\documentclass{article} \usepackage[margin=12mm]{geometry} \usepackage{corasdiagram} \pagestyle{empty} \begin{document} \begin{center} \begin{corasassetdiagram}[x=1cm,y=1cm] \corasstakeholder[name=stakeholder,scope=asset-scope,title={Stakeholder}] \corasasset[name=asset,scope=asset-scope,title={Customer Data}] \corasindirectasset[name=brand,scope=asset-scope,title={Brand Reputation}] \corasasset[name=support,scope=asset-scope,title={Backup Service}] \corasscope[name=scope,scope=asset-scope,kind=asset-scope,stakeholder=stakeholder,stakeholder corner=left] \corasrelates[from=asset,to=brand] \corasrelates[from=support,to=brand] \end{corasassetdiagram} \end{center} \clearpage \begin{center} \begin{corasthreatdiagram}[x=1cm,y=1cm] \corasthreataccidental[name=human,title={Employee mistake}] \corasvulnerability[name=vuln,title={Weak access policy}] \corasscenario[name=sc,title={Misconfigured endpoint},meta={2/year}] \corasunwantedincident[name=inc,title={Data exposure}] \corasasset[name=asset,title={Customer data}] \corascauses[from=human,to=vuln] \corascauses[from=vuln,to=sc] \corascauses[from=sc,to=inc] \corasrelates[from=inc,to=asset] \end{corasthreatdiagram} \end{center} \clearpage \begin{center} \begin{corasriskdiagram}[x=1cm,y=1cm] \corasthreatdeliberate[name=attacker,title={External attacker}] \corasrisk[name=risk,title={Data breach},level={High}] \corasasset[name=asset,title={Customer data}] \corascauses[from=attacker,to=risk] \corasrelates[from=risk,to=asset] \end{corasriskdiagram} \end{center} \clearpage \begin{center} \begin{corastreatmentdiagram}[x=1cm,y=1cm] \corasthreatdeliberate[name=attacker,title={Attacker}] \corasvulnerability[name=vuln,title={Weak MFA policy}] \corasscenario[name=sc,title={Compromised account},meta={1/year}] \corasunwantedincident[name=inc,title={Unauthorized access}] \corasasset[name=asset,title={Payment service}] \corastreatment[name=ctrl,title={Enforce phishing-resistant MFA}] \corascauses[from=attacker,to=vuln] \corascauses[from=vuln,to=sc] \corascauses[from=sc,to=inc] \corasrelates[from=inc,to=asset] \corastreats[from=ctrl,to=sc] \end{corastreatmentdiagram} \end{center} \clearpage \begin{center} \begin{corastreatmentoverviewdiagram}[x=1cm,y=1cm] \corasrisk[name=r1,title={Credential theft},level={High}] \corasrisk[name=r2,title={Session hijack},level={Medium}] \corasasset[name=a1,title={User accounts}] \corastreatment[name=t1,title={Hardware keys}] \corastreatment[name=t2,title={Session binding}] \corasjunction[name=j1] \corasrelates[from=r1,to=a1] \corasrelates[from=r2,to=a1] \corastreats[from=t1,to=j1] \corastreats[from=t2,to=j1] \corastreats[from=j1,to=r1] \corastreats[from=j1,to=r2] \end{corastreatmentoverviewdiagram} \end{center} \clearpage \begin{corashighlevelanalysistable}[caption={High-level analysis excerpt},icon scale=0.5] \corashighlevelanalysisrow {Hacker} {Compromises confidentiality of customer records} {Weak access controls on remote interfaces} \corashighlevelanalysisrow {System failure} {Store unavailable due to backend outage} {Single points of failure and poor failover routines} \end{corashighlevelanalysistable} \end{document}