Custom Risk Scenario

Introduction

The Bring Your Own Risk (BYOR) feature in SAFE allows users to create and manage custom risk scenarios, providing a more specific view of the security posture of their organization and the ability to improve it.

A button titled "Create Risk Scenario" is availabe on the Risk Scenario page, which allows users to configure custom scenarios for a Group based on Business Resources, Threat Actor, Attacker Outcome, and Initial Attack Methods.

Create a Custom Risk Scenario

To create a custom risk scenario:

1. Go to the Risk Scenario page.
2. Click the Create Risk Scenario button.
3. Select a Group from the list for which you want to create a Risk Scenario.
4. Click Next.
5. Select/deselect the Business Resources by clicking the boxes based on your business requirements.
6. Click Next.
7. Select the Attack Outcome and Initial Attack Methods.
   Refer to the Relationship between various Risk Scenario Components to select the appropriate Business Resources, Attack Outcome, and Initial Attack Methods.
8. Click Next.
9. The system automatically populates the name and description based on the selection you made for other fields. If needed, update the Name and Description. 
10. Click the Create Risk Scenario button. The system will redirect you to the created Risk Scenario details page.

3. Delete a Risk Scenario

1. Go to the Risk Scenario page.
2. Click the three-dot option availabe in the Manage column for the Risk Scenario you want to delete. 
3. Click the Delete option.
4. On the confirmation screen, click the Ok button to delete the Risk Scenario.

3. Edit a Risk Scenario

You can only delete the custom risk scenarios in SAFE.

1. Go to the Risk Scenario page.
2. Click the three-dot option availabe in the Manage column for the Risk Scenario you want to edit. 
3. Click the Edit option.
4. Update and Save the details.