.polarion/tracker/fields/taraRecord-taraImpact-enum.xml
Enum Values
| Enum ID | Label | Sort Order | Description |
|---|---|---|---|
severe | Severe | 0 | Life-threatening or fatal injuries. Severe violation of applicable law or regulation. Worst-case consequence. |
major | Major | 1 | Severe (non-fatal) injuries. Significant regulatory and legal consequences. |
moderate | Moderate | 2 | Light to moderate injuries. Moderate regulatory consequences. Temporary service disruption without physical harm. |
negligible | Negligible | 3 | No injuries. Negligible legal or financial consequences. |
ISO/SAE 21434 Alignment
The impact levels correspond to ISO/SAE 21434 Clause 15 impact severity categories across four dimensions:| Impact Level | Safety | Financial | Operational | Privacy |
|---|---|---|---|---|
| Severe | Life-threatening / fatal | Existential losses | Complete loss of function | Mass personal data breach |
| Major | Severe injuries | Major losses | Extended loss of function | Significant data exposure |
| Moderate | Light injuries | Moderate losses | Partial loss of function | Limited data exposure |
| Negligible | No injuries | Negligible losses | Minimal disruption | No data impact |
Risksheet Integration
| Property | Value |
|---|---|
| Field ID | taraImpact |
| Column Header | Impact |
| Column Group | Risk Assessment (red: #F8EBE8) |
| Risksheet Level | 5 (Threat Path level) |
| Cell Decorator | impactDecorator |
| Views | 3. Risk Assessment, 4. Risk Treatment, Overview |
| Read-Only in Form | Yes (editable only in Risksheet) |
Impact Decorator Styling
TheimpactDecorator applies CSS classes based on the selected value:
| Impact Level | CSS Class | Visual |
|---|---|---|
| Severe | Severe (red) | Red background |
| Major | Major (orange) | Orange background |
| Moderate | Moderate (amber) | Amber background |
| Negligible | Negligible (green) | Green background |
Risk Verdict Matrix
Impact is the row axis in the verdict formula. Combined with TARA Feasibility, it produces the risk verdict (1-5):| Impact \ Feasibility | Very Low | Low | Medium | High |
|---|---|---|---|---|
| Severe | 3 | 4 | 5 | 5 |
| Major | 2 | 3 | 4 | 5 |
| Moderate | 1 | 2 | 3 | 4 |
| Negligible | 1 | 1 | 1 | 1 |
Verdict Interpretation
| Verdict | Risk Level | Treatment Obligation |
|---|---|---|
| 1 | Negligible | No action needed |
| 2 | Low | Acceptable |
| 3 | Medium | Investigation required |
| 4 | High | Unacceptable, controls required |
| 5 | Critical | Unacceptable, immediate action |
Lucene Queries
Related Pages
- TARA Feasibility Levels — the other axis of the risk verdict matrix
- Attack Feasibility Factor Enums — the five factors that produce feasibility
- Risk Verdict Matrix — concept page on the risk matrix
- Assess Risk Verdict — how-to guide for risk assessment
- Risksheet Formulas Reference — formula implementation details