Risk and Security Archimate Metamodel (simple)
(
)
https://pubs.opengroup.org/togaf-standard/integrating-risk-and-security/integrating-risk-and-security_5.html#_Toc95208581 (based on 2015 w150 Version) https://publications.opengroup.org/w172 (adapted to Archimate 3.1)
Risk / Security Domain
Threat Agent
Threat event (Angriff)
Loss Event (Verlust)
Risk (Risiko)
Control Objective (Risikominderung)
Control Measure (Gegenmassnahme)
Vulnerability (Verletzlichkeit)
Asset at Risk (Organisationswerte)
Personen
Geräte
Prozesse
Daten
Systeme
Objekte
Implementation of Control Measure (Security Services)
Threat (Gefährdung)
Red Team
Blue Team
Threat Agent
Threat event (Angriff)
Threat Agent
Risk / Security Domain
Threat event (Angriff)
Threat (Gefährdung)
Threat event (Angriff)
Vulnerability (Verletzlichkeit)
Threat event (Angriff)
Risk / Security Domain
Threat event (Angriff)
Loss Event (Verlust)
Loss Event (Verlust)
Risk / Security Domain
Loss Event (Verlust)
Vulnerability (Verletzlichkeit)
Loss Event (Verlust)
Threat (Gefährdung)
Loss Event (Verlust)
Risk (Risiko)
Risk (Risiko)
Risk / Security Domain
Control Objective (Risikominderung)
Risk / Security Domain
Control Objective (Risikominderung)
Risk (Risiko)
Control Measure (Gegenmassnahme)
Control Objective (Risikominderung)
Control Measure (Gegenmassnahme)
Risk / Security Domain
Vulnerability (Verletzlichkeit)
Risk / Security Domain
Asset at Risk (Organisationswerte)
Vulnerability (Verletzlichkeit)
Asset at Risk (Organisationswerte)
Risk / Security Domain
Implementation of Control Measure (Security Services)
Risk / Security Domain
Mitigation
Implementation of Control Measure (Security Services)
Vulnerability (Verletzlichkeit)
Implementation of Control Measure (Security Services)
Control Measure (Gegenmassnahme)
Threat (Gefährdung)
Risk / Security Domain
Red Team
Threat Agent
Blue Team
Implementation of Control Measure (Security Services)
