Tutorials/EBIOS RM/Workshop 2—Risk sources
EBIOS RM

Workshop 2—Risk sources

Who might attack you, and why

EBIOS RM menu → Workshop 2

Create Risk Source/Targeted Objective (RS/TO) pairs: a potential attacker—state, competitor, activist or cybercriminal—associated with the objective they seek to achieve against your organisation.

Screenshot: ebios-atelier2-01.png 📷 Screenshot to be added img/ebios-atelier2-01.png

What you will do

  1. Add a risk source, including profile, motivation and estimated resources.
  2. Associate one or more targeted objectives with it, linked to feared events from Workshop 1.
  3. Prioritise the most relevant RS/TO pairs; not every pair requires the same depth of analysis.

Pitfall to avoid. An RS/TO pair is meaningful only when linked to an existing feared event. Check Workshop 1 before creating many pairs.

← Workshop 1 — Scoping and security baselineWorkshop 3 — Strategic scenarios →
FR