@startuml !include left to right direction skinparam linetype polyline Title RSO Page 9: Fig. 20: Risk and Security Overlay ' grouping Grouping(riskex, "Risk Experience"){ Motivation_Assessment(hazard_ass, "Hazard Assessment") ' ''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' STRATEGY ' together{ Strategy_Resource(threat_enabler, "Threat Enabler") Strategy_Resource(asset, "Asset at Risk") Strategy_Capability(vuln, "Vulnerability\nCapability") ' } ' ''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' business ' together{ Business_Actor(threat_agent, "ThreatAgent\nBusiness Actor") Business_Event(threat_event, "Business Threat Event") Business_Event(loss_event, "Business Loss Event") ' } Business_Service(control, "Implemented Control Measure") ' grouping } ' ''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' Motivation together{ Motivation_Goal(global_goal, "Goal") Motivation_Assessment(risk_assessment, "Risk Assessment") Motivation_Goal(goal, "<>\nGoal") Motivation_Driver(risk_driver, "»Risk«\nDriver") Motivation_Stakeholder(risk_assessor, "Risk\nAssessor") Motivation_Stakeholder(risk_subj, "Risk\nSubject") Motivation_Requirement(sec_req, "Security\nRequirement") Motivation_Requirement(control_req, "ControlMeasure\nRequirement") Motivation_Principle(sec_princ, "Security_Principle") } ' Beziehungen Rel_Association(hazard_ass, threat_event) Rel_Association(vuln, threat_event) Rel_Association(vuln, threat_enabler) Rel_Association(vuln, loss_event) Rel_Association(vuln, asset) Rel_Association(control, threat_enabler) Rel_Association(control, asset) Rel_Association(threat_event, threat_enabler) Rel_Association(loss_event, asset) Rel_Association(riskex, risk_driver) Rel_Association(risk_subj,global_goal) Rel_Association(risk_assessment,risk_driver) Rel_Association(risk_assessment,risk_assessor) Rel_Association(risk_assessment,goal) ' Rel_Association(, ) Rel_Realization(sec_req,goal,Realise) Rel_Realization(sec_princ,goal,Realise) Rel_Realization(control_req,sec_princ,Realise) ' Rel_Realization(control,sec_princ,Realise) Rel_Realization(control,control_req,Realise) Rel_Flow(loss_event,global_goal,Flow) Rel_Assignment(threat_agent,threat_event,Assign) @enduml