Workshop 1 — Scoping and security baseline
The foundation of the entire assessment
EBIOS RM menu → Workshop 1Define the assessment scope—context, participants and deadlines—the supporting assets of value such as data, applications and hardware, and their associated feared events. A dedicated tab compares the existing security baseline with expected measures.
📷
Screenshot to be added
img/ebios-atelier1-01.png
What you will do
- Complete the Context tab with the assessment title, organisation, owner, functional and geographical scope, and deadlines.
- List supporting assets in the dedicated tab. A pre-populated library is available as a starting point.
- Associate one or more feared events and their severity level with each supporting asset.
- Record gaps against the security baseline when an existing control framework is available.
Pitfall to avoid. Everything created in Workshops 2 to 5 is linked to the supporting assets and feared events defined here. A scenario without these links is orphaned and cannot be used correctly in the final report, so always start with this page.