Asset

Asset is an object that has value or contributes to value. It has has one or more cybersecurity properties whose compromise can lead to one or
more damage scenarios.

Confidentiality

A property that contains sensitive information that should not be disclosed to unauthorized entities.

Integrity

Guarding against improper information modification or destruction. It includes ensuring information non-repudiation and authenticity. Quality of being complete and unaltered.

Availability

Property of being accessible and usable on demand by an authorized entity.

Creating an Asset

 An Asset must be created in the context of an Item.

To create an asset do one of the following:

  • To create an Asset using an Item
  1. In the Containment tree, right-click an Item and select Create Element.




  2. In the dialog, expand ISO 21434 and select Asset.



  3. Name the created Asset in the Containment tree and press Enter. The Asset has the prefix AS, which denotes that the created element is an Asset; the number 1 indicates that it is the first Asset created.



  • To create an Asset using the Item Table
  1. In the Item Table, double-click to select a Member(s) or Boundary Member(s).
  2. Right-click and select Security>Add an Asset to the Item.



  3. Name the created Asset in the Containment tree and press Enter. The Asset has the prefix AS, which denotes that the created element is an Asset; the number 5 indicates that it is the fifth Asset created.


    • If you select an already added Member(s) or Boundary Member(s) to add as an underlying element, the Add as an Asset to the Item command will be unavailable.



    • The following notification message appears at the bottom right corner of the modeling tool once the asset is created. The message also provides a hyperlink to the item under which the asset is created.

    After creating an asset, it is beneficial to find its location in the model tree by performing one of the following:

    • Right-click the asset, and, from the shortcut menu, choose the Select in Containment Tree command.
    • Select the asset and press Alt+B.

Creating an Asset from a System Diagram

To create an asset from a system diagram

  1. In the system diagram, right-click an element(s) and select Security>Add as an Asset.


    Once you add a system diagram element as an asset, a legend appears at the top right corner of the element.

  2. From the Select Elements dialog, select the item you want to add an asset under and click OK.


  3. Name the created Asset in the Containment tree and press Enter. The Asset has the suffix AS, which denotes that the created element is an Asset; the number 6 indicates that it is the sixth Asset created.

    • If you select an already added system diagram element(s) to add as an asset, the Select Elements dialog will exclude the item to which the selected element was linked earlier.
    • The following notification message appears at the bottom right corner of the modeling tool once the asset is created. The message also provides a hyperlink to the item under which the asset is created.

     

Creating an Asset Table

An Asset Table is automatically created while creating an Item. An Asset Table should always be linked to an Item to be compliant with the standard. You can also manually create an Asset Table.



If you create a new project using the ISO 21434 Project template, then an Asset Table already exists in the 2.1 Items & Assets Definition package.


To create an Asset Table

  1. In the Containment tree, right-click Items & Assets Definition and select Create Diagram.

    An Asset Table can be created under both Package and Item.



  2. Do one of the following:
    • In the dialog, expand ISO 21434 and select Asset Table.



    • In the search tab, type the keyword asset and then select Asset Table.



       The Asset Table is displayed in the diagram pane of the modeling tool.

Adding an Asset to the Asset Table

To add a new Asset to the Asset Table

  1. In the Asset Table, click Add New. A row is added in the Asset table, which shows the new Asset.



  2. In the newly created Asset's row and in the Name column, double-click the designated cell to name the Asset.

Adding an Underlying Element

To add an underlying element for the asset do one of the following:

  • To add an Underlying Element from the Asset Table

  • From the Containment tree, drag the Underlying Element and drop it in the designated cell of the Underlying Element column and the required Asset's row.



    • You can also drag and drop SysML Elements (such as Connector, port, etc.) from the Containment tree to the Asset Table.
    • To add multiple Underlying Elements in the Asset Table, hold the Ctrl key on the keyboard to select multiple Underlying Elements from the Containment tree. Drag and drop the selected Underlying Elements into the required cell.
  • To add an Underlying Element from the Item Table
    1. In the Item Table, double-click to select a Member(s) or Boundary Member(s).
    2. Right-click and select Security>Add to an existing asset.



    3. From the Select Elements dialog, select the Asset you want to add the underlying element to and click OK.

Adding an Underlying Element from a System Diagram

To add an Underlying Element for the asset in a system diagram

  1. In the system diagram, right-click an element(s) and select Security>Add to an existing Asset.



  2. From the Select Elements dialog, select the Asset you want to add the element to and click OK.

Assigning CIA properties

To assign CIA properties in the Asset Table

  •   Double-click each cell, namely Confidentiality, Integrity, and Availability in the Asset row. From the drop-down list, select the CIA properties.



Asset Table Example



References