The Threats and Vulnerabilities module enables organisations to create and manage their own catalogues of threats and vulnerabilities relevant to their environment. Threats represent potential events or influences that may adversely affect the organisation and its assets, while vulnerabilities represent weaknesses that may be exploited by a threat.
WebArat enables threats and vulnerabilities to be linked to assets, controls and risk scenarios, allowing these relationships to be used in risk analysis. Catalogues can be created based on legislative requirements, the organisation’s methodology or knowledge gained from real-world experience.
The system also records realised threats, exploited vulnerabilities and their relationships. This allows the organisation to assess risks using not only predefined values, but also knowledge gained from actual security developments within its environment.