Security Advanced: Threat Analysis and Risk Assessment (TARA)

Manufacturers and integrators of embedded systems are subject to regulations such as the Cyber Resilience Act, the Medical Device Regulation, and the Machinery Directive. These regulations require that products be developed securely. To ensure they are “secure by design,” a phased security concept is required. This concept is developed based on a “Threat Analysis and Risk Assessment” (TARA). This training course provides the necessary theoretical and practical knowledge for this purpose. 

This training course covers content that can be used to meet the requirements of the following standards:

• IEC 62443 (Industrial)
• ISO 21434 (Automotive)
• IEC 81001 (Medical)
• TS 50701 (Railway)
• IEC 63452 (Railway)

Objectives and Benefits

You will be trained in the necessary methods, which will be directly applied to a simple case study. You will be able to understand threat modeling and perform it independently.

Agenda

• Understanding the Purpose and Objectives of Threat Modeling
• Learning Threat Modeling Methods
• Understanding the Basic Process of Threat Modeling
• Project Phases of Threat Modeling
• Description of the System, Usage, and Environment
• Threat Analysis
• Risk Assessment
• Collaborative development of a threat model using a concrete example

Target Audience

Project managers, security managers, requirements engineers, aspiring threat modelers, architects, developers, testers

Prerequisites

• Basic understanding of cybersecurity
• Solid technical knowledge