Scope

CycurRISK contains a separate page for the Scope, which works just exactly the same as the TOE description.

The Scope defines two things are as follows:

1. The boundary of the TOE itself for the purpose of the TARA. So it distinguishes the TOE from its operational environment. This should mostly follow from the TOE description, but you can use the scope to highlight some important points.
2. The boundaries of the analysis itself, e.g., which types of attacks and attackers are considered.

Note
CycurRISK provides basic formatting, tables, graphics, and links for the scope.