Technical Security Standards Ontology
type: Ontology
version IRI: https://w3id.org/tsso/0.1
description: This ontology serves as the basis to represent technical standards in a machine readable way. It provides elements to define publications, their provisions, their dependencies and possible constraints, among other constructs. This ontology is based on three technical standards, namely the IEC 62443 4-2, ETSI 303645 and the more general NIST Framework for Improving Critical Infrastructure Cybersecurity. Therefore, besides providing the schematic elements, it also considers system related concepts to describe system solutions, their components, etc. Making it possible to define not only project or system specific information but also project independent information. This makes it more robust for engineering design tasks.
created: January 2023
creator: Gandalf Denk
creator: Georg Buchgeher
creator: Jose Illescas
creator: Lisa Ehrlinger
creator: Peter Panholzer
creator: Thomas Brandstetter
license: https://creativecommons.org/licenses/by/4.0/
doi: 10.5281/zenodo.7844994
preferred namespace prefix: tsso
version info: 0.1

abbr
type: AnnotationProperty

achieves
type: ObjectProperty
inverse of: promoted By
domain: Outcome
range: Driver
provenance: NIST Framework

addressed By
type: ObjectProperty
inverse of: addresses

addresses
type: ObjectProperty
domain: Class
  union of: Capability
  union of: Counter Measure
  union of: Provision
range: Threat

addresses Concern
type: ObjectProperty
range: Concern
provenance: NIST Framework

affects
type: ObjectProperty
inverse of: is Affected By
domain: Problem

applicable To
type: ObjectProperty
inverse of: applies
domain: Component Requirement
range: Component

applies
type: ObjectProperty
domain: Component
range: Component Requirement

associated To Sub Category
type: ObjectProperty
inverse of: considers Provision
domain: Provision
range: NIST Sub Category
provenance: NISTSubCategory

belongs To
type: ObjectProperty
inverse of: owner Of
domain: Technical Committee
range: Organization

channel Used By
type: ObjectProperty
inverse of: uses Channel

composed Of
type: ObjectProperty
inverse of: composes
domain: Component
range: Component

composes
type: ObjectProperty

configuration Of
type: ObjectProperty
inverse of: has Configuration
provenance: ETSI 303645

connects
type: ObjectProperty
domain: Connection
range: Component

connects Destination
type: ObjectProperty
inverse of: is Destination Of
domain: Connection
comment: ETSI 303645

connects Source
type: ObjectProperty
inverse of: is Source Of
domain: Connection
comment: ETSI 303645

considers Asset
type: ObjectProperty
domain: Risk Assesement
range: Asset

considers Provision
type: ObjectProperty
domain: NIST Sub Category
range: Provision
provenance: NIST Framework

considers Risk
type: ObjectProperty
range: Risk

considers Threat
type: ObjectProperty
domain: Risk
range: Threat
provenance: NIST Framework

considers Vulnerability
type: ObjectProperty
domain: Risk
range: Vulnerability
provenance: NIST Framework
comment: Risk management

consist Of Framework Element
type: ObjectProperty
type: InverseFunctionalProperty
domain: Framework
range: Framework Element
provenance: NIST Framework

contained By
type: ObjectProperty
inverse of: contains

contains
type: ObjectProperty
domain: Publication
range: Provision

demands Capability
type: ObjectProperty
domain: Provision
range: Capability

depends On
type: ObjectProperty
domain: Requirement Dependency Constraint
range: Provision
description: Association between a constraint to a specific provision. Implying that the item holding the constraint depends on the referenced provision, making this provision a requirement.

describes Solution
type: ObjectProperty
inverse of: solution Of Architecture
domain: Architecture
range: Solution Structure
provenance: ETSI 303645

developed By
type: ObjectProperty
inverse of: develops

develops
type: ObjectProperty
domain: Technical Committee
range: Publication
description: Relates a publication to its developer.
comment: Maybe replaced by annotation property.

