ZCR2 — Initial risk assessment
ZCR 2 rates the worst-case, unmitigated risk at the overall SUC level, before any segmentation into zones — with no credit given to existing measures (ZCR 2.1). Each row links an asset to a feared event and a risk rating.
ZCR 2 comes before zoning
This is not a reversal: it is the ZCR 2 rows of a zone's assets that feed the SL-T suggestion in ZCR 3.
Toolbar
| Button / Control | Function |
|---|---|
| ✦ Suggest scenarios | AI generation of initial risk scenarios |
| Import from RI | Reuses PHA, PHA — Hazard study, HAZOP and FMEA scenarios from the Industrial Risks module |
| Grid | Shows/hides cell borders |
| ＋ Analysis row | Adds a row to the table |
| Search | Filters on asset, function, event, type, consequences |
Chips show the number of rows rated High and Critical. A column selector lets you hide optional columns.
Table columns
| Column | Description |
|---|---|
| Asset | Equipment or network, selected from the ZCR1 inventory |
| Related business asset | Associated function (business value) |
| Feared event | Feared event — free text, editable inline |
| Type | Loss of Integrity / Availability / Confidentiality / Accountability |
| Consequences | Consequences if the event occurs |
| Severity (V / G) | Likelihood and Severity — the risk level is calculated automatically |
Likelihood columns depending on mode
In Vc only mode, a single likelihood column is entered. In Vp × Vc mode, two separate columns appear:
- Vp — process robustness, the only column that can be filled automatically (by the cyber-LOPA);
- Vc — exposure to the adversary, always entered by hand. In ZCR 2, it is fixed at the worst case: zones do not exist yet, and the standard addresses exposure through partitioning (§4.4.5/§4.4.6). Vc will be refined in ZCR 5 on actual attack paths.
The mode is set in Risk metrics and applies to ZCR 2 and ZCR 5 together.
Importing from Industrial Risks
The Import from RI button reuses PHA, PHA — Hazard study, HAZOP and FMEA scenarios. The wizard proposes a mapping between the rating scales of the two modules, editable before confirmation and re-checked on every import.
Imported rows are marked "to be revalidated"
RI ratings often factor in existing barriers. ZCR 2 requires the unmitigated worst case: these rows need to be re-rated in a cyber context.
Cyber-LOPA tab ("SIS analysis" profile)
Reuses the LOPA study from the Industrial Risks module from a cyber angle (ISA TR84.00.09): flag the attackable initiating events and the barriers (IPL) that are cyber-vulnerable, the residual probability without countermeasures is recalculated, then carried into the Vp column.
The original LOPA study is never modified.
Two conditions
The tab only appears with the "SIS analysis" profile enabled, and carrying the result into Vp assumes the decomposed rating mode. To import a LOPA without doing an SIS study, enable the profile anyway: it takes nothing away from the standard study.
The SIS profile also adds the Initial SL-T column (rule "Initial SL-T = severity"), Propagation and Response if compromised.
Risk level calculation
The risk level (coloured badge) results from crossing V × G in the matrix configured in Risk metrics. This calculation is identical to the one used in the other ZCR tabs (ZCR4, ZCR5) — changing the scales in Metrics therefore affects the whole module.
AI suggestion
The Suggest scenarios button asks the AI engine to propose 4 to 7 initial risk scenarios (feared event, type, consequences, likelihood and severity 1-4) that can be imported directly into the table.
Starting point for ZCR4
Every ZCR2 row is carried into ZCR4 — Risk Comparison to be compared against the tolerable risk threshold, and into ZCR6 — CRS Document (section 6.8 Tolerable Risk).