Security risk analysis - 3SE

Reviewed

https://www.3se.info/3se-onto/terms/security-risk-analysis-3se-069c1ab34bae7b50

Risk analysis which is relevant for security engineering.
It includes the following steps:
(1) Identify the assets.
(2) For each asset, evaluate its severity level.
(3) Identify the threatening situations and the related attacks.
(4) For each threatening situation, determine the modus operandi, the threat type, the threat group, the impacted asset and the related system activities.
(5) For each threatening situation, evaluate the likelihood of its occurrence.
(6) For each threatening situation, evaluate the targeted security risk level based on its asset severity and the likelihood of its occurrence.
(7) For each threatening situation, decide the security risk treatment: avoid, reduce, retain or share.
(8) For each threatening situation, if the security risk must be reduced, then identify the security system functional requirements and/or the security system non-functional requirements and/or the security system constraints.
(9) For each threatening situation, evaluate the security residual risk level after treatment.
(10) For each threatening situation, determine if the security risk treatment leads to a hazardous situation in the same context.

Classification

flowchart TD N1["Security risk analysis"]:::current N2["Risk analysis"] N3["Analysis"] N1 -->|subclass of| N2 N2 -->|subclass of| N3 classDef current fill:#e8f4f8,stroke:#2980b9,stroke-width:2px

Relations

Relatedasset-3se-069c16c95ac27b16  ·  security-risk-3se-069bdd80b61570ed  ·  threatening-situation-3se-069c1784758674a5  ·  context-3se-069c1b6f066d7c1e  ·  hazardous-situation-3se-069c1b6f069e7ff8  ·  system-activity-3se-069b48ef5cd47253  ·  residual-risk-3se-069c1469f45f7770  ·  attack-3se-069bb0a752ae71a6  ·  security-system-constraint-3se-069bdc3121337fbd  ·  security-system-functional-req-3se-069bdc31213c7b04  ·  security-system-non-functional-req-3se-069bdc31214573e2
Subclass ofrisk-analysis-3se-069bda7c99d17d32
Close matchthreat-analysis-and-risk-assessment-21434-2021-069c1ab34bb77d01

JSON-LD

{
  "@context": "https://www.3se.info/3se-onto/contexts/term.context.jsonld",
  "@type": "skos:Concept",
  "title": "Security risk analysis - 3SE",
  "description": "Risk analysis which is relevant for security engineering.\nIt includes the following steps:\n(1) Identify the assets.\n(2) For each asset, evaluate its severity level.\n(3) Identify the threatening situations and the related attacks.\n(4) For each threatening situation, determine the modus operandi, the threat type, the threat group, the impacted asset and the related system activities.\n(5) For each threatening situation, evaluate the likelihood of its occurrence.\n(6) For each threatening situation, evaluate the targeted security risk level based on its asset severity and the likelihood of its occurrence.\n(7) For each threatening situation, decide the security risk treatment: avoid, reduce, retain or share.\n(8) For each threatening situation, if the security risk must be reduced, then identify the security system functional requirements and/or the security system non-functional requirements and/or the security system constraints.\n(9) For each threatening situation, evaluate the security residual risk level after treatment.\n(10) For each threatening situation, determine if the security risk treatment leads to a hazardous situation in the same context.\n",
  "status": "reviewed",
  "subClassOf": [
    "https://www.3se.info/3se-onto/terms/risk-analysis-3se-069bda7c99d17d32"
  ],
  "closeMatch": [
    "https://www.3se.info/3se-onto/terms/threat-analysis-and-risk-assessment-21434-2021-069c1ab34bb77d01"
  ],
  "@id": "https://www.3se.info/3se-onto/terms/security-risk-analysis-3se-069c1ab34bae7b50",
  "related": [
    "https://www.3se.info/3se-onto/terms/asset-3se-069c16c95ac27b16",
    "https://www.3se.info/3se-onto/terms/security-risk-3se-069bdd80b61570ed",
    "https://www.3se.info/3se-onto/terms/threatening-situation-3se-069c1784758674a5",
    "https://www.3se.info/3se-onto/terms/context-3se-069c1b6f066d7c1e",
    "https://www.3se.info/3se-onto/terms/hazardous-situation-3se-069c1b6f069e7ff8",
    "https://www.3se.info/3se-onto/terms/system-activity-3se-069b48ef5cd47253",
    "https://www.3se.info/3se-onto/terms/residual-risk-3se-069c1469f45f7770",
    "https://www.3se.info/3se-onto/terms/attack-3se-069bb0a752ae71a6",
    "https://www.3se.info/3se-onto/terms/security-system-constraint-3se-069bdc3121337fbd",
    "https://www.3se.info/3se-onto/terms/security-system-functional-req-3se-069bdc31213c7b04",
    "https://www.3se.info/3se-onto/terms/security-system-non-functional-req-3se-069bdc31214573e2"
  ],
  "entryCreated": "2026-03-23",
  "entryModified": "2026-10-16",
  "entryCreator": {
    "@type": "foaf:Person",
    "name": "@rcasteran"
  }
}

Raw JSON-LD: index.jsonld

Created 2026-03-23  ·  Modified 2026-10-16  ·  by @rcasteran