Values
| ID | Label | Sort Order | Description |
|---|---|---|---|
planned | Planned | 0 | Treatment has been defined and scheduled but implementation has not started. Initial state in the treatment lifecycle. |
ongoing | Ongoing | 1 | Treatment is actively being implemented by the responsible team. Work is in progress. |
completed | Completed | 2 | Treatment has been fully implemented and verified. Terminal state representing closure of the treatment action. |
Treatment Lifecycle
- Planned — Treatment decision is recorded, risk control work items may be created, but no implementation work has begun.
- Ongoing — Implementation of the mitigation measure is in progress (e.g., development of security controls, contractual negotiation for risk sharing).
- Completed — Treatment is fully implemented and verified through review or testing. Implies verification has occurred.
Field Binding
| Property | Value |
|---|---|
| Field ID | treatmentStatus |
| Work Item Type | taraRecord |
| Enum ID | taraRecord-treatmentStatus |
| Field Type | Enum (single-select) |
treatmentStatus field is a custom field on the TARA Record work item type.
Risksheet Usage
ThetreatmentStatus column in the Risksheet Configuration:
- Uses the
taraRecord-treatmentStatusenum for value selection - Appears in the following views:
Overview4. Risk Treatment
Relationship to Treatment Choice
ThetreatmentStatus field tracks the implementation progress of the strategy defined in treatmentChoice. The two fields operate as a pair:
| treatmentChoice | Typical treatmentStatus Progression |
|---|---|
avoiding | planned > ongoing (design change in progress) > completed (threat source removed) |
reducing | planned > ongoing (controls being developed) > completed (controls deployed and verified) |
sharing | planned > ongoing (agreement negotiation) > completed (agreement signed) |
retaining | planned > completed (formal acceptance documented) |
Lucene Queries
- Count of
planneditems indicates backlog of unstarted treatments - Count of
ongoingitems indicates active treatment work - Ratio of
completedto total indicates treatment closure rate
Cell Decoration
The Risksheet may apply color coding to thetreatmentStatus column following the standard Nextedy pattern:
| Status | Expected Color | Semantic |
|---|---|---|
planned | Grey/Neutral | Pending work |
ongoing | Amber | In-progress, attention needed |
completed | Green | Closed, no action required |
Related Enumerations
- Risk Treatment Choice — the treatment strategy being tracked
- Risk Control Type — classification of controls applied during
reducingtreatment - System Element Status — similar lifecycle pattern for system element approval
- Cybersecurity Assurance Levels (CAL) — assurance tier guiding treatment rigor
Configuration Notes
- No explicit default value is defined. It is unclear whether Polarion auto-selects
planned(sortOrder 0) or leaves the field empty on TARA Record creation. - No workflow transition guards are defined in the enum file. Status changes may be freely editable by users unless constrained by a separate Polarion workflow configuration.
- The
completedstatus implies that verification has occurred. Projects should define whether a workflow transition step or approval gates this status change. - Dashboard and PowerSheet KPI cards may aggregate
treatmentStatuscounts to report treatment closure rates across the TARA module. The Lucene queries above enable these aggregations.