4 — Strategic scenarios
This step configures the stakeholders (SH) — potential attackers — then automatically generates the corresponding strategic scenarios (SH → target zone pair).
Stakeholders (SH)
Table of potential risk sources:
| Column | Description |
|---|---|
| Selected | Checkbox — is the SH taken into account in the generation |
| SH type | Selection of a predefined type from a catalogue (code + label) — pre-fills the label, level, type and vulnerabilities typically associated |
| Label | Name of the SH, editable |
| Lvl. | Threat level (1 to 3) |
| Category | External, Internal, Error |
| Access zones | Checkboxes — zones this SH has access to |
| ✕ | Deletes the SH |
The + Add a stakeholder button creates a new row with default values (opportunistic external attacker, level 1).
Scenario generation
The ✨ Generate strategic scenarios button is active as soon as at least one SH is selected. It combines the selected SHs with the access zones and checked vulnerabilities to produce the scenarios.
If no scenario is generated
Generation requires checked vulnerabilities on the access zones or on the SHs to identify an applicable intrusion rule (phase A). Two solutions:
- Go to Topology, open each access zone and check vulnerabilities (V1, V2, V9…).
- Select a predefined SH type in the table, which automatically associates typical vulnerabilities with the SH.
Generated scenarios table
| Column | Description |
|---|---|
| Sel. | Whether the scenario is selected for the next steps |
| SH | Stakeholder involved |
| Entry zone | Zone through which the SH gets in |
| Target zone | Zone targeted by the attack |
| Impacted functions | Business functions affected by the scenario |
| Rule A | Intrusion rule (phase A) that produced this scenario |
| S | Severity (1 to 4), editable |
| L | Likelihood (1 to 4), editable |
| Risk | Risk level R1 to R4 calculated from S × L (ABE matrix) |
| Notes | Free-text notes |
Generating operational scenarios
Once strategic scenarios are present, the ⚔️ Generate all operational scenarios → banner triggers the generation of detailed attack chains for all selected scenarios and automatically switches to step 5 — Operational scen.