enhancement Of
type: ObjectProperty
inverse of: has Enhancement
domain: Provision
range: Provision

exposed By
type: ObjectProperty
inverse of: exposes
domain: Vulnerability
range: Threat

exposes
type: ObjectProperty
domain: Threat
range: Vulnerability

handled By
type: ObjectProperty
inverse of: handles
domain: Vulnerability
range: Counter Measure

handles
type: ObjectProperty
domain: Counter Measure
range: Vulnerability

has Architecture
type: ObjectProperty
range: Architecture
provenance: ETSI 303645

has Capability
type: ObjectProperty
domain: Class
  union of: Component
  union of: System
range: Capability

has Category
type: ObjectProperty
type: InverseFunctionalProperty
domain: NIST Function
range: NIST Category
provenance: NIST Framework

has Configuration
type: ObjectProperty
range: Configuration
provenance: ETSI 303645

has Constraint
type: ObjectProperty
range: Constraint

has Delegated Capability
type: ObjectProperty
sub property of: has Capability
inverse of: is Delegated Capability Of
range: Capability
comment: Capability that is not native to the item, but can be used by it. Certain components may not be able to provide a capability but can work within a system or component which provides it.

has Device Physical Limitation
type: ObjectProperty
inverse of: is Device Physical Limitation Of
domain: Device
range: Device Physical Limitation

has Domain
type: ObjectProperty
inverse of: is Domain Of
range: Domain

has Enhancement
type: ObjectProperty

has FW
type: ObjectProperty
domain: Device
range: Firmware

has Function
type: ObjectProperty
range: Function

has HMI
type: ObjectProperty
domain: Device
range: Class
  union of: HUI
  union of: Input Device

has Interface
type: ObjectProperty
domain: Component
range: Interface

has Lighter Version
type: ObjectProperty
inverse of: has More Secure Version

has Main Category
type: ObjectProperty
inverse of: has Sub Category
provenance: NIST Framework

has More General Domain
type: ObjectProperty
sub property of: has More General Version
inverse of: has Sub Domain
domain: Domain
range: Domain
provenance: NIST Framework

has More General Problem
type: ObjectProperty
sub property of: has More General Version
inverse of: has Sub Problem
domain: Threat
range: Threat

has More General Version
type: ObjectProperty
inverse of: has Sub Version

has More Secure Version
type: ObjectProperty

has OS
type: ObjectProperty
domain: Device
range: Operating System

has Policy
type: ObjectProperty
range: Policy

has Predecessor
type: ObjectProperty
inverse of: has Successor

has Profile
type: ObjectProperty
range: Profile
provenance: NIST Framework

has Property
type: ObjectProperty
range: Generic Property

has Requirement
type: ObjectProperty
domain: System
range: System Requirement

has Scope
type: ObjectProperty
provenance: ETSI 303645

has Solution Structure
type: ObjectProperty
domain: System
range: Solution Structure

has Status
type: ObjectProperty
domain: Publication
range: Status

has Sub Category
type: ObjectProperty
type: InverseFunctionalProperty
domain: NIST Category
range: NIST Sub Category
provenance: NIST Framework

has Sub Domain
type: ObjectProperty
sub property of: has Sub Version
domain: Domain
range: Domain

has Sub Problem
type: ObjectProperty
sub property of: has Sub Version
domain: Threat
range: Threat

has Sub Version
type: ObjectProperty

has Successor
type: ObjectProperty

has Supplemental Guidance
type: ObjectProperty
inverse of: is Supplemental Guidance Of
domain: Provision
range: Supplemental Guidance

has Tier
type: ObjectProperty
range: Tier
provenance: NIST Framework

has Tolerance
type: ObjectProperty
domain: Risk Assesement
range: Tolerance

has Type
type: ObjectProperty
range: Type

improves QA
type: ObjectProperty
range: Non Functional Requirement

interested In
type: ObjectProperty
domain: Stakeholder
range: Concern

is Affected By
type: ObjectProperty

is Asset Of
type: ObjectProperty
inverse of: owns Asset
provenance: NIST Framework

is Delegated Capability Of
type: ObjectProperty

is Destination Of
type: ObjectProperty
comment: ETSI 303645

is Device Physical Limitation Of
type: ObjectProperty

is Domain Of
type: ObjectProperty

is Source Of
type: ObjectProperty
comment: ETSI 303645

is Supplemental Guidance Of
type: ObjectProperty

manufactures
type: ