Skip to main content
Type IDLabelIconRole in TARA
taraRecordTARA Recordtype_risk.gifCore risk assessment record — one per threat path
cybersecurityGoalCybersecurity Goaltype_requirement.gifHigh-level objective derived from risk assessment (Clause 15)
systemElementSystem Elementtestrun_status_open1.pngPhysical or logical component under analysis
threatScenarioThreat ScenarioMAN_project_monitoring_and_control.gifNamed threat grouping attack paths
riskControlRisk Controlbuild_OK.pngCountermeasure that mitigates a TARA record
stakeholderStakeholderreq_status_accepted.gifEntity affected by cybersecurity threats
sysReqRequirementtype_purple_feature.pngSpecifies system behavior (default type)
testCaseTest Casetype_purple_testcase.pngVerifies a requirement
TARA Record (taraRecord) — 15 custom fields covering CIAx property, damage scenario, 5-factor attack feasibility, risk verdict, treatment choice and status, claims, and threat path. Cybersecurity Goal (cybersecurityGoal) — CAL assignment, CIAx property, asset, and rationale fields. System Element (systemElement) — Element type hierarchy (system, subsystem, component) and status tracking. Threat Scenario (threatScenario) — Shared catalog entries referenced by TARA records via the hasThreatScenario link role. Risk Control (riskControl) — Control type classification and linkage via the mitigates role. Stakeholder (stakeholder) — Shared catalog entries referenced via the hasStakeholder link role.
TARA record fields are marked read-only in the default Polarion form layout. All editing is done exclusively through the Risksheet interface.