Skip to main content

​
Formulas

​
feasibilityFormula

Computes the overall attack feasibility rating from five EVITA attack factor inputs.
PropertyValue
Output FieldtaraFeasibility
Input FieldsattackTime, attackExpertise, attackKnowledge, attackWoo, attackEquipment
Output TypeEnum value from taraRecord-taraFeasibility
Null BehaviorReturns null when any input factor is missing
Algorithm:
  1. Map each attack factor enum value to a numeric score
  2. Sum all five numeric scores
  3. Classify the aggregate score into a feasibility level
Score Thresholds:
Aggregate ScoreFeasibility LevelEnum ID
0 — 13Highhigh
14Mediummedium
15 — 19Lowlow
20+Very LowveryLow
Input Factor Scoring Tables: Each attack factor enum maps to numeric scores used in the aggregate computation. The scores follow the EVITA Attack Potential methodology referenced in ISO/SAE 21434. Attack Time (attackTime):
Enum IDLabelScore
lte1d<= 1 day0
lte1w<= 1 week1
lte1mo<= 1 month4
lte6mo<= 6 months10
gt6mo> 6 months19
Attack Expertise (attackExpertise):
Enum IDLabelScore
laymanLayman0
proficientProficient3
expertExpert6
multipleExpertsMultiple Experts8
Attack Knowledge (attackKnowledge):
Enum IDLabelScore
publicPublic0
restrictedRestricted3
confidentialConfidential7
strictlyConfidentialStrictly Confidential11
Window of Opportunity (attackWoo):
Enum IDLabelScore
unlimitedUnlimited0
easyEasy1
moderateModerate4
difficultDifficult10
Attack Equipment (attackEquipment):
Enum IDLabelScore
standardStandard0
specializedSpecialized4
bespokeBespoke7
multBespokeMultiple Bespoke9
Interpretation: Lower aggregate scores mean the attack is easier to execute (higher feasibility). The high feasibility level (score 0-13) represents attacks achievable with minimal resources. The veryLow level (score 20+) represents attacks requiring exceptional effort across multiple dimensions.

​
verdictFormula

Computes the risk verdict score from the 4x4 impact-feasibility matrix.
PropertyValue
Output FieldtaraVerdict
Input FieldstaraImpact, taraFeasibility
Output TypeInteger (1-5)
Null BehaviorReturns null when either input is missing
Risk Matrix (Impact x Feasibility):
HighMediumLowVery Low
Severe5432
Major4321
Moderate3211
Negligible1111
Verdict Scale:
VerdictRisk LevelColorMinimum CAL
1AcceptableGreenCAL 1
2LowLight GreenCAL 1
3MediumAmberCAL 2
4HighOrangeCAL 3
5CriticalRedCAL 4
Notes:
  • Negligible impact always yields verdict 1 regardless of feasibility.
  • Verdict 5 (critical) only occurs with Severe impact combined with High feasibility.
  • The verdict drives the minimum CAL requirement enforced by the calDecorator.

​
description formula

Auto-generates a structured plain-text summary for each TARA Record.
PropertyValue
Output Fielddescription
Input Fieldsstakeholder_title, damageScenario, threatScenario_title, threatPath
Output TypeString
Output Format: 
STAKEHOLDER: [stakeholder title] / DAMAGE: [damageScenario] / THREAT: [threatScenario title] / PATH: [threatPath]
The formula uses _title suffix variants to resolve linked item display names. The description field is enforced as read-only by taraRecord-read-only-fields.xml.

​
Cell Decorators

​
feasibilityDecorator

Applied to the Feasibility column. Color-codes by feasibility level.
Field ValueCSS ClassColorSemantic
veryLow.feasVeryLowGreenLow threat
low.feasLowGreenLow threat
medium.feasMediumAmberModerate threat
high.feasHighRedHigh threat
veryLow and low share the same green styling, emphasizing only medium and high as actionable levels.

​
impactDecorator

Applied to the Impact column. Color-codes by impact severity.
Field ValueCSS ClassColorSemantic
negligible.impactNegligibleLight GreenMinimal harm
moderate.impactModerateAmberModerate harm
major.impactMajorOrangeSerious harm
severe.impactSevereLight RedLife-threatening harm

​
verdictDecorator

Applied to the Verdict column. Provides a 5-point color gradient with bold emphasis.
Field ValueCSS ClassColorSemantic
1.verdict1GreenAcceptable risk
2.verdict2Light GreenLow risk
3.verdict3AmberMedium risk
4.verdict4OrangeHigh risk
5.verdict5RedCritical risk
All verdict cells also receive the .boldCol class for visual emphasis. The decorator handles both integer (val === 1) and string (val === '1') verdict values.

​
rowHeaderVerdict

Applied to the row header (left-side row number cell). Colors the entire row header based on the taraVerdict value, matching the verdict color scale.
PropertyValue
Configuration Pathheaders.rowHeader.renderer
Input FieldtaraVerdict
BehaviorRow-level risk coloring visible even when Verdict column is hidden

​
goalHighlight

Applied to the Cybersecurity Goal column. Validates that risk reduction/avoidance treatments have a linked goal.
ConditionStyleDisplay
treatmentChoice is reducing or avoiding AND cybersecurityGoal is empty.treatmentMissing (orange outline)“Goal required” hint text via .missing-hint
OtherwiseNo decorationStandard display

​
claimHighlight

Applied to the Claims column. Validates that risk retention/sharing treatments have written justification.
ConditionStyleDisplay
treatmentChoice is retaining or sharing AND taraClaims is empty.treatmentMissing (orange outline)“Claim required” hint text via .missing-hint
OtherwiseNo decorationStandard display
Together, goalHighlight and claimHighlight ensure every treatment decision has either a goal link or a written claim, covering all four treatment choices.

​
calDecorator

Applied to the CAL column. Provides color coding and minimum-CAL validation.
FunctionInputBehavior
Color codinggoalCal valueApplies .cal1 through .cal4 pastel color classes
Mismatch detectiongoalCal + taraVerdictCompares assigned CAL against minimum required by verdict
Verdict-to-Minimum CAL Mapping:
VerdictMinimum CALMismatch Style
1 or 2CAL 1.calMismatch + “min CAL 1”
3CAL 2.calMismatch + “min CAL 2”
4CAL 3.calMismatch + “min CAL 3”
5CAL 4.calMismatch + “min CAL 4”
When the assigned CAL is lower than required, a red warning badge displays the minimum CAL text. This implements ISO/SAE 21434 Annex E CAL determination logic.

​
CSS Classes Reference

​
Column-Level Classes

CSS ClassApplied ToEffect
.creadonlytaraFeasibility, taraVerdict, descriptionBackground: whitesmoke. Indicates formula-driven read-only columns.
.boldColtaraVerdictBold text for verdict emphasis.

​
Status Color Classes

CSS ClassHex ColorUsed By
.feasVeryLowGreenfeasibilityDecorator
.feasLowGreenfeasibilityDecorator
.feasMediumAmberfeasibilityDecorator
.feasHighRedfeasibilityDecorator
.impactNegligibleLight GreenimpactDecorator
.impactModerateAmberimpactDecorator
.impactMajorOrangeimpactDecorator
.impactSevereLight RedimpactDecorator
.verdict1 — .verdict5Green to RedverdictDecorator
.cal1 — .cal4Pastel rangecalDecorator
.calMismatchRed badgecalDecorator
.treatmentMissingOrange outlinegoalHighlight, claimHighlight
.missing-hintHint text overlaygoalHighlight, claimHighlight