Risk and Security Archimate Metamodel
(
)
https://pubs.opengroup.org/togaf-standard/integrating-risk-and-security/integrating-risk-and-security_5.html#_Toc95208581 (based on 2015 w150 Version) https://publications.opengroup.org/w172 (adapted to Archimate 3.1)
Risk / Security Domain
Threat Agent
Threat event (Angriff)
Loss Event (Verlust)
Risk (Risiko)
Control Objective (Risikominderung)
Security Requirement
Security Principle (Policy)
Control Measure (Gegenmassnahme)
Vulnerability (Verletzlichkeit)
Asset at Risk (Organisationswerte)
Data at Risk
Process at Risk
Building Block at Risk
Implementation of Control Measure (Security Services)
Security Service
Security Application
Threat (Gefährdung)
Threat Agent
Risk / Security Domain
Threat Agent
Threat event (Angriff)
Threat event (Angriff)
Risk / Security Domain
Threat event (Angriff)
Loss Event (Verlust)
Threat event (Angriff)
Vulnerability (Verletzlichkeit)
Threat event (Angriff)
Threat (Gefährdung)
Loss Event (Verlust)
Risk / Security Domain
Loss Event (Verlust)
Threat (Gefährdung)
Loss Event (Verlust)
Risk (Risiko)
Loss Event (Verlust)
Vulnerability (Verletzlichkeit)
Risk (Risiko)
Risk / Security Domain
Control Objective (Risikominderung)
Risk / Security Domain
Control Objective (Risikominderung)
Risk (Risiko)
Security Requirement
Control Objective (Risikominderung)
Security Requirement
Risk / Security Domain
Security Principle (Policy)
Risk / Security Domain
Security Principle (Policy)
Control Objective (Risikominderung)
Control Measure (Gegenmassnahme)
Security Principle (Policy)
Control Measure (Gegenmassnahme)
Risk / Security Domain
Control Measure (Gegenmassnahme)
Security Requirement
Vulnerability (Verletzlichkeit)
Risk / Security Domain
Asset at Risk (Organisationswerte)
Vulnerability (Verletzlichkeit)
Asset at Risk (Organisationswerte)
Risk / Security Domain
Data at Risk
Asset at Risk (Organisationswerte)
Implementation of Control Measure (Security Services)
Risk / Security Domain
Mitigation
Implementation of Control Measure (Security Services)
Vulnerability (Verletzlichkeit)
Implementation of Control Measure (Security Services)
Control Measure (Gegenmassnahme)
Security Service
Implementation of Control Measure (Security Services)
Threat (Gefährdung)
Risk / Security Domain
