;min-height:50px} -select{width:100%} -.subheader,.admonitionblock td.content>.title,.audioblock>.title,.exampleblock>.title,.imageblock>.title,.listingblock>.title,.literalblock>.title,.stemblock>.title,.openblock>.title,.paragraph>.title,.quoteblock>.title,table.tableblock>.title,.verseblock>.title,.videoblock>.title,.dlist>.title,.olist>.title,.ulist>.title,.qlist>.title,.hdlist>.title{line-height:1.45;color:#7a2518;font-weight:400;margin-top:0;margin-bottom:.25em} -div,dl,dt,dd,ul,ol,li,h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6,pre,form,p,blockquote,th,td{margin:0;padding:0} -a{color:#2156a5;text-decoration:underline;line-height:inherit} -a:hover,a:focus{color:#1d4b8f} -a img{border:0} -p{line-height:1.6;margin-bottom:1.25em;text-rendering:optimizeLegibility} -p aside{font-size:.875em;line-height:1.35;font-style:italic} -h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{font-family:"Open Sans","DejaVu Sans",sans-serif;font-weight:300;font-style:normal;color:#ba3925;text-rendering:optimizeLegibility;margin-top:1em;margin-bottom:.5em;line-height:1.0125em} -h1 small,h2 small,h3 small,#toctitle small,.sidebarblock>.content>.title small,h4 small,h5 small,h6 small{font-size:60%;color:#e99b8f;line-height:0} -h1{font-size:2.125em} -h2{font-size:1.6875em} -h3,#toctitle,.sidebarblock>.content>.title{font-size:1.375em} -h4,h5{font-size:1.125em} -h6{font-size:1em} -hr{border:solid #dddddf;border-width:1px 0 0;clear:both;margin:1.25em 0 1.1875em} -em,i{font-style:italic;line-height:inherit} -strong,b{font-weight:bold;line-height:inherit} -small{font-size:60%;line-height:inherit} -code{font-family:"Droid Sans Mono","DejaVu Sans Mono",monospace;font-weight:400;color:rgba(0,0,0,.9)} -ul,ol,dl{line-height:1.6;margin-bottom:1.25em;list-style-position:outside;font-family:inherit} -ul,ol{margin-left:1.5em} -ul li ul,ul li ol{margin-left:1.25em;margin-bottom:0} -ul.circle{list-style-type:circle} -ul.disc{list-style-type:disc} -ul.square{list-style-type:square} -ul.circle ul:not([class]),ul.disc ul:not([class]),ul.square ul:not([class]){list-style:inherit} -ol li ul,ol li ol{margin-left:1.25em;margin-bottom:0} -dl dt{margin-bottom:.3125em;font-weight:bold} -dl dd{margin-bottom:1.25em} -blockquote{margin:0 0 1.25em;padding:.5625em 1.25em 0 1.1875em;border-left:1px solid #ddd} -blockquote,blockquote p{line-height:1.6;color:rgba(0,0,0,.85)} -@media screen and (min-width:768px){h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{line-height:1.2} -h1{font-size:2.75em} -h2{font-size:2.3125em} -h3,#toctitle,.sidebarblock>.content>.title{font-size:1.6875em} -h4{font-size:1.4375em}} -table{background:#fff;margin-bottom:1.25em;border:1px solid #dedede;word-wrap:normal} -table thead,table tfoot{background:#f7f8f7} -table thead tr th,table thead tr td,table tfoot tr th,table tfoot tr td{padding:.5em .625em .625em;font-size:inherit;color:rgba(0,0,0,.8);text-align:left} -table tr th,table tr td{padding:.5625em .625em;font-size:inherit;color:rgba(0,0,0,.8)} -table tr.even,table tr.alt{background:#f8f8f7} -table thead tr th,table tfoot tr th,table tbody tr td,table tr td,table tfoot tr td{line-height:1.6} -h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{line-height:1.2;word-spacing:-.05em} -h1 strong,h2 strong,h3 strong,#toctitle strong,.sidebarblock>.content>.title strong,h4 strong,h5 strong,h6 strong{font-weight:400} -.center{margin-left:auto;margin-right:auto} -.stretch{width:100%} -.clearfix::before,.clearfix::after,.float-group::before,.float-group::after{content:" ";display:table} -.clearfix::after,.float-group::after{clear:both} -:not(pre).nobreak{word-wrap:normal} -:not(pre).nowrap{white-space:nowrap} -:not(pre).pre-wrap{white-space:pre-wrap} -:not(pre):not([class^=L])>code{font-size:.9375em;font-style:normal!important;letter-spacing:0;padding:.1em .5ex;word-spacing:-.15em;background:#f7f7f8;border-radius:4px;line-height:1.45;text-rendering:optimizeSpeed} -pre{color:rgba(0,0,0,.9);font-family:"Droid Sans Mono","DejaVu Sans Mono",monospace;line-height:1.45;text-rendering:optimizeSpeed} -pre code,pre pre{color:inherit;font-size:inherit;line-height:inherit} -pre.nowrap,pre.nowrap pre{white-space:pre;word-wrap:normal} -em em{font-style:normal} -strong strong{font-weight:400} -.keyseq{color:rgba(51,51,51,.8)} -kbd{font-family:"Droid Sans Mono","DejaVu Sans Mono",monospace;display:inline-block;color:rgba(0,0,0,.8);font-size:.65em;line-height:1.45;background:#f7f7f7;border:1px solid #ccc;border-radius:3px;box-shadow:0 1px 0 rgba(0,0,0,.2),inset 0 0 0 .1em #fff;margin:0 .15em;padding:.2em .5em;vertical-align:middle;position:relative;top:-.1em;white-space:nowrap} -.keyseq kbd:first-child{margin-left:0} -.keyseq kbd:last-child{margin-right:0} -.menuseq,.menuref{color:#000} -.menuseq b:not(.caret),.menuref{font-weight:inherit} -.menuseq{word-spacing:-.02em} -.menuseq b.caret{font-size:1.25em;line-height:.8} -.menuseq i.caret{font-weight:bold;text-align:center;width:.45em} -b.button::before,b.button::after{position:relative;top:-1px;font-weight:400} -b.button::before{content:"[";padding:0 3px 0 2px} -b.button::after{content:"]";padding:0 2px 0 3px} -p a>code:hover{color:rgba(0,0,0,.9)} -#header,#content,#footnotes,#footer{width:100%;margin:0 auto;max-width:62.5em;*zoom:1;position:relative;padding-left:.9375em;padding-right:.9375em} -#header::before,#header::after,#content::before,#content::after,#footnotes::before,#footnotes::after,#footer::before,#footer::after{content:" ";display:table} -#header::after,#content::after,#footnotes::after,#footer::after{clear:both} -#content{margin-top:1.25em} -#content::before{content:none} -#header>h1:first-child{color:rgba(0,0,0,.85);margin-top:2.25rem;margin-bottom:0} -#header>h1:first-child+#toc{margin-top:8px;border-top:1px solid #dddddf} -#header>h1:only-child{border-bottom:1px solid #dddddf;padding-bottom:8px} -#header .details{border-bottom:1px solid #dddddf;line-height:1.45;padding-top:.25em;padding-bottom:.25em;padding-left:.25em;color:rgba(0,0,0,.6);display:flex;flex-flow:row wrap} -#header .details span:first-child{margin-left:-.125em} -#header .details span.email a{color:rgba(0,0,0,.85)} -#header .details br{display:none} -#header .details br+span::before{content:"\00a0\2013\00a0"} -#header .details