High Level Risks

This section shows the initial and residual risks aggregated by impact category. In each case, this is the highest of all risks of threat scenarios linked to damage scenarios with the given impact category.

Note
The risks field will show empty if an impact category is not assigned to any damage scenario.

The first column shows the "Initial risk," i.e., the TARA risks. The initial risk can include enabled security controls, if these are already applicable for the TARA.

The second column shows the "Residual risk," i.e., the RRA risks, which are computed on the basis of the enabled security controls.