Analysis Catalogs
Risk Catalog
This option offers the possibility of providing different catalogs with diverse typology (security, legal, financial, operational, etc.) which are previously generated in the platform or when you create a new catalog. These catalogs will be necessary for the option ‘Element inventory, Risk Analysis, Risk Management’.
The list of catalogs has the following options:
Analysis Catalog: It allows you to insert a new catalog on the list.
Add: It allows you to create a new catalog.
Remove: It allows you to remove a catalog. For this task you have to select the row of the threat and click on the button ‘Remove’.
Import: GlobalSuite® enables to import catalog previously created in XML format.
Export: GlobalSuite® enables to export catalogs in XML format
Change Name: It enables to change the name of one catalog included on the list.
If you click on one of the catalogs which are available, the following screen is shown:
The left chart shows different Categories which you can associate threats. The categories are predefined (communications, hardware, information, etc.), but it’s possible to create new ones if you click on the button ‘Add’.
The chart of the Categories has the following options:
Remove: It allows you to remove one category previously defined.
Change Icon: It allows you to define an icon which defines the category selected.
Show: This option allows you to filter the categories; this option is also very useful in case you have a large number of categories.
Disassociate: It allows you to remove the threat(s) which has been associated with the category. For this task you have to click on the left chart and click on the button ‘Disassociate’.
Back: The platform returns to the previous screen which shows the list of catalogs.
Expand: It expands the list of all the categories and threats which have been associated.
Contract: It contracts the list of categories leaving visible the last ones.
The chart located in the right side shows the different Threats, which depending on the catalog selected, can have diverse typology (security, legal, etc.)
The chart of the threats has the following options:
Add: It allows you to insert a new threat on the list.
Remove: It allows you to remove a threat. For this task you select the row of the threat and click on the button ‘Remove’.
Associate: This option allows you to associate one or several threats to one specific category. For this you have to select the chart located on the left, select the chart which corresponds with the category and click on the button ‘Associate’.
Import: GlobalSuite® enables to import catalogs of threats which have been created in CSV format.
For the import process to load special characters correctly, it must be imported in "CSV UTF-8 (comma delimited)" formatAdd Help: It allows you to add a descriptive text to the threat. If the threat has extra help, it will be shown in the specific column
On the other hand, the chart located on the right side it shows a list with different controls which mitigate the threats previously defined.
The control panel has the following options:
Add: It allows you to insert a new control on the list.
Remove: It allows you to remove a control. For this task you have to select the control row and click on the button ‘Remove’.
Associate: This option allows you to associate with a specific threat one or several controls. For this task, you have to select the chart which is located on the left side and select the specific chart of the threat, and hereafter, click on the button ‘Associate’.
Import: GlobalSuite® enables to import catalog of controls which are created in CSV format.
For the import process to load special characters correctly, it must be imported in "CSV UTF-8 (comma delimited)" format
NOTE: The following associations are valid: associate controls with threats and threats with categories.
Risk Types
This option allows you to create risk categories, establishing the risks that are associated with each category. This allows that the risks of a risk analysis, from the proposal of a catalog, have automatically associated the category depending on the configuration established on this functionality.
The table on the left displays the default risk categories (corresponding to the same categories considered in the option: "Analysis Methodologies - General Configuration"). Each category can have related one or more risk catalogs located in the table on the right. To carry out the association between risk categories and catalogs, you must select the items you want to link and click on the "Associate" button on the table on the right side.
Once performed the association between categories and catalogs, GlobalSuite® allows you to select the risk of each catalog that is related to the category. To do this, you must select a catalog on the table on the left, appearing all risks in the catalog at the bottom of the page. At this point, you can select the risks, click on the "Associate" button above the table of risks, and the risks will be associated to each category.
Additionally, the table on the left has a set of options that allows you to manage risk categories. Each option allows the following:
Add: It allows you to insert a new risk category
Remove: It allows you to remove a risk category. For this task, you have to select the row or rows you want to remove and click on the button ‘Remove’
Note: The changes made (e.g. : adding , modifying or removing risk categories) are also reflected in the table of risks categories located in the "Analysis Methodologies- General Configuration" option.
Show: You can filter the risk categories along with catalogs and associated risks.
Disassociate It allows you to disassociate a catalog and/or risk from a risk category. For this task you have to select the specific Checkbox and click on the button ‘Disassociate’.
Back: It enables to return to the initial table with the list of catalogs.
Expand: It expands the list of risk categories, catalogs and risks
Collapse: It collapses the list of risk categories, catalogs and risks, leaving visible only the categories.
Download: It allows you to obtain a report in Excel format or PDF with the information that is displayed on the table.