br+span.author::before{content:"\00a0\22c5\00a0";color:rgba(0,0,0,.85)} -#header .details br+span#revremark::before{content:"\00a0|\00a0"} -#header #revnumber{text-transform:capitalize} -#header #revnumber::after{content:"\00a0"} -#content>h1:first-child:not([class]){color:rgba(0,0,0,.85);border-bottom:1px solid #dddddf;padding-bottom:8px;margin-top:0;padding-top:1rem;margin-bottom:1.25rem} -#toc{border-bottom:1px solid #e7e7e9;padding-bottom:.5em} -#toc>ul{margin-left:.125em} -#toc ul.sectlevel0>li>a{font-style:italic} -#toc ul.sectlevel0 ul.sectlevel1{margin:.5em 0} -#toc ul{font-family:"Open Sans","DejaVu Sans",sans-serif;list-style-type:none} -#toc li{line-height:1.3334;margin-top:.3334em} -#toc a{text-decoration:none} -#toc a:active{text-decoration:underline} -#toctitle{color:#7a2518;font-size:1.2em} -@media screen and (min-width:768px){#toctitle{font-size:1.375em} -body.toc2{padding-left:15em;padding-right:0} -body.toc2 #header>h1:nth-last-child(2){border-bottom:1px solid #dddddf;padding-bottom:8px} -#toc.toc2{margin-top:0!important;background:#f8f8f7;position:fixed;width:15em;left:0;top:0;border-right:1px solid #e7e7e9;border-top-width:0!important;border-bottom-width:0!important;z-index:1000;padding:1.25em 1em;height:100%;overflow:auto} -#toc.toc2 #toctitle{margin-top:0;margin-bottom:.8rem;font-size:1.2em} -#toc.toc2>ul{font-size:.9em;margin-bottom:0} -#toc.toc2 ul ul{margin-left:0;padding-left:1em} -#toc.toc2 ul.sectlevel0 ul.sectlevel1{padding-left:0;margin-top:.5em;margin-bottom:.5em} -body.toc2.toc-right{padding-left:0;padding-right:15em} -body.toc2.toc-right #toc.toc2{border-right-width:0;border-left:1px solid #e7e7e9;left:auto;right:0}} -@media screen and (min-width:1280px){body.toc2{padding-left:20em;padding-right:0} -#toc.toc2{width:20em} -#toc.toc2 #toctitle{font-size:1.375em} -#toc.toc2>ul{font-size:.95em} -#toc.toc2 ul ul{padding-left:1.25em} -body.toc2.toc-right{padding-left:0;padding-right:20em}} -#content #toc{border:1px solid #e0e0dc;margin-bottom:1.25em;padding:1.25em;background:#f8f8f7;border-radius:4px} -#content #toc>:first-child{margin-top:0} -#content #toc>:last-child{margin-bottom:0} -#footer{max-width:none;background:rgba(0,0,0,.8);padding:1.25em} -#footer-text{color:hsla(0,0%,100%,.8);line-height:1.44} -#content{margin-bottom:.625em} -.sect1{padding-bottom:.625em} -@media screen and (min-width:768px){#content{margin-bottom:1.25em} -.sect1{padding-bottom:1.25em}} -.sect1:last-child{padding-bottom:0} -.sect1+.sect1{border-top:1px solid #e7e7e9} -#content h1>a.anchor,h2>a.anchor,h3>a.anchor,#toctitle>a.anchor,.sidebarblock>.content>.title>a.anchor,h4>a.anchor,h5>a.anchor,h6>a.anchor{position:absolute;z-index:1001;width:1.5ex;margin-left:-1.5ex;display:block;text-decoration:none!important;visibility:hidden;text-align:center;font-weight:400} -#content h1>a.anchor::before,h2>a.anchor::before,h3>a.anchor::before,#toctitle>a.anchor::before,.sidebarblock>.content>.title>a.anchor::before,h4>a.anchor::before,h5>a.anchor::before,h6>a.anchor::before{content:"\00A7";font-size:.85em;display:block;padding-top:.1em} -#content h1:hover>a.anchor,#content h1>a.anchor:hover,h2:hover>a.anchor,h2>a.anchor:hover,h3:hover>a.anchor,#toctitle:hover>a.anchor,.sidebarblock>.content>.title:hover>a.anchor,h3>a.anchor:hover,#toctitle>a.anchor:hover,.sidebarblock>.content>.title>a.anchor:hover,h4:hover>a.anchor,h4>a.anchor:hover,h5:hover>a.anchor,h5>a.anchor:hover,h6:hover>a.anchor,h6>a.anchor:hover{visibility:visible} -#content h1>a.link,h2>a.link,h3>a.link,#toctitle>a.link,.sidebarblock>.content>.title>a.link,h4>a.link,h5>a.link,h6>a.link{color:#ba3925;text-decoration:none} -#content h1>a.link:hover,h2>a.link:hover,h3>a.link:hover,#toctitle>a.link:hover,.sidebarblock>.content>.title>a.link:hover,h4>a.link:hover,h5>a.link:hover,h6>a.link:hover{color:#a53221} -details,.audioblock,.imageblock,.literalblock,.listingblock,.stemblock,.videoblock{margin-bottom:1.25em} -details{margin-left:1.25rem} -details>summary{cursor:pointer;display:block;position:relative;line-height:1.6;margin-bottom:.625rem;outline:none;-webkit-tap-highlight-color:transparent} -details>summary::-webkit-details-marker{display:none} -details>summary::before{content:"";border:solid transparent;border-left:solid;border-width:.3em 0 .3em .5em;position:absolute;top:.5em;left:-1.25rem;transform:translateX(15%)} -details[open]>summary::before{border:solid transparent;border-top:solid;border-width:.5em .3em 0;transform:translateY(15%)} -details>summary::after{content:"";width:1.25rem;height:1em;position:absolute;top:.3em;left:-1.25rem} -.admonitionblock td.content>.title,.audioblock>.title,.exampleblock>.title,.imageblock>.title,.listingblock>.title,.literalblock>.title,.stemblock>.title,.openblock>.title,.paragraph>.title,.quoteblock>.title,table.tableblock>.title,.verseblock>.title,.videoblock>.title,.dlist>.title,.olist>.title,.ulist>.title,.qlist>.title,.hdlist>.title{text-rendering:optimizeLegibility;text-align:left;font-family:"Noto Serif","DejaVu Serif",serif;font-size:1rem;font-style:italic} -table.tableblock.fit-content>caption.title{white-space:nowrap;width:0} -.paragraph.lead>p,#preamble>.sectionbody>[class=paragraph]:first-of-type p{font-size:1.21875em;line-height:1.6;color:rgba(0,0,0,.85)} -.admonitionblock>table{border-collapse:separate;border:0;background:none;width:100%} -.admonitionblock>table td.icon{text-align:center;width:80px} -.admonitionblock>table td.icon img{max-width:none} -.admonitionblock>table td.icon .title{font-weight:bold;font-family:"Open Sans","DejaVu Sans",sans-serif;text-transform:uppercase} -.admonitionblock>table td.content{padding-left:1.125em;padding-right:1.25em;border-left:1px solid #dddddf;color:rgba(0,0,0,.6);word-wrap:anywhere} -.admonitionblock>table td.content>:last-child>:last-child{margin-bottom:0} -.exampleblock>.content{border:1px solid #e6e6e6;margin-bottom:1.25em;padding:1.25em;background:#fff;border-radius:4px} -.sidebarblock{border:1px solid #dbdbd6;margin-bottom:1.25em;padding:1.25em;background:#f3f3f2;border-radius:4px} -.sidebarblock>.content>.title{color:#7a2518;margin-top:0;text-align:center} -.exampleblock>.content>:first-child,.sidebarblock>.content>:first-child{margin-top:0} -.exampleblock>.content>:last-child,.exampleblock>.content>:last-child>:last-child,.exampleblock>.content .olist>ol>li:last-child>:last-child,.exampleblock>.content .ulist>ul>li:last-child>:last-child,.exampleblock>.content .qlist>ol>li:last-child>:last-child,.sidebarblock>.content>:last-child,.sidebarblock>.content>:last-child>:last-child,.sidebarblock>.content .olist>ol>li:last-child>:last-child,.sidebarblock>.content .ulist>ul>li:last-child>:last-child,.sidebarblock>.content .qlist>ol>li:last-child>:last-child{margin-bottom:0} -.literalblock pre,.listingblock>.content>pre{border-radius:4px;overflow-x:auto;padding:1em;font-size:.8125em} -@media screen and (min-width:768px){.literalblock pre,.listingblock>.content>pre{font-size:.90625em}} -@media screen and (min-width:1280px){.literalblock pre,.listingblock>.content>pre{font-size:1em}} -.literalblock pre,.listingblock>.content>pre:not(.highlight),.listingblock>.content>pre[class=highlight],.listingblock>.content>pre[class^="highlight "]{background:#f7f7f8} -.literalblock.output pre{color:#f7f7f8;background:rgba(0,0,0,.9)} -.listingblock>.content{position:relative} -.listingblock pre>code{display:block} -.listingblock code[data-lang]::before{display:none;content:attr(data-lang);position:absolute;font-size:.75em;top:.425rem;right:.5rem;line-height:1;text-transform:uppercase;color:inherit;opacity:.5} -.listingblock:hover code[data-lang]::before{display:block} -.listingblock.terminal pre .command::before{content:attr(data-prompt);padding-right:.5em;color:inherit;opacity:.5} -.listingblock.terminal pre .command:not([data-prompt])::before{content:"$"} -.listingblock pre.highlightjs{padding:0} -.listingblock pre.highlightjs>code{padding:1em;border-radius:4px} -.listingblock pre.prettyprint{border-width:0} -.prettyprint{background:#f7f7f8} -pre.prettyprint .linenums{line-height:1.45;margin-left:2em} -pre.prettyprint li{background:none;list-style-type:inherit;padding-left:0} -pre.prettyprint li code[data-lang]::before{opacity:1} -pre.prettyprint li:not(:first-child) code[data-lang]::before{display:none} -table.linenotable{border-collapse:separate;border:0;margin-bottom:0;background:none} -table.linenotable td[class]{color:inherit;vertical-align:top;padding:0;line-height:inherit;white-space:normal} -table.linenotable td.code{padding-left:.75em} -table.linenotable td.linenos,pre.pygments .linenos{border-right:1px solid;opacity:.35;padding-right:.5em;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none} -pre.pygments span.linenos{display:inline-block;margin-right:.75em} -.quoteblock{margin:0 1em 1.25em 1.5em;display:table} -.quoteblock:not(.excerpt)>.title{margin-left:-1.5em;margin-bottom:.75em} -.quoteblock blockquote,.quoteblock p{color:rgba(0,0,0,.85);font-size:1.15rem;line-height:1.75;word-spacing:.1em;letter-spacing:0;font-style:italic;text-align:justify} -.quoteblock blockquote{margin:0;padding:0;border:0} -.quoteblock blockquote::before{content:"\201c";float:left;font-size:2.75em;font-weight:bold;line-height:.6em;margin-left:-.6em;color:#7a2518;text-shadow:0 1px 2px rgba(0,0,0,.1)} -.quoteblock blockquote>.paragraph:last-child p{margin-bottom:0} -.quoteblock .attribution{margin-top:.75em;margin-right:.5ex;text-align:right} -.verseblock{margin:0 1em 1.25em} -.verseblock pre{font-family:"Open Sans","DejaVu Sans",sans-serif;font-size:1.15rem;color:rgba(0,0,0,.85);font-weight:300;text-rendering:optimizeLegibility} -.verseblock pre strong{font-weight:400} -.verseblock .attribution{margin-top:1.25rem;margin-left:.5ex} -.quoteblock .attribution,.verseblock .attribution{font-size:.9375em;line-height:1.45;font-style:italic} -.quoteblock .attribution br,.verseblock .attribution br{display:none} -.quoteblock .attribution cite,.verseblock .attribution cite{display:block;letter-spacing:-.025em;color:rgba(0,0,0,.6)} -.quoteblock.abstract blockquote::before,.quoteblock.excerpt blockquote::before,.quoteblock .quoteblock blockquote::before{display:none} -.quoteblock.abstract blockquote,.quoteblock.abstract p,.quoteblock.excerpt blockquote,.quoteblock.excerpt p,.quoteblock .quoteblock blockquote,.quoteblock .quoteblock p{line-height:1.6;word-spacing:0} -.quoteblock.abstract{margin:0 1em 1.25em;display:block} -.quoteblock.abstract>.title{margin:0 0 .375em;font-size:1.15em;text-align:center} -.quoteblock.excerpt>blockquote,.quoteblock .quoteblock{padding:0 0 .25em 1em;border-left:.25em solid #dddddf} -.quoteblock.excerpt,.quoteblock .quoteblock{margin-left:0} -.quoteblock.excerpt blockquote,.quoteblock.excerpt p,.quoteblock .quoteblock blockquote,.quoteblock .quoteblock p{color:inherit;font-size:1.0625rem} -.quoteblock.excerpt .attribution,.quoteblock .quoteblock .attribution{color:inherit;font-size:.85rem;text-align:left;margin-right:0} -p.tableblock:last-child{margin-bottom:0} -td.tableblock>.content{margin-bottom:1.25em;word-wrap:anywhere} -td.tableblock>.content>:last-child{margin-bottom:-1.25em} -table.tableblock,th.tableblock,td.tableblock{border:0 solid #dedede} -table.grid-all>*>tr>*{border-width:1px} -table.grid-cols>*>tr>*{border-width:0 1px} -table.grid-rows>*>tr>*{border-width:1px 0} -table.frame-all{border-width:1px} -table.frame-ends{border-width:1px 0} -table.frame-sides{border-width:0 1px} -table.frame-none>colgroup+*>:first-child>*,table.frame-sides>colgroup+*>:first-child>*{border-top-width:0} -table.frame-none>:last-child>:last-child>*,table.frame-sides>:last-child>:last-child>*{border-bottom-width:0} -table.frame-none>*>tr>:first-child,table.frame-ends>*>tr>:first-child{border-left-width:0} -table.frame-none>*>tr>:last-child,table.frame-ends>*>tr>:last-child{border-right-width:0} -table.stripes-all>*>tr,table.stripes-odd>*>tr:nth-of-type(odd),table.stripes-even>*>tr:nth-of-type(even),table.stripes-hover>*>tr:hover{background:#f8f8f7} -th.halign-left,td.halign-left{text-align:left} -th.halign-right,td.halign-right{text-align:right} -th.halign-center,td.halign-center{text-align:center} -th.valign-top,td.valign-top{vertical-align:top} -th.valign-bottom,td.valign-bottom{vertical-align:bottom} -th.valign-middle,td.valign-middle{vertical-align:middle} -table thead th,table tfoot th{font-weight:bold} -tbody tr th{background:#f7f8f7} -tbody tr th,tbody tr th p,tfoot tr th,tfoot tr th p{color:rgba(0,0,0,.8);font-weight:bold} -p.tableblock>code:only-child{background:none;padding:0} -p.tableblock{font-size:1em} -ol{margin-left:1.75em} -ul