Chapter 4.4 · Scenario-based assessment¶
This is the spine of the Module. Two Lessons build the two layers of attack scenario that EBIOS RM is built around. Strategic scenarios (Workshop 3) map how a risk source reaches a business value through the ecosystem, rated by severity. Operational scenarios (Workshop 4) detail how, technically, an attacker would execute the path against supporting assets, rated by likelihood, with Scaldimet's OT in focus.
Objectives¶
- Build strategic scenarios: attack paths from risk source through the ecosystem to a business value.
- Build operational scenarios: technical attack paths against supporting assets, with an OT focus.
- Rate strategic scenarios by severity and operational scenarios by likelihood, and know why they differ.
Lessons¶
| Lesson | Title | Time |
|---|---|---|
| 4.4.A | Strategic scenarios (Workshop 3) | ~45 min |
| 4.4.B | Operational scenarios and attack paths (Workshop 4) | ~45 min |
The Chapter quiz is at the end of Lesson 4.4.B.