SHEET 02THREAT & RISK · ISO/SAE 21434 §8 + §15

A TARA that re-computes
when the system changes.

Threat scenarios, damage scenarios, attack paths and risk values live on the same graph as the architecture. Change an interface — affected lines re-flag. Land a control — feasibility recalculates. No frozen spreadsheet drifting from reality.

Run your next TARA here STRIDE · CAL · attack feasibility · §15 work products
RISK HEAT MAP23 OPEN
1
2
2
1
3
3
2
1
2
2
1
IMPACT ↑ · FEASIBILITY → · FULL MAP AT STATION 3
STATION 1 · THREATS

STRIDE per asset.
Proposed, not typed.

AI proposes threat and damage scenarios per component, with rationale. Engineers accept, edit or reject — nothing enters the assessment unreviewed.

EMITS → threat scenarios · TS-*
EMITS → damage scenarios · DS-*
RATES → S/F/O/P impact
THREAT MODELING CANVAS · TS-047 ASSET → DAMAGE → THREAT → ATTACK PATH → RISK
CAN Gateway ASSET
DS-11 DAMAGE SCENARIO
TS-047 THREAT
AP-09 ATTACK PATH
AP-12 ATTACK PATH
R-014 RISK · CRITICAL
entry: OBD-II · cellular · BLE ← SURFACE
feasibility per step ← RATED
recalcs when controls land ← LIVE
STATION 2 · ATTACK PATHS

Aggregated trees,
not tribal knowledge.

Attack paths aggregate across components into one tree per asset. Each step carries its feasibility rating — mitigate a step and every path through it re-scores.

STATION 3 · RISK

Impact × feasibility.
Computed, defensible.

Risk values derive from rated impact and attack feasibility per §15 — every cell in the heat map traces back to the scenarios behind it.

EMITS → risk values R-*
EMITS → CAL per scenario
FEEDS → §15 work products
RISK HEAT MAP 23 OPEN RISKS
VERY LOW LOW MEDIUM HIGH SEVERE
1
2
2
1
MAJOR
3
3
2
MODERATE
1
2
2
1
NEGLIGIBLE
1
1
1
IMPACT ↑ · ATTACK FEASIBILITY → RISK VALUE PER ISO/SAE 21434
avoid · reduce · share · retain ← DECISION
goals & requirements chained ← TRACE
handoff to assurance ← NEXT SHEET
STATION 4 · TREATMENT

Every decision keeps
its chain.

Treatment decisions spawn goals and requirements on the same graph — continue on Sheet 03 · Assurance to see them proven.

TITLETARA — THREAT ANALYSIS & RISK ASSESSMENT
STANDARDISO/SAE 21434 §8+§15
COVERAGE64/71 SCENARIOS
METHODSTRIDE · CAL