Custom Risk Scenario

Introduction

The Bring Your Own Risk (BYOR) feature in SAFE allows users to create and manage custom risk scenarios, providing a more specific view of the security posture of their organization and the ability to improve it.

A button titled "Create Risk Scenario" is availabe on the Risk Scenario page, which allows users to configure custom scenarios based on Threat Actor, Attacker Behavior, and Attack Surface.

Create a Custom Risk Scenario

To create a custom risk scenario:

1. Go to the Risk Scenario page.
2. Click the Create Risk Scenario button.
3. Select Threat Actors that may trigger this Risk Scenario by clicking the threat actor bubbles.
   For now, you can only select the All option (Other options are not available now to select).
   
4. Click the Next button available at the bottom of the page.
5. Select a pre-defined Attacker Behaviors quick filter. You can also select one or more Attacker Behaviors (techniques) that the adversary may use by marking the checkboxes available against the techniques. 
   SAFE offers you quick filters that simplify the process of creating custom risks by pre-defining attack behavior. Selecting these filters automatically select the corresponding attack behaviors when applied. 
6. Click the Next button available at the bottom of the page.
   
7. Select the Attack Surface which may be targeted by the previously selected adversary.
   1. If the Risk Scenario is applicable to the overall organization, select the Overall option from the Attack Surface drop-down.
   2. If the Risk Scenario is applicable to the specific group, select the Groups in the Attack Surface drop-down and then select the asset groups by marking the checkboxes available against them.
8. Click the Next button available at the bottom of the page.
   
9. Enter a unique name for the risk scenario.
10. Click the Create button available at the bottom of the screen. The system creates the Risk Scenario, and it will be available in the Risk Scenario table.
    

Delete a Risk Scenario

1. Go to the Risk Scenario page in SAFE. Here system displays all the custom risk scenarios in the Custom Risks tab.
2. Click the Custom Risks tab.
3. Click the Delete icon available in the Manage column of the risk scenario table.
   If the Manage column is unavailable, click the Customize table icon and add the Manage column.
   
4. On the confirmation screen, click the Ok button to delete.