What is COMPASS?
COMPASS is a Vector solution for planning, executing and evaluating Threat Assessments (TARA) and Vulnerability Management. COMPASS satisfies all requirements that are relevant to an efficient and exhaustive TARA tool.
In performing TARA, large amounts of continuously accumulating data are recorded. In COMPASS, this data is managed in a well-structured and straightforward way. The extensive evaluation and reporting options of COMPASS support the evaluation and analysis phase. Additionally, with version management and artifact reuse, the more COMPASS is used, the more the database becomes tailored to a product.
Supported Standards and Models
- TARA according to ISO/SAE 21434
- Vulnerability Management according to ISO/SAE 21434
- STRIDE Threat Definition
- User-specific models can be added upon request
COMPASS Offers Unique Values
- Asset, Damage Scenario, Attack Path, Threat and Goal/Claim Identification
- Event, Weakness and Vulnerability Analysis and Management
- Import and export reports
- Customization of views
- Alignment with ISO/SAE 21434 standards
- Single source of truth for the product lifecycle
- Reusability
Special Functions
Functionality
COMPASS as a Tool for TARA
TARA includes the analysis of:
- Assets
- Threats
- Attacks
- Goals
- Requirements
Analyzing the Data
- Decide which artifacts are relevant and keep track of completion status
- Filter data based on any parameter
- Search for specific text
- Reorder and change visible columns
- Import from and export to Excel
Conducting TARA
- Templates for attack path, damage scenario and threat definition
- Automatic creation of TARA ratings based on created assets and damage scenarios
- Automatic calculation of risk levels for safety, financial, operational and privacy impacts
- Automatic calculation of attack feasibility
- Reuse of assets, attack paths and other artifacts from any assessment in the database
- Export of assessment results with cybersecurity goals and claims for requirement engineering tools
Performing Vulnerability Management
- Reuse threats and attack paths from the TARA database
- Input and sort relevant cybersecurity events and identify corresponding weaknesses
- Analyze weaknesses and identify vulnerabilities
- Create and monitor a treatment plan
- Unify all relevant product information in one source
Vector Consulting Services
Team
Your Partner for Engineering Excellence
Let us build the ideal setup for your engineering challenges together. Reach out to our team to explore how our powerful coaching can seamlessly integrate into your existing workflows.