@startuml
!include <archimate/Archimate>
left to right direction

Title  Page 9:  Fig. 9: NetBSD Download Risk Assessment Pattern - Malicious Security Officer

Grouping(M_Group,"RiskExperience"){
' Elemente
together{
Motivation_Driver(driver, "Manipulated ISO Image") 
Motivation_Stakeholder(assessor, "NetBSD User")
}

Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity")

}



Strategy_Resource(trust_anchor, "Trust Anchor\nPublic Signature Key")
Strategy_Resource(artifact, "NetBSD ISO Image")
Rel_Association(trust_anchor,artifact)



together{
Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image")

Motivation_Requirement(req, "Check GnuPG Signature of ISO Image")

Motivation_Requirement(reqwot, "Check WoT of Public Signing Key")
}



Business_Actor(threat_agent, "Malicious Security Officer")
Business_Event(threat_event, "signs manipulated ISO image")
Business_Event(loss_event,   "loss of trust in ISO image")

Rel_Assignment(threat_agent,threat_event,Assign)







' driver -[hidden]-> trust
' trust -[hidden]-> resource
' intention -[hidden]down-> trust



' Beziehungen
Rel_Association(driver, assessment)
Rel_Association(assessor, assessment)
Rel_Association(assessment,goal)

Rel_Realization(req,goal,"realises integrity")
Rel_Realization(reqwot,goal,"realises authenticity")

@enduml