The Risk Scenarios module provides the core environment for defining relationships used in risk identification and assessment. It establishes links between primary assets, processes or aspects, supporting assets, implemented controls, threats and vulnerabilities or root causes. The module can therefore also serve as a catalogue of the organisation’s identified risk scenarios.
WebArat’s system logic verifies the integrity of the relationships being created and prevents elements from being linked where they are not related according to the defined structure. The manager then identifies relevant threats and vulnerabilities based on their knowledge of the organisation’s actual environment.
Risk scenarios form a shared knowledge base for other WebArat processes. They are used primarily for risk analysis and risk management, but also when processing audit and control findings and when recording and evaluating incidents and events.