Associating assets with security objective
Risk is asset-centric therefore, you must associate assets with the security objective before you publish the security objective.
Asset details are not predefined in a security objective template.
- To associate assets with a security objective
- Click theAssetstab on theRisk Modelingpage.
- ClickAddto add assets.TheAdd Assetspage is displayed.
- In the left pane, expand theAsset Systemtree view and select the asset systems that you want to associate with the security objective.
- ClickAdd Assetsto add the selected assets.Under theAssetstab, the selected asset systems are displayed in the left pane and the available assets are displayed in the right pane.You can select asset systems from the left pane under theAssetstab and clickRemoveto exclude the assets from the security objective.
- ClickSaveto save the security objective or clickPublishto publish the security objective.Make sure that the mandatory details under theOverviewand theAssetstabs are filled up before you publish the security objective.
You may also want to associate controls and configure controls with your security objective.