It allows entering data describing the risk scenario.

 

id

Row identifier; it should be a unique identifier, without duplicates

asset

Click to select one or more assets involved in the described scenario.

dimension

Click on combo to select the affected dimension.

description

Describe the actuation; free text; it shall describe the threats, and the measures to counter them.

threats

Click to select one or more threats from the catalogue of PILAR.

measures

click to select security measures; they can be technical safeguards or controls from some evaluation profile

Click to assess the maturity of selected safeguards and controls

residual

Risk evaluation may be automatic or manual.

 

To select safeguards and controls, PILAR can suggest elements that seem appropriate for the dimension and threat used. It is just a suggestion.