Weakness and effect analysis - 3SE
Reviewedhttps://www.3se.info/3se-onto/terms/weakness-and-effect-analysis-3se-06a42cbd0c0d70a2
Analysis of the potential weakness of a system element and its effect on the system state it allocates.
It includes the following steps:
(1) For each system element, identify the potential weakness
(2)For each potential weakness, identify the threatening situations and the related attacks
(4) For each threatening situation, determine the modus operandi, the threat type, the threat group and the impacted asset.
(5) For each threatening situation, evaluate the likelihood of its occurrence.
(6) For each threatening situation, evaluate the targeted security risk level based on its asset severity and the likelihood of its occurrence.
(7) For each threatening situation, decide the security risk treatment: avoid, reduce, retain or share.
(8) For each threatening situation, if the security risk must be reduced, then identify the security system functional requirements and/or the security system non-functional requirements and/or the security system constraints and/or the security system architecture constraints.
(9) For each threatening situation, evaluate the security residual risk level after treatment.
(10) For each threatening situation, determine if the security risk treatment leads to a hazardous situation in the same context.
Classification
flowchart TD
N1["Weakness and effect analysis"]:::current
N2["Risk analysis"]
N3["Analysis"]
N1 -->|subclass of| N2
N2 -->|subclass of| N3
classDef current fill:#e8f4f8,stroke:#2980b9,stroke-width:2px
Relations
JSON-LD
{
"@context": "https://www.3se.info/3se-onto/contexts/term.context.jsonld",
"@type": "skos:Concept",
"title": "Weakness and effect analysis - 3SE",
"description": "Analysis of the potential weakness of a system element and its effect on the system state it allocates.\nIt includes the following steps:\n(1) For each system element, identify the potential weakness\n(2)For each potential weakness, identify the threatening situations and the related attacks\n(4) For each threatening situation, determine the modus operandi, the threat type, the threat group and the impacted asset.\n(5) For each threatening situation, evaluate the likelihood of its occurrence.\n(6) For each threatening situation, evaluate the targeted security risk level based on its asset severity and the likelihood of its occurrence.\n(7) For each threatening situation, decide the security risk treatment: avoid, reduce, retain or share.\n(8) For each threatening situation, if the security risk must be reduced, then identify the security system functional requirements and/or the security system non-functional requirements and/or the security system constraints and/or the security system architecture constraints.\n(9) For each threatening situation, evaluate the security residual risk level after treatment.\n(10) For each threatening situation, determine if the security risk treatment leads to a hazardous situation in the same context.\n",
"status": "reviewed",
"subClassOf": [
"https://www.3se.info/3se-onto/terms/risk-analysis-3se-069bda7c99d17d32"
],
"@id": "https://www.3se.info/3se-onto/terms/weakness-and-effect-analysis-3se-06a42cbd0c0d70a2",
"related": [
"https://www.3se.info/3se-onto/terms/analysis-3se-069b5a9129c37ebe",
"https://www.3se.info/3se-onto/terms/asset-3se-069c16c95ac27b16",
"https://www.3se.info/3se-onto/terms/context-3se-069c1b6f066d7c1e",
"https://www.3se.info/3se-onto/terms/hazardous-situation-3se-069c1b6f069e7ff8",
"https://www.3se.info/3se-onto/terms/security-risk-3se-069bdd80b61570ed",
"https://www.3se.info/3se-onto/terms/system-element-3se-069b85f238fb79eb",
"https://www.3se.info/3se-onto/terms/system-state-3se-069c98e0564a72af",
"https://www.3se.info/3se-onto/terms/threatening-situation-3se-069c1784758674a5",
"https://www.3se.info/3se-onto/terms/weakness-3se-069c1a2fb90073ea",
"https://www.3se.info/3se-onto/terms/attack-3se-069bb0a752ae71a6",
"https://www.3se.info/3se-onto/terms/residual-risk-3se-069c1469f45f7770",
"https://www.3se.info/3se-onto/terms/security-system-architecture-constraint-3se-06aad7c08322727b",
"https://www.3se.info/3se-onto/terms/security-system-constraint-3se-069bdc3121337fbd",
"https://www.3se.info/3se-onto/terms/security-system-functional-req-3se-069bdc31213c7b04",
"https://www.3se.info/3se-onto/terms/security-system-non-functional-req-3se-069bdc31214573e2"
],
"entryCreated": "2026-06-29",
"entryModified": "2026-10-16",
"entryCreator": {
"@type": "foaf:Person",
"name": "@rcasteran"
}
}
Raw JSON-LD: index.jsonld
Created 2026-06-29 · Modified 2026-10-16 · by @rcasteran