li ol{margin-left:1.5em} -dl dd{margin-left:1.125em} -dl dd:last-child,dl dd:last-child>:last-child{margin-bottom:0} -li p,ul dd,ol dd,.olist .olist,.ulist .ulist,.ulist .olist,.olist .ulist{margin-bottom:.625em} -ul.checklist,ul.none,ol.none,ul.no-bullet,ol.no-bullet,ol.unnumbered,ul.unstyled,ol.unstyled{list-style-type:none} -ul.no-bullet,ol.no-bullet,ol.unnumbered{margin-left:.625em} -ul.unstyled,ol.unstyled{margin-left:0} -li>p:empty:only-child::before{content:"";display:inline-block} -ul.checklist>li>p:first-child{margin-left:-1em} -ul.checklist>li>p:first-child>.fa-square-o:first-child,ul.checklist>li>p:first-child>.fa-check-square-o:first-child{width:1.25em;font-size:.8em;position:relative;bottom:.125em} -ul.checklist>li>p:first-child>input[type=checkbox]:first-child{margin-right:.25em} -ul.inline{display:flex;flex-flow:row wrap;list-style:none;margin:0 0 .625em -1.25em} -ul.inline>li{margin-left:1.25em} -.unstyled dl dt{font-weight:400;font-style:normal} -ol.arabic{list-style-type:decimal} -ol.decimal{list-style-type:decimal-leading-zero} -ol.loweralpha{list-style-type:lower-alpha} -ol.upperalpha{list-style-type:upper-alpha} -ol.lowerroman{list-style-type:lower-roman} -ol.upperroman{list-style-type:upper-roman} -ol.lowergreek{list-style-type:lower-greek} -.hdlist>table,.colist>table{border:0;background:none} -.hdlist>table>tbody>tr,.colist>table>tbody>tr{background:none} -td.hdlist1,td.hdlist2{vertical-align:top;padding:0 .625em} -td.hdlist1{font-weight:bold;padding-bottom:1.25em} -td.hdlist2{word-wrap:anywhere} -.literalblock+.colist,.listingblock+.colist{margin-top:-.5em} -.colist td:not([class]):first-child{padding:.4em .75em 0;line-height:1;vertical-align:top} -.colist td:not([class]):first-child img{max-width:none} -.colist td:not([class]):last-child{padding:.25em 0} -.thumb,.th{line-height:0;display:inline-block;border:4px solid #fff;box-shadow:0 0 0 1px #ddd} -.imageblock.left{margin:.25em .625em 1.25em 0} -.imageblock.right{margin:.25em 0 1.25em .625em} -.imageblock>.title{margin-bottom:0} -.imageblock.thumb,.imageblock.th{border-width:6px} -.imageblock.thumb>.title,.imageblock.th>.title{padding:0 .125em} -.image.left,.image.right{margin-top:.25em;margin-bottom:.25em;display:inline-block;line-height:0} -.image.left{margin-right:.625em} -.image.right{margin-left:.625em} -a.image{text-decoration:none;display:inline-block} -a.image object{pointer-events:none} -sup.footnote,sup.footnoteref{font-size:.875em;position:static;vertical-align:super} -sup.footnote a,sup.footnoteref a{text-decoration:none} -sup.footnote a:active,sup.footnoteref a:active,#footnotes .footnote a:first-of-type:active{text-decoration:underline} -#footnotes{padding-top:.75em;padding-bottom:.75em;margin-bottom:.625em} -#footnotes hr{width:20%;min-width:6.25em;margin:-.25em 0 .75em;border-width:1px 0 0} -#footnotes .footnote{padding:0 .375em 0 .225em;line-height:1.3334;font-size:.875em;margin-left:1.2em;margin-bottom:.2em} -#footnotes .footnote a:first-of-type{font-weight:bold;text-decoration:none;margin-left:-1.05em} -#footnotes .footnote:last-of-type{margin-bottom:0} -#content #footnotes{margin-top:-.625em;margin-bottom:0;padding:.75em 0} -div.unbreakable{page-break-inside:avoid} -.big{font-size:larger} -.small{font-size:smaller} -.underline{text-decoration:underline} -.overline{text-decoration:overline} -.line-through{text-decoration:line-through} -.aqua{color:#00bfbf} -.aqua-background{background:#00fafa} -.black{color:#000} -.black-background{background:#000} -.blue{color:#0000bf} -.blue-background{background:#0000fa} -.fuchsia{color:#bf00bf} -.fuchsia-background{background:#fa00fa} -.gray{color:#606060} -.gray-background{background:#7d7d7d} -.green{color:#006000} -.green-background{background:#007d00} -.lime{color:#00bf00} -.lime-background{background:#00fa00} -.maroon{color:#600000} -.maroon-background{background:#7d0000} -.navy{color:#000060} -.navy-background{background:#00007d} -.olive{color:#606000} -.olive-background{background:#7d7d00} -.purple{color:#600060} -.purple-background{background:#7d007d} -.red{color:#bf0000} -.red-background{background:#fa0000} -.silver{color:#909090} -.silver-background{background:#bcbcbc} -.teal{color:#006060} -.teal-background{background:#007d7d} -.white{color:#bfbfbf} -.white-background{background:#fafafa} -.yellow{color:#bfbf00} -.yellow-background{background:#fafa00} -span.icon>.fa{cursor:default} -a span.icon>.fa{cursor:inherit} -.admonitionblock td.icon [class^="fa icon-"]{font-size:2.5em;text-shadow:1px 1px 2px rgba(0,0,0,.5);cursor:default} -.admonitionblock td.icon .icon-note::before{content:"\f05a";color:#19407c} -.admonitionblock td.icon .icon-tip::before{content:"\f0eb";text-shadow:1px 1px 2px rgba(155,155,0,.8);color:#111} -.admonitionblock td.icon .icon-warning::before{content:"\f071";color:#bf6900} -.admonitionblock td.icon .icon-caution::before{content:"\f06d";color:#bf3400} -.admonitionblock td.icon .icon-important::before{content:"\f06a";color:#bf0000} -.conum[data-value]{display:inline-block;color:#fff!important;background:rgba(0,0,0,.8);border-radius:50%;text-align:center;font-size:.75em;width:1.67em;height:1.67em;line-height:1.67em;font-family:"Open Sans","DejaVu Sans",sans-serif;font-style:normal;font-weight:bold} -.conum[data-value] *{color:#fff!important} -.conum[data-value]+b{display:none} -.conum[data-value]::after{content:attr(data-value)} -pre .conum[data-value]{position:relative;top:-.125em} -b.conum *{color:inherit!important} -.conum:not([data-value]):empty{display:none} -dt,th.tableblock,td.content,div.footnote{text-rendering:optimizeLegibility} -h1,h2,p,td.content,span.alt,summary{letter-spacing:-.01em} -p strong,td.content strong,div.footnote strong{letter-spacing:-.005em} -p,blockquote,dt,td.content,td.hdlist1,span.alt,summary{font-size:1.0625rem} -p{margin-bottom:1.25rem} -.sidebarblock p,.sidebarblock dt,.sidebarblock td.content,p.tableblock{font-size:1em} -.exampleblock>.content{background:#fffef7;border-color:#e0e0dc;box-shadow:0 1px 4px #e0e0dc} -.print-only{display:none!important} -@page{margin:1.25cm .75cm} -@media print{*{box-shadow:none!important;text-shadow:none!important} -html{font-size:80%} -a{color:inherit!important;text-decoration:underline!important} -a.bare,a[href^="#"],a[href^="mailto:"]{text-decoration:none!important} -a[href^="http:"]:not(.bare)::after,a[href^="https:"]:not(.bare)::after{content:"(" attr(href) ")";display:inline-block;font-size:.875em;padding-left:.25em} -abbr[title]{border-bottom:1px dotted} -abbr[title]::after{content:" (" attr(title) ")"} -pre,blockquote,tr,img,object,svg{page-break-inside:avoid} -thead{display:table-header-group} -svg{max-width:100%} -p,blockquote,dt,td.content{font-size:1em;orphans:3;widows:3} -h2,h3,#toctitle,.sidebarblock>.content>.title{page-break-after:avoid} -#header,#content,#footnotes,#footer{max-width:none} -#toc,.sidebarblock,.exampleblock>.content{background:none!important} -#toc{border-bottom:1px solid #dddddf!important;padding-bottom:0!important} -body.book #header{text-align:center} -body.book #header>h1:first-child{border:0!important;margin:2.5em 0 1em} -body.book #header .details{border:0!important;display:block;padding:0!important} -body.book #header .details span:first-child{margin-left:0!important} -body.book #header .details br{display:block} -body.book #header .details br+span::before{content:none!important} -body.book #toc{border:0!important;text-align:left!important;padding:0!important;margin:0!important} -body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-break-before:always} -.listingblock code[data-lang]::before{display:block} -#footer{padding:0 .9375em} -.hide-on-print{display:none!important} -.print-only{display:block!important} -.hide-for-print{display:none!important} -.show-for-print{display:inherit!important}} -@media amzn-kf8,print{#header>h1:first-child{margin-top:1.25rem} -.sect1{padding:0!important} -.sect1+.sect1{border:0} -#footer{background:none} -#footer-text{color:rgba(0,0,0,.6);font-size:.9em}} -@media amzn-kf8{#header,#content,#footnotes,#footer{padding:0}} -</style> -</head> -<body class="article"> -<div id="header"> -<h1>Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate</h1> -<div class="details"> -<span id="author" class="author">0.0.1</span><br> -</div> -</div> -<div id="content"> -<div class="sect1"> -<h2 id="_modeling_trust_in_enterprise_architecture_a_pattern_language_for_archimate">Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate</h2> -<div class="sectionbody"> -<div class="ulist"> -<ul> -<li> -<p>»Ontological Analysis and Redesign of Risk Modeling in ArchiMate«</p> -<div class="ulist"> -<ul> -<li> -<p>by Prince Sales, Tiago & Almeida, João & Santini, Sebastiano & Baião, Fernanda & Guizzardi, Giancarlo.</p> -<div class="ulist"> -<ul> -<li> -<p><a href="https://www.researchgate.net/publication/326835902_Ontological_Analysis_and_Redesign_of_Risk_Modeling_in_ArchiMate" class="bare">https://www.researchgate.net/publication/326835902_Ontological_Analysis_and_Redesign_of_Risk_Modeling_in_ArchiMate</a></p> -</li> -</ul> -</div> -</li> -</ul> -</div> -</li> -<li> -<p>»Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate«</p> -<div class="ulist"> -<ul> -<li> -<p>by Glenda Amaral, Tiago Prince Sales, Giancarlo Guizzardi, João Paulo A. Almeida, and Daniele Porello</p> -<div class="ulist"> -<ul> -<li> -<p><a href="https://www.researchgate.net/publication/344319377_Modeling_Trust_in_Enterprise_Architecture_A_Pattern_Language_for_ArchiMate" class="bare">https://www.researchgate.net/publication/344319377_Modeling_Trust_in_Enterprise_Architecture_A_Pattern_Language_for_ArchiMate</a></p> -</li> -</ul> -</div> -</li> -</ul> -</div> -</li> -</ul> -</div> -<div class="paragraph"> -<p>I use the patterns develop in this paper to model trust relationships (trust boarders, trust anchors) in Zero Trust Architectures.</p> -</div> -<div class="paragraph"> -<p>As an example, I model the process of Downloading an NetBSD ISO Install Image, which has been signed by the NetBSD security officer with a detached GnuPG signature. This is SLSA Level 1 according to the »Supply-chain Levels for Software Artifacts«</p> -</div> -<div class="paragraph"> -<p>I will extend the process from SLSA Level 1 to SLSA Level 4, which will include Reproducible Builds and an immutable linked list of hashes in concatenated Merkle trees.</p> -</div> -</div> -</div> -<div class="sect1"> -<h2 id="_archimate_diagrams">Archimate Diagrams</h2> -<div class="sectionbody"> -<table class="tableblock frame-none grid-none stretch"> -<colgroup> -<col> -<col style="width: 5%;"> -<col> -</colgroup> -<thead> -<tr> -<th class="tableblock halign-left valign-top">Example from Paper</th> -<th class="tableblock halign-left valign-top"></th> -<th class="tableblock halign-left valign-top">Applied to the NetBSD download</th> -</tr> -</thead> -<tbody> -<tr> -<td class="tableblock halign-left valign-top"><div class="content"><div class="imageblock"> -<div class="content"> -<img src="6-3a.svg" alt="6 3a"> -</div> -</div></div></td> -<td class="tableblock halign-left valign-top"></td> -<td class="tableblock halign-left valign-top"><div class="content"><div class="imageblock"> -<div class="content"> -<img src="6-3c.svg" alt="6 3c"> -</div> -</div></div></td> -</tr> -<tr> -<td class="tableblock halign-left valign-top"><div class="content"><div class="imageblock"> -<div class="content"> -<img src="8-7a-Trust-Composition.svg" alt="8 7a Trust Composition"> -</div> -</div></div></td> -<td class="tableblock halign-left valign-top"></td> -<td class="tableblock halign-left valign-top"><div class="content"><div class="imageblock"> -<div class="content"> -<img src="8-7-GnuPG-Trust-Composition.svg" alt="8 7 GnuPG Trust Composition"> -</div> -</div></div></td> -</tr> -<tr> -<td class="tableblock halign-left valign-top"><div class="content"><div class="imageblock"> -<div class="content"> -<img src="RSO9-10-RiskSecurityOverlay.svg" alt="RSO9 10 RiskSecurityOverlay"> -</div> -</div></div></td> -<td class="tableblock halign-left valign-top"></td> -<td class="tableblock halign-left valign-top"><div class="content"><div class="imageblock"> -<div class="content"> -<img src="RSO9-10-GnuPG-RiskSecurityOverlay.svg" alt="RSO9 10 GnuPG RiskSecurityOverlay"> -</div> -</div></div></td> -</tr> -<tr> -<td class="tableblock halign-left valign-top"><div class="content"><div class="imageblock"> -<div class="content"> -<img src="9-9-RiskAssessmentPattern.svg" alt="9 9 RiskAssessmentPattern"> -</div> -</div></div></td> -<td class="tableblock halign-left valign-top"></td> -<td class="tableblock halign-left valign-top"><div class="content"><div class="imageblock"> -<div class="content"> -<img src="9-9-GnuPG-RiskAssessmentPattern.svg" alt="9 9 GnuPG RiskAssessmentPattern"> -</div> -</div></div></td> -</tr> -</tbody> -</table> -</div> -</div> -</div> -<div id="footer"> -<div id="footer-text"> -Last updated 2026-02-21 16:39:20 +0100 -</div> -</div> -</body> -</html>
