Prerequisites
- At least one system element with
elementType set to system exists in the project
- At least one TARA module (riskSpecification document) is linked via the
systemElementId document field
Steps
1. Open the TARA Report
Navigate to Risks Home in the sidebar, then click TARA Report in the quick links panel. Alternatively, go directly to the wiki page at Risks/TARA Report.
2. Check the Executive Summary
At the top of the report, review the metadata block showing:
| Field | Description |
|---|
| Project ID | Current Polarion project identifier |
| Generated | Date the page was last saved |
| Total TARA Records | Count of all taraRecord work items in the project |
| Subsystems | Number of subsystem-level system elements |
3. Read the Verdict Distribution Cards
Six color-coded summary cards display the count of TARA records at each verdict level:
| Card | Color | Meaning |
|---|
| V1 | Green (#4CAF50) | Negligible risk — no action needed |
| V2 | Light green (#8BC34A) | Low risk — acceptable |
| V3 | Amber (#FF9800) | Medium risk — investigation required |
| V4 | Red (#f44336) | High risk — unacceptable, controls required |
| V5 | Dark red (#b71c1c) | Critical risk — immediate action required |
| Unclassified | Grey (#5e6c84) | Missing verdict — analysis incomplete |
Records without a taraVerdict value appear under “Unclassified.” These need feasibility and impact scoring before the report reflects accurate risk posture.
4. Interpret the Status Alert Banner
Below the cards, a conditional alert communicates the overall project risk state:
- Success (green): All records are at Verdict 1-2. No further action needed.
- Warning (amber): Verdict 3 records exist but no Verdict 4-5. Monitoring required.
- Danger (red): Verdict 4 or 5 records remain. Additional cybersecurity controls are mandatory before the case can be closed.
5. Review the TARA Structure Tree
The hierarchical table displays each system element at three indentation levels (system, subsystem, component) with per-element verdict counts:
| Column | Content |
|---|
| Element / TARA | System element name with link to its Risksheet module |
| Records | Total TARA records in that module |
| V1 — V5 | Count per verdict level (V4/V5 cells highlighted red if > 0) |
| N/A | Unclassified count (highlighted amber if > 0) |
After the tree, an info bar shows: “X system elements | Y TARAs exist | Z TARAs missing.” Use this to identify components that still need a TARA module created.
6. Check the Unacceptable Risk Action Items
This section appears only when Verdict 4 or 5 records exist. It lists each TARA module containing unacceptable risks with:
- Module title (linked to Risksheet)
- Subsystem reference
- Count of V4+V5 records
- Required action
Use these action items to prioritize treatment work in the corresponding Risksheet modules.
Verification
After addressing risks, reopen the TARA Report page. Confirm:
