Prerequisites
- The TARA solution is installed in your Polarion project
- System elements exist with
elementType configured (system, subsystem, component)
Steps
1. Open Risks Home
Click Risks in the sidebar navigation, or navigate directly to the wiki page at Risks/Home. The page opens with a red-branded space banner titled “TARA Risks.”
2. Read the Statistics Bar
Five KPI tiles display live counts from the project:
| Metric | Query | What It Tells You |
|---|
| TARA Records | type:taraRecord | Total risk assessment records across all modules |
| CS Goals | type:cybersecurityGoal | Number of cybersecurity goals defined |
| Threat Scenarios | type:threatScenario | Catalog entries available for reuse |
| Risk Controls | type:riskControl | Countermeasures linked to TARA records |
| Documents | Documents in Risks space | Total TARA modules and lifecycle documents |
3. Use the System Element Navigator
The main content area displays a three-column hierarchical table:
| Column | Width | Content |
|---|
| System Element | 40% | Indented tree: System > Subsystem > Component |
| TARA Module | 40% | Link to the Risksheet view, or em-dash if no TARA exists |
| Status | 20% | Document workflow state (Draft, In Review, Approved, Published) |
systemElement work items using back-link traversal:
- Level 0 (bold): Top-level system elements (
elementType = system)
- Level 1 (indented): Subsystems linked to the system
- Level 2 (further indented): Components linked to subsystems
Click any TARA module link in the navigator to open the Risksheet view for that document. The link uses the URL pattern /polarion/#/project/{projectId}/risksheet?document=Risks/{docName}, bypassing the standard document viewer.
4. Identify Missing TARAs
Components without a linked TARA module display an em-dash (—) styled with the nx-missing CSS class in the TARA Module column. These are coverage gaps where a new TARA analysis should be created.
To create a missing TARA, follow the Create a New TARA Module guide and set the systemElementId document field to the target component’s work item ID.
5. Check Document Status
The Status column shows the workflow state of each TARA module’s riskSpecification document:
| Status | Meaning |
|---|
| Draft | Analysis in progress, editable |
| In Review | Sent for approval, signers assigned |
| Approved | At least one project_approver has signed |
| Published | Finalized baseline |
The Status column shows the riskSpecification document workflow state, not the systemElement work item status. Use it to track TARA analysis progress, not component lifecycle.
6. Access Quick Links
The right panel provides direct navigation to key resources:
- How to Create a TARA — step-by-step TARA creation guide
- TARA Report — project-wide verdict summary
- Cybersecurity Plan / Cybersecurity Case / Cybersecurity Concept — lifecycle documents
- System Element Tree — dedicated system hierarchy view
- Threat Scenario Catalog / Stakeholder Catalog — shared catalogs
- Cybersecurity Goals — work item list filtered by
cybersecurityGoal type
Verification
Confirm the dashboard displays correctly:
