IruisRisk Documention
Introduction
The Four-Question Framework for Threat Modeling
Question 1: What are we working on - Creating a threat model
Create a diagram from scratch 
Trust zones and components 
Adding Component details 
Changing Component Visibility by Business Unit
Answer our questionnaire to create a diagram 
Import a template
File Import Feature
(BETA) Import from AWS Cloud
Use our AI Assistant, Jeff 
Embedded IriusRisk Project Diagrams in external tools
Question 2: What can go wrong - Assessing Threats in IriusRisk
Analyzing the threats
Filter Threats and Countermeasures by Custom Fields
Threat Details
Fields: Threat Details
Impact: Threat Details
Risk Summary: Threat Details
Risk types and their explanations
Test State: Threat Details
Question 3: What are we going to do about it - Countermeasures
Change the Countermeasures Status
Seeing countermeasures applicable to a Standard
Create Issue Trackers from your Countermeasures
Configuring your Issue Trackers
Question 4: Did we do a good job
Reporting
Compliance Report
Current Risk Summary Report
Technical Countermeasure Report
Technical Threat Report
Export your threat model
Risk Score
Configurable Options in IriusRisk
Security Content
Risk pattern libraries
Risk Calculation
Security Classifications
Standards
Templates
Objects
Components
Assets
Trust Zones
Deleting Tags in Dataflows and Risk Pattern
Workflows
Custom Fields
Rules
Integrations & Imports
Project Roles
Miscellaneous
Version History
See Threat Model Output (Threats and Countermeasures) Changes Over Time
Automated Component Change Detection in IriusRisk
Copy the Project link to share with others
Audit Log
Export your Project List as XML
Deleting Tags in Dataflows and Risk Pattern
User Management
APIs to use UUID rather than Username
Using SAML as an authentication-only identity provider
Configurable Options in IriusRisk

Configurable Options in IriusRisk

With great power, comes great configurable options for your SaaS tool.

2
min
•
Last updated
November 25, 2024

Contents

Security Content

Templates

Objects

Workflows

Custom Fields

Rules

Integrations & Imports

Project Roles

‍

Now that we have covered the platform in relation to the four question framework, and creating a fully working threat model, with actionable countermeasures, we can now see what other capabilities are within the tool.

If you return to your list of Projects (click on the chevron arrows in the top left corner), you will see a menu at the top of your screen like this:

‍

There are several areas that you can configure and customize, and here we go through each one and the potential use cases for your business and industry.

Security Content
Close Modal