\ No newline at end of file +<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
+ "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
+<head>
+<meta http-equiv="Content-Type" content="application/xhtml+xml; charset=UTF-8" />
+<meta name="generator" content="AsciiDoc 10.2.1" />
+<title>Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate</title>
+<style type="text/css">
+/* Shared CSS for AsciiDoc xhtml11 and html5 backends */
+
+/* Default font. */
+body {
+ font-family: Georgia,serif;
+}
+
+/* Title font. */
+h1, h2, h3, h4, h5, h6,
+div.title, caption.title,
+thead, p.table.header,
+#toctitle,
+#author, #revnumber, #revdate, #revremark,
+#footer {
+ font-family: Arial,Helvetica,sans-serif;
+}
+
+body {
+ margin: 1em 5% 1em 5%;
+}
+
+a {
+ color: blue;
+ text-decoration: underline;
+}
+a:visited {
+ color: fuchsia;
+}
+
+em {
+ font-style: italic;
+ color: navy;
+}
+
+strong {
+ font-weight: bold;
+ color: #083194;
+}
+
+h1, h2, h3, h4, h5, h6 {
+ color: #527bbd;
+ margin-top: 1.2em;
+ margin-bottom: 0.5em;
+ line-height: 1.3;
+}
+
+h1, h2, h3 {
+ border-bottom: 2px solid silver;
+}
+h2 {
+ padding-top: 0.5em;
+}
+h3 {
+ float: left;
+}
+h3 + * {
+ clear: left;
+}
+h5 {
+ font-size: 1.0em;
+}
+
+div.sectionbody {
+ margin-left: 0;
+}
+
+hr {
+ border: 1px solid silver;
+}
+
+p {
+ margin-top: 0.5em;
+ margin-bottom: 0.5em;
+}
+
+ul, ol, li > p {
+ margin-top: 0;
+}
+ul > li { color: #aaa; }
+ul > li > * { color: black; }
+
+.monospaced, code, pre {
+ font-family: "Courier New", Courier, monospace;
+ font-size: inherit;
+ color: navy;
+ padding: 0;
+ margin: 0;
+}
+pre {
+ white-space: pre-wrap;
+}
+
+#author {
+ color: #527bbd;
+ font-weight: bold;
+ font-size: 1.1em;
+}
+#email {
+}
+#revnumber, #revdate, #revremark {
+}
+
+#footer {
+ font-size: small;
+ border-top: 2px solid silver;
+ padding-top: 0.5em;
+ margin-top: 4.0em;
+}
+#footer-text {
+ float: left;
+ padding-bottom: 0.5em;
+}
+#footer-badges {
+ float: right;
+ padding-bottom: 0.5em;
+}
+
+#preamble {
+ margin-top: 1.5em;
+ margin-bottom: 1.5em;
+}
+div.imageblock, div.exampleblock, div.verseblock,
+div.quoteblock, div.literalblock, div.listingblock, div.sidebarblock,
+div.admonitionblock {
+ margin-top: 1.0em;
+ margin-bottom: 1.5em;
+}
+div.admonitionblock {
+ margin-top: 2.0em;
+ margin-bottom: 2.0em;
+ margin-right: 10%;
+ color: #606060;
+}
+
+div.content { /* Block element content. */
+ padding: 0;
+}
+
+/* Block element titles. */
+div.title, caption.title {
+ color: #527bbd;
+ font-weight: bold;
+ text-align: left;
+ margin-top: 1.0em;
+ margin-bottom: 0.5em;
+}
+div.title + * {
+ margin-top: 0;
+}
+
+td div.title:first-child {
+ margin-top: 0.0em;
+}
+div.content div.title:first-child {
+ margin-top: 0.0em;
+}
+div.content + div.title {
+ margin-top: 0.0em;
+}
+
+div.sidebarblock > div.content {
+ background: #ffffee;
+ border: 1px solid #dddddd;
+ border-left: 4px solid #f0f0f0;
+ padding: 0.5em;
+}
+
+div.listingblock > div.content {
+ border: 1px solid #dddddd;
+ border-left: 5px solid #f0f0f0;
+ background: #f8f8f8;
+ padding: 0.5em;
+}
+
+div.quoteblock, div.verseblock {
+ padding-left: 1.0em;
+ margin-left: 1.0em;
+ margin-right: 10%;
+ border-left: 5px solid #f0f0f0;
+ color: #888;
+}
+
+div.quoteblock > div.attribution {
+ padding-top: 0.5em;
+ text-align: right;
+}
+
+div.verseblock > pre.content {
+ font-family: inherit;
+ font-size: inherit;
+}
+div.verseblock > div.attribution {
+ padding-top: 0.75em;
+ text-align: left;
+}
+/* DEPRECATED: Pre version 8.2.7 verse style literal block. */
+div.verseblock + div.attribution {
+ text-align: left;
+}
+
+div.admonitionblock .icon {
+ vertical-align: top;
+ font-size: 1.1em;
+ font-weight: bold;
+ text-decoration: underline;
+ color: #527bbd;
+ padding-right: 0.5em;
+}
+div.admonitionblock td.content {
+ padding-left: 0.5em;
+ border-left: 3px solid #dddddd;
+}
+
+div.exampleblock > div.content {
+ border-left: 3px solid #dddddd;
+ padding-left: 0.5em;
+}
+
+div.imageblock div.content { padding-left: 0; }
+span.image img { border-style: none; vertical-align: text-bottom; }
+a.image:visited { color: white; }
+
+dl {
+ margin-top: 0.8em;
+ margin-bottom: 0.8em;
+}
+dt {
+ margin-top: 0.5em;
+ margin-bottom: 0;
+ font-style: normal;
+ color: navy;
+}
+dd > *:first-child {
+ margin-top: 0.1em;
+}
+
+ul, ol {
+ list-style-position: outside;
+}
+ol.arabic {
+ list-style-type: decimal;
+}
+ol.loweralpha {
+ list-style-type: lower-alpha;
+}
+ol.upperalpha {
+ list-style-type: upper-alpha;
+}
+ol.lowerroman {
+ list-style-type: lower-roman;
+}
+ol.upperroman {
+ list-style-type: upper-roman;
+}
+
+div.compact ul, div.compact ol,
+div.compact p, div.compact p,
+div.compact div, div.compact div {
+ margin-top: 0.1em;
+ margin-bottom: 0.1em;
+}
+
+tfoot {
+ font-weight: bold;
+}
+td > div.verse {
+ white-space: pre;
+}
+
+div.hdlist {
+ margin-top: 0.8em;
+ margin-bottom: 0.8em;
+}
+div.hdlist tr {
+ padding-bottom: 15px;
+}
+dt.hdlist1.strong, td.hdlist1.strong {
+ font-weight: bold;
+}
+td.hdlist1 {
+ vertical-align: top;
+ font-style: normal;
+ padding-right: 0.8em;
+ color: navy;
+}
+td.hdlist2 {
+ vertical-align: top;
+}
+div.hdlist.compact tr {
+ margin: 0;
+ padding-bottom: 0;
+}
+
+.comment {
+ background: yellow;
+}
+
+.footnote, .footnoteref {
+ font-size: 0.8em;
+}
+
+span.footnote, span.footnoteref {
+ vertical-align: super;
+}
+
+#footnotes {
+ margin: 20px 0 20px 0;
+ padding: 7px 0 0 0;
+}
+
+#footnotes div.footnote {
+ margin: 0 0 5px 0;
+}
+
+#footnotes hr {
+ border: none;
+ border-top: 1px solid silver;
+ height: 1px;
+ text-align: left;
+ margin-left: 0;
+ width: 20%;
+ min-width: 100px;
+}
+
+div.colist td {
+ padding-right: 0.5em;
+ padding-bottom: 0.3em;
+ vertical-align: top;
+}
+div.colist td img {
+ margin-top: 0.3em;
+}
+
