Security Advanced: Threat Analysis and Risk Assessment (TARA)

Manufacturers and integrators of embedded systems face regulations such as the Cyber Resilience Act, the Medical Device Regulation and the Machinery Directive. These require products to be developed securely. For products to be "secure by design", a layered security concept is needed. This is created on the basis of a Threat Analysis and Risk Assessment. The foundation course "Threat Analysis and Risk Assessment" provides the necessary theory and practice. Participants are trained in the required methods, which are applied directly to a minimal case study. The aim is to enable participants to understand threat models and carry them out independently.

Content:

• Project phases of threat modelling
• Describing the system, its use and its environment
• Threat analysis
• Risk assessment

Note:

This course covers content that can be used to meet the requirements of the following standards:

• IEC 62443 (industrial)
• ISO 21434 (automotive)
• IEC 81001 (medical)
• TS 50701 (railway)
• IEC 63452 (railway)

Target audience:

Project leaders, security managers, requirements engineers, aspiring threat modellers, architects, developers, testers

Benefit:

• Understanding the purpose and goal of threat modelling
• Learning threat modelling methods
• Knowing the basic approach to threat modelling
• Working through a threat model together using a concrete example

Required prior knowledge:

• A basic understanding of cyber security
• Sound technical knowledge