Menu

  1. Introduction
    1. Licensing
    2. System Requirements
    3. Setup and Installation
  2. Getting Started
    1. Creating the Database
    2. RM Studio Users/Contacts
    3. Email Configuration
    4. Web Module Setup
    5. Web Module Update
  3. Navigating RM Studio
    1. Main Menu
      1. Save Function
      2. Import External Data
        1. Import Assets
      3. Clear User Cache
      4. Security
      5. Properties
      6. Languages
      7. Registration
      8. User Manual
      9. Manage Checkouts
      10. About
      11. Application Style
    2. Navigation Tree
    3. Tabs
    4. The Grid
    5. Context & Flow
  4. Common Entities
    1. Business Entities
      1. Asset Details - Basic Information tab
      2. Asset Details - Risks tab
      3. Asset Details - Categories tab
      4. Asset Details - Business Entities tab
    2. Contacts
    3. Teams
    4. Categories
    5. Assets
    6. Threats
    7. Standards/Controls
      1. How to: Standards, Regulations, Controls
      2. Standards Implementation Comparison
    8. Documents
  5. Gap Analysis
    1. How to: Gap Analysis
    2. Reporting
  6. Risk Assessment
    1. How to: Risk Assessment
      1. Working with Assets
      2. Evaluation Values
      3. Evaluating Risks
      4. Various Definitions
      5. Risk Assessment Reporting
    2. Evaluation Templates
    3. Risk Owner Web Solution
  7. Web Module
    1. Dashboard
    2. My Tasks
    3. Reports
    4. Standards/Regulations
    5. Documents
    6. Incidents
    7. Risk Owner Web Solution
  8. Control Maturity and Effectiveness Assessment
    1. Control Assessment Templates
    2. Reporting
  9. Risk Treatment
    1. How to: Risk Treatment
      1. Risk Treatment Templates
      2. Risk Criteria
      3. Asset Level
      4. Controls Tab
      5. Scheduling a Future Control
      6. Future Controls Tab
      7. Overview
      8. Reload Assets, Threats and Controls
    2. Risk Treatment Reports
  10. STPA
    1. Intro to Models, Diagrams, Analyses
    2. STPA Projects
    3. Models and Diagrams
      1. How to: Create HCS Models
      2. How to: Create HCS Diagram
        1. Diagram Elements
    4. Performing the Analysis
      1. Setting up the Analysis
      2. System Level Hazards and Losses
      3. Step 1
    5. Reporting
  11. Business Continuity Management Module
    1. Organization
      1. New Organization
      2. Stakeholders
      3. Resources/Processes
        1. Impact Analysis
        2. Requirements
    2. Incident Response/Recovery
      1. Associated Threats
      2. Plans
        1. Steps
      3. Maintenance
        1. Test plans
        2. Test Results
    3. Templates
    4. Maintenance
    5. Reports BCM
  12. Database Settings
    1. Database Upgrade
    2. Add Existing
    3. Remove
    4. Migrate
    5. Backup
    6. Restore
  13. Glossary
  14. Calculations

4.4.Categories

Categories serve as the link between Assets, Threats, and Mitigating Controls in RM Studio. RM Studio comes equipped with default Categories. However, you can define your own Categories, and remember to link the applicable Threats to the new Categories. You can also simply modify the default Category library and only need to link the custom Categories.

Categories are defined as Parent or Sub-category. The default setting links the Threats to the Parent Categories only, because any link to a Parent Category is automatically linked to the Sub-categories contained.

How to Create a Category

  1. Click on the ‘+’ button to add a new Parent Category, then enter the name and description in the appropriate fields under the Category Information.
  2. To add a new Sub Category, first select the appropriate Parent Category from the list, then click on the ‘++’ button. Next, type in the name of the Sub-category and the description.

Categories for Assets and Threats

Categories are any general or comprehensive division of assets. Here specifically it is the division of Assets according to the applicable Standard. Categories are used to categorize Assets to create a link to Threats, which are linked to controls from deployed Standards

How to Link Assets to Threats via Categories

When new Assets are added to the library you need to assign them to a Category. The Category will then connect the Asset to the Threats associated with that Category. This action is performed in the Assets.

  1. Under the Asset from the Common module, click the ‘+’ button in Categories (lower, right-hand side) to open the Add Categories pop out window.
  2. Select all the applicable Categories or Sub-categories for the selected Asset, then click ‘OK’ button to apply.

*Tip* Save time by pressing and holding the ‘Ctrl’ key on your keyboard, then left click to select all of items from the list you want to include.

Help Guide Powered by Documentor
Suggest Edit