+@media print {
+ #footer-badges { display: none; }
+}
+
+#toc {
+ margin-bottom: 2.5em;
+}
+
+#toctitle {
+ color: #527bbd;
+ font-size: 1.1em;
+ font-weight: bold;
+ margin-top: 1.0em;
+ margin-bottom: 0.1em;
+}
+
+div.toclevel0, div.toclevel1, div.toclevel2, div.toclevel3, div.toclevel4 {
+ margin-top: 0;
+ margin-bottom: 0;
+}
+div.toclevel2 {
+ margin-left: 2em;
+ font-size: 0.9em;
+}
+div.toclevel3 {
+ margin-left: 4em;
+ font-size: 0.9em;
+}
+div.toclevel4 {
+ margin-left: 6em;
+ font-size: 0.9em;
+}
+
+span.aqua { color: aqua; }
+span.black { color: black; }
+span.blue { color: blue; }
+span.fuchsia { color: fuchsia; }
+span.gray { color: gray; }
+span.green { color: green; }
+span.lime { color: lime; }
+span.maroon { color: maroon; }
+span.navy { color: navy; }
+span.olive { color: olive; }
+span.purple { color: purple; }
+span.red { color: red; }
+span.silver { color: silver; }
+span.teal { color: teal; }
+span.white { color: white; }
+span.yellow { color: yellow; }
+
+span.aqua-background { background: aqua; }
+span.black-background { background: black; }
+span.blue-background { background: blue; }
+span.fuchsia-background { background: fuchsia; }
+span.gray-background { background: gray; }
+span.green-background { background: green; }
+span.lime-background { background: lime; }
+span.maroon-background { background: maroon; }
+span.navy-background { background: navy; }
+span.olive-background { background: olive; }
+span.purple-background { background: purple; }
+span.red-background { background: red; }
+span.silver-background { background: silver; }
+span.teal-background { background: teal; }
+span.white-background { background: white; }
+span.yellow-background { background: yellow; }
+
+span.big { font-size: 2em; }
+span.small { font-size: 0.6em; }
+
+span.underline { text-decoration: underline; }
+span.overline { text-decoration: overline; }
+span.line-through { text-decoration: line-through; }
+
+div.unbreakable { page-break-inside: avoid; }
+
+
+/*
+ * xhtml11 specific
+ *
+ * */
+
+div.tableblock {
+ margin-top: 1.0em;
+ margin-bottom: 1.5em;
+}
+div.tableblock > table {
+ border: 3px solid #527bbd;
+}
+thead, p.table.header {
+ font-weight: bold;
+ color: #527bbd;
+}
+p.table {
+ margin-top: 0;
+}
+/* Because the table frame attribute is overridden by CSS in most browsers. */
+div.tableblock > table[frame="void"] {
+ border-style: none;
+}
+div.tableblock > table[frame="hsides"] {
+ border-left-style: none;
+ border-right-style: none;
+}
+div.tableblock > table[frame="vsides"] {
+ border-top-style: none;
+ border-bottom-style: none;
+}
+
+
+/*
+ * html5 specific
+ *
+ * */
+
+table.tableblock {
+ margin-top: 1.0em;
+ margin-bottom: 1.5em;
+}
+thead, p.tableblock.header {
+ font-weight: bold;
+ color: #527bbd;
+}
+p.tableblock {
+ margin-top: 0;
+}
+table.tableblock {
+ border-width: 3px;
+ border-spacing: 0px;
+ border-style: solid;
+ border-color: #527bbd;
+ border-collapse: collapse;
+}
+th.tableblock, td.tableblock {
+ border-width: 1px;
+ padding: 4px;
+ border-style: solid;
+ border-color: #527bbd;
+}
+
+table.tableblock.frame-topbot {
+ border-left-style: hidden;
+ border-right-style: hidden;
+}
+table.tableblock.frame-sides {
+ border-top-style: hidden;
+ border-bottom-style: hidden;
+}
+table.tableblock.frame-none {
+ border-style: hidden;
+}
+
+th.tableblock.halign-left, td.tableblock.halign-left {
+ text-align: left;
+}
+th.tableblock.halign-center, td.tableblock.halign-center {
+ text-align: center;
+}
+th.tableblock.halign-right, td.tableblock.halign-right {
+ text-align: right;
+}
+
+th.tableblock.valign-top, td.tableblock.valign-top {
+ vertical-align: top;
+}
+th.tableblock.valign-middle, td.tableblock.valign-middle {
+ vertical-align: middle;
+}
+th.tableblock.valign-bottom, td.tableblock.valign-bottom {
+ vertical-align: bottom;
+}
+
+
+/*
+ * manpage specific
+ *
+ * */
+
+body.manpage h1 {
+ padding-top: 0.5em;
+ padding-bottom: 0.5em;
+ border-top: 2px solid silver;
+ border-bottom: 2px solid silver;
+}
+body.manpage h2 {
+ border-style: none;
+}
+body.manpage div.sectionbody {
+ margin-left: 3em;
+}
+
+@media print {
+ body.manpage div#toc { display: none; }
+}
+
+
+</style>
+<script type="text/javascript">
+/*<+'])');
+ // Function that scans the DOM tree for header elements (the DOM2
+ // nodeIterator API would be a better technique but not supported by all
+ // browsers).
+ var iterate = function (el) {
+ for (var i = el.firstChild; i != null; i = i.nextSibling) {
+ if (i.nodeType == 1 /* Node.ELEMENT_NODE */) {
+ var mo = re.exec(i.tagName);
+ if (mo && (i.getAttribute("class") || i.getAttribute("className")) != "float") {
+ result[result.length] = new TocEntry(i, getText(i), mo[1]-1);
+ }
+ iterate(i);
+ }
+ }
+ }
+ iterate(el);
+ return result;
+ }
+
+ var toc = document.getElementById("toc");
+ if (!toc) {
+ return;
+ }
+
+ // Delete existing TOC entries in case we're reloading the TOC.
+ var tocEntriesToRemove = [];
+ var i;
+ for (i = 0; i < toc.childNodes.length; i++) {
+ var entry = toc.childNodes[i];
+ if (entry.nodeName.toLowerCase() == 'div'
+ && entry.getAttribute("class")
+ && entry.getAttribute("class").match(/^toclevel/))
+ tocEntriesToRemove.push(entry);
+ }
+ for (i = 0; i < tocEntriesToRemove.length; i++) {
+ toc.removeChild(tocEntriesToRemove[i]);
+ }
+
+ // Rebuild TOC entries.
+ var entries = tocEntries(document.getElementById("content"), toclevels);
+ for (var i = 0; i < entries.length; ++i) {
+ var entry = entries[i];
+ if (entry.element.id == "")
+ entry.element.id = "_toc_" + i;
+ var a = document.createElement("a");
+ a.href = "#" + entry.element.id;
+ a.appendChild(document.createTextNode(entry.text));
+ var div = document.createElement("div");
+ div.appendChild(a);
+ div.className = "toclevel" + entry.toclevel;
+ toc.appendChild(div);
+ }
+ if (entries.length == 0)
+ toc.parentNode.removeChild(toc);
+},
+
+
+/////////////////////////////////////////////////////////////////////
+// Footnotes generator
+/////////////////////////////////////////////////////////////////////
+
+/* Based on footnote generation code from:
+ * http://www.brandspankingnew.net/archive/2005/07/format_footnote.html
+ */
+
+footnotes: function () {
+ // Delete existing footnote entries in case we're reloading the footnodes.
+ var i;
+ var noteholder = document.getElementById("footnotes");
+ if (!noteholder) {
+ return;
+ }
+ var entriesToRemove = [];
+ for (i = 0; i < noteholder.childNodes.length; i++) {
+ var entry = noteholder.childNodes[i];
+ if (entry.nodeName.toLowerCase() == 'div' && entry.getAttribute("class") == "footnote")
+ entriesToRemove.push(entry);
+ }
+ for (i = 0; i < entriesToRemove.length; i++) {
+ noteholder.removeChild(entriesToRemove[i]);
+ }
+
+ // Rebuild footnote entries.
+ var cont = document.getElementById("content");
+ var spans = cont.getElementsByTagName("span");
+ var refs = {};
+ var n = 0;
+ for (i=0; i<spans.length; i++) {
+ if (spans[i].className == "footnote") {
+ n++;
+ var note = spans[i].getAttribute("data-note");
+ if (!note) {
+ // Use [\s\S] in place of . so multi-line matches work.
+ // Because JavaScript has no s (dotall) regex flag.
+ note = spans[i].innerHTML.match(/\s*\[([\s\S]*)]\s*/)[1];
+ spans[i].innerHTML =
+ "[<a id='_footnoteref_" + n + "' href='#_footnote_" + n +
+ "' title='View footnote' class='footnote'>" + n + "</a>]";
+ spans[i].setAttribute("data-note", note);
+ }
+ noteholder.innerHTML +=
+ "<div class='footnote' id='_footnote_" + n + "'>" +
+ "<a href='#_footnoteref_" + n + "' title='Return to text'>" +
+ n + "</a>. " + note + "</div>";
+ var id =spans[i].getAttribute("id");
+ if (id != null) refs["#"+id] = n;
+ }
+ }
+ if (n == 0)
+ noteholder.parentNode.removeChild(noteholder);
+ else {
+ // Process footnoterefs.
+ for (i=0; i<spans.length; i++) {
+ if (spans[i].className == "footnoteref") {
+ var href = spans[i].getElementsByTagName("a")[0].getAttribute("href");
+ href = href.match(/#.*/)[0]; // Because IE return full URL.
+ n = refs[href];
+ spans[i].innerHTML =
+ "[<a href='#_footnote_" + n +
+ "' title='View footnote' class='footnote'>" + n + "</a>]";
+ }
+ }
+ }
+},
+
+install: function(toclevels) {
+ var timerId;
+
+ function reinstall() {
+ asciidoc.footnotes();
+ if (toclevels) {
+ asciidoc.toc(toclevels);
+ }
+ }
+
+ function reinstallAndRemoveTimer() {
+ clearInterval(timerId);
+ reinstall();
+ }
+
+ timerId = setInterval(reinstall, 500);
+ if (document.addEventListener)
+ document.addEventListener("DOMContentLoaded", reinstallAndRemoveTimer, false);
+ else
+ window.onload = reinstallAndRemoveTimer;
+}
+
+}
+asciidoc.install();
+/*]]>*/
+</script>
+</head>
+<body class="article">
+<div id="header">
+<h1>Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate</h1>
+<span id="author">0.0.1</span><br />
+</div>
+<div id="content">
+<div class="sect1">
+<h2 id="_modeling_trust_in_enterprise_architecture_a_pattern_language_for_archimate">Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate</h2>
+<div class="sectionbody">
+<div class="ulist"><ul>
+<li>
+<p>
+»Ontological Analysis and Redesign of Risk Modeling in ArchiMate«
+</p>
+<div class="ulist"><ul>
+<li>
+<p>
+by Prince Sales, Tiago & Almeida, João & Santini, Sebastiano & Baião, Fernanda & Guizzardi, Giancarlo.
+</p>
+<div class="ulist"><ul>
+<li>
+<p>
+<a href="https://www.researchgate.net/publication/326835902_Ontological_Analysis_and_Redesign_of_Risk_Modeling_in_ArchiMate">https://www.researchgate.net/publication/326835902_Ontological_Analysis_and_Redesign_of_Risk_Modeling_in_ArchiMate</a>
+</p>
+</li>
+</ul></div>
+</li>
+</ul></div>
+</li>
+<li>
+<p>
+»Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate«
+</p>
+<div class="ulist"><ul>
+<li>
+<p>
+by Glenda Amaral, Tiago Prince Sales, Giancarlo Guizzardi, João Paulo A. Almeida, and Daniele Porello
+</p>
+<div class="ulist"><ul>
+<li>
+<p>
+<a href="https://www.researchgate.net/publication/344319377_Modeling_Trust_in_Enterprise_Architecture_A_Pattern_Language_for_ArchiMate">https://www.researchgate.net/publication/344319377_Modeling_Trust_in_Enterprise_Architecture_A_Pattern_Language_for_ArchiMate</a>
+</p>
+</li>
+</ul></div>
+</li>
+</ul></div>
+</li>
+</ul></div>
+<div class="paragraph"><p>I use the patterns develop in this paper to model trust relationships (trust boarders, trust anchors) in Zero Trust Architectures.</p></div>
+<div class="paragraph"><p>As an example, I model the process of Downloading an NetBSD ISO Install Image, which has been signed by the NetBSD security officer with a detached GnuPG signature. This is SLSA Level 1 according to the »Supply-chain Levels for Software Artifacts«</p></div>
+<div class="paragraph"><p>I will extend the process from SLSA Level 1 to SLSA Level 4, which will include Reproducible Builds and an immutable linked list of hashes in concatenated Merkle trees.</p></div>
+</div>
+</div>
+<div class="sect1">
+<h2 id="_archimate_diagrams">Archimate Diagrams</h2>
+<div class="sectionbody">
+<div class="tableblock">
+<table rules="all"
+width="100%"
+frame="border"
+cellspacing="0" cellpadding="4">
+<col width="33%" />
+<col width="33%" />
+<col width="33%" />
+<tbody>
+<tr>
+<td align="left" valign="top"><p class="table">Example from Paper</p></td>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table">Applied to the NetBSD download</p></td>
+</tr>
+<tr>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":6-3a.svg" alt=":6-3a.svg" />
+</span></p></td>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":6-3c.svg" alt=":6-3c.svg" />
+</span></p></td>
+</tr>
+<tr>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":8-7a-Trust-Composition.svg" alt=":8-7a-Trust-Composition.svg" />
+</span></p></td>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":8-7-GnuPG-Trust-Composition.svg" alt=":8-7-GnuPG-Trust-Composition.svg" />
+</span></p></td>
+</tr>
+<tr>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":RSO9-10-RiskSecurityOverlay.svg" alt=":RSO9-10-RiskSecurityOverlay.svg" />
+</span></p></td>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":RSO9-10-GnuPG-RiskSecurityOverlay.svg" alt=":RSO9-10-GnuPG-RiskSecurityOverlay.svg" />
+</span></p></td>
+</tr>
+<tr>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":9-9-RiskAssessmentPattern.svg" alt=":9-9-RiskAssessmentPattern.svg" />
+</span></p></td>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":9-9-GnuPG-RiskAssessmentPattern.svg" alt=":9-9-GnuPG-RiskAssessmentPattern.svg" />
+</span></p></td>
+</tr>
+<tr>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":9-9-GnuPG-RiskAssessmentPattern2.svg" alt=":9-9-GnuPG-RiskAssessmentPattern2.svg" />
+</span></p></td>
+</tr>
+<tr>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table"></p></td>
+<td align="left" valign="top"><p class="table"><span class="image">
+<img src=":9-9-GnuPG-RiskAssessmentPattern3.svg" alt=":9-9-GnuPG-RiskAssessmentPattern3.svg" />
+</span></p></td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+</div>
+</div>
+<div id="footnotes"><hr /></div>
+<div id="footer">
+<div id="footer-text">
+Last updated
+ 2026-02-21 21:30:50 CET
+</div>
+</div>
+</body>
+</html>
|
