Global Settings
| Setting | Value | Description |
|---|---|---|
addAsSubmenu | true | Risksheet appears as a submenu item in Polarion navigation, not a top-level entry. |
culture | en | Localization setting. Affects date formats and locale-sensitive rendering. |
reviewManager | CommentBased | Uses Polarion comment-based review workflow. Reviewers annotate individual rows with comments. |
Data Types
The Risksheet operates with two work item data types:| Data Type | Polarion Type | Link Role | Zoom Column | Description |
|---|---|---|---|---|
risk | taraRecord | — | — | Primary data type. Each Risksheet row IS a taraRecord work item. |
task | riskControl | mitigates | taskTitle | Task data type. Risk controls are embedded as tasks within each TARA Record row. |
Column Definitions
Threat Identification Columns
| Column Name | Field Binding | Type | Width | Level | Description |
|---|---|---|---|---|---|
| Stakeholder | stakeholder | itemLink | 200 | 1 | Links to stakeholder work item from Risks/StakeholderCatalog via hasStakeholder link role. |
| CIAx Property | ciaxProperty | enum | 110 | 2 | Security property threatened. Enum: taraRecord-ciaxProperty. |
| Damage Scenario | damageScenario | richText | 250 | 3 | Free-text description of the damage resulting from the threat. |
| Threat Scenario | threatScenario | itemLink | 200 | 4 | Links to threat scenario from Risks/ThreatScenarioCatalog via hasThreatScenario link role. |
| Threat Path | threatPath | text | 200 | 5 | Free-text attack path description. collapseTo: true. |
Attack Feasibility Columns
| Column Name | Field Binding | Type | Width | Header | Description |
|---|---|---|---|---|---|
| TIME | attackTime | enum | 100 | headFeasibility | Elapsed time to complete attack. Enum: taraRecord-attackTime. |
| EXP | attackExpertise | enum | 100 | headFeasibility | Attacker expertise level. Enum: taraRecord-attackExpertise. |
| KNOW | attackKnowledge | enum | 110 | headFeasibility | Knowledge of target required. Enum: taraRecord-attackKnowledge. |
| WOO | attackWoo | enum | 100 | headFeasibility | Window of Opportunity. Enum: taraRecord-attackWoo. |
| EQP | attackEquipment | enum | 110 | headFeasibility | Equipment required. Enum: taraRecord-attackEquipment. |
| Feasibility | taraFeasibility | enum | 120 | headFeasibility | Computed feasibility rating. Enum: taraRecord-taraFeasibility. Read-only (formula-driven). CSS: .creadonly. |
Risk Assessment Columns
| Column Name | Field Binding | Type | Width | Header | Description |
|---|---|---|---|---|---|
| Impact | taraImpact | enum | 110 | headRisk | Impact severity rating. Enum: taraRecord-taraImpact. |
| Verdict | taraVerdict | int | 100 | headRisk | Computed risk verdict (1-5). Formula-driven. collapseTo: true. CSS: .creadonly. |
Risk Treatment Columns
| Column Name | Field Binding | Type | Width | Header | Description |
|---|---|---|---|---|---|
| Treatment | treatmentChoice | enum | 130 | headTreatment | Treatment strategy. Enum: taraRecord-treatmentChoice. |
| Status | treatmentStatus | enum | 110 | headTreatment | Treatment implementation status. Enum: taraRecord-treatmentStatus. |
Cybersecurity Goal Columns
| Column Name | Field Binding | Type | Width | Header | Description |
|---|---|---|---|---|---|
| Goal | cybersecurityGoal | itemLink | 150 | headGoal | Links to cybersecurityGoal via hasCybersecurityGoal link role. No document restriction. |
| CAL | cybersecurityGoal.cal | enum | 100 | headGoal | Cross-item binding to the linked goal’s CAL field. Enum: cybersecurityGoal-cal. Read-write. |
Cybersecurity Claim Columns
| Column Name | Field Binding | Type | Width | Header | Description |
|---|---|---|---|---|---|
| Claims | taraClaims | richText | 180 | headClaim | Cybersecurity claims text. Required when treatment is retaining or sharing. |
Controls Columns
| Column Name | Field Binding | Type | Width | Header | Description |
|---|---|---|---|---|---|
| Task | task | taskLink | 100 | headControls | Links to riskControl work item via mitigates role. |
| Task Title | taskTitle | text | — | headControls | Display title of linked risk control. minWidth used instead of fixed width. collapseTo: true. |
Requirements and Verification Columns
| Column Name | Field Binding | Type | Width | Header | Description |
|---|---|---|---|---|---|
| Requirements | requirements | serverRender | 150 | headReqVerif | Velocity-rendered. Traverses: riskControl back-links to sysReq/desReq. |
| Verification | verification | serverRender | 150 | headReqVerif | Velocity-rendered. Traverses: sysReq/desReq back-links to testCase. |
Generated Columns
| Column Name | Field Binding | Type | Width | Description |
|---|---|---|---|---|
| Description | description | richText | 200 | Auto-generated summary. Formula concatenates stakeholder, damage, threat, and path fields. Read-only. |
Row Hierarchy (5 Levels)
| Level | Control Column | Zoom Column | Semantic |
|---|---|---|---|
| 1 | stakeholder | stakeholder | Stakeholder grouping |
| 2 | ciaxProperty | ciaxProperty | Security property grouping |
| 3 | damageScenario | damageScenario | Damage scenario grouping |
| 4 | threatScenario | threatScenario | Threat scenario grouping |
| 5 | systemItemId | threatPath | Threat path (leaf level) |
sortBy configuration matches this hierarchy order: stakeholder > ciaxProperty > damageScenario > threatScenario > threatPath.
Level 5 uses systemItemId as the control column (system-level record identifier) rather than threatPath as the zoom column.
Query Factories
| Factory Name | Lucene Query | Used By |
|---|---|---|
stakeholderQuery | type:stakeholder | Stakeholder column item picker |
threatScenarioQuery | type:threatScenario | Threat Scenario column item picker |
cybersecurityGoalQuery | type:cybersecurityGoal | Cybersecurity Goal column item picker |
Risks/StakeholderCatalog and Risks/ThreatScenarioCatalog).
Column Group Color Theming
| Group | CSS Class | Semantic Color |
|---|---|---|
| Threat Identification | headThreat | Purple |
| Attack Feasibility | headFeasibility | Blue |
| Risk Assessment | headRisk | Red/Pink |
| Risk Treatment | headTreatment | Green |
| Cybersecurity Goal | headGoal | Teal |
| Cybersecurity Claim | headClaim | Amber |
| Controls | headControls | Blue |
| Req & Verification | headReqVerif | Purple |
.firstRow) and last-row (.lastRow) CSS selectors provide depth effect on column group headers. Column group header height is 42px; individual column header height is 52px.
Header Configuration
| Header | Height | Renderer |
|---|---|---|
columnGroupHeader | 42px | Standard |
columnHeader | 52px | Standard |
rowHeader | — | rowHeaderVerdict decorator (colors row header by verdict score) |
Related Pages
- Risksheet Views Reference — view definitions and column visibility
- Risksheet Formulas Reference — formula logic and cell decorators
- TARA Record — primary work item type
- Risk Control — task work item type
- Link Roles and Traceability Relationships — link roles used by item link columns