search

ThalesGroup / security-risk-assessment-tool

The ISRA security-risk-assessment-tool project is an Electron based application used to do security risk assessments at a technical level
BSD 4-Clause "Original" or "Old" License
24 stars 8 forks source link

[Issue]: When business asset security property value ranking is changed, the change is not reflected in the risks. #257

Closed CarlatThales closed 4 months ago

CarlatThales commented 4 months ago

Issue Description

It seems that when changing the ranking of one of the security properties. of the businnes assets with an existing valid risk, the risk scoring is not updated accordingly. Only when the business asset is reselected in the risk is there an update of the risk score.

Duplicate Steps

  1. Create a full risk with valid vulnerabilities, attack path, business asset with the main security property set to low, and verify the risk score.
  2. Then set the main security property in the business asset tab from low to high
  3. Go into the risks tab, the risk score is not updated.

To resolve the issue:

  1. Remove the business asset selection from the risk score and reselect it as well as the business asset
  2. The score is updated.

Expected Results

When the business asset ranking of its security properties is modified, it should update the risk score accordingly automatically.

Version Detected

1.1.0 (Default)

Attachments

No response