-
Notifications
You must be signed in to change notification settings - Fork 2
Specs M4 Risks EBIOS RM Strategic Scenario
Claude edited this page Aug 28, 2026
·
1 revision
risks.models.ebios.strategic_scenario.StrategicScenario
Strategic scenario: a high-level attack path from an SR to an OV passing through the ecosystem. Reference prefix: ESTS.
| Field | Type | Constraints | Description |
|---|---|---|---|
id |
UUID | PK, auto | Unique identifier |
assessment_id |
relation | FK -> RiskAssessment, required | Parent assessment |
reference |
string | required, unique, prefix ESTS | Code (e.g. ESTS-1) |
name |
string | required, max 255 | Title |
description |
text | required | Narrative description |
sr_ov_pair_id |
relation | FK -> RiskSourceObjectivePair, required | Source SR-OV pair |
targeted_feared_events |
M2M -> FearedEvent | required | Targeted feared events |
gravity_level |
integer | required | Severity (impact scale) |
gravity_justification |
text | optional | Justification |
likelihood_level |
integer | required | Strategic likelihood (likelihood scale) |
likelihood_justification |
text | optional | Justification |
risk_level |
integer | computed | Risk level via the RiskCriteria matrix |
existing_security_measures |
text | optional | Existing measures taken into account |
is_retained |
boolean | required, default true | Retained for workshop 4 |
retention_justification |
text | optional | Justification |
consolidated_risk_id |
relation | FK -> Risk, optional | Risk consolidated into the register |
criteria_snapshot |
json | computed | Snapshot of the scale |
created_by, created_at, updated_at
|
- | auto | Standard |
Built from docs/ at v0.36.0. Edits made here are overwritten by the next release : open a pull request against the source instead.
- Administration
- Ask Cairn
- Assets and suppliers
- Compliance
- The dashboard
- Finding your way
- Getting started
- Incidents
- How records move
- Organisational context
- Reports and management review
- Risks
- Trust Center
- Architecture
- Configuration
- Contributing
- The documentation system
- Installation
- Internationalisation
- Operations
- Release process
- Security
- Testing
- Adding an assistant provider
- Adding a dashboard widget
- Adding a domain entity
- Declaring a lifecycle
- Adding an MCP tool
- Adding a REST endpoint
- Adding a report
- Interface conventions
- Dashboard widgets
- Lifecycles
- MCP tools
- MCP tool parameters : Assets
- MCP tool parameters : Compliance
- MCP tool parameters : Governance and context
- MCP tool parameters : General
- MCP tool parameters : Incidents
- MCP tool parameters : Reports and management review
- MCP tool parameters : Risks
- MCP tool parameters : System and administration
- MCP tool parameters : Trust Center
- Management commands
- Models
- Permissions
- REST endpoints
- Environment variables
- MCP server
- REST API
- Assistant module (Ask Cairn)
- Module 0: User Management and Access Control
- Module 1: Context and Organization
- Module 2: Asset Management
- Module 3: Compliance
- Module 4: Risk Management
- Module 4 bis - EBIOS Risk Manager
- Module 5 : Trust Center
- Module 6 : Security Incident Management
- Management review : ISO 27001:2022 compliance (clause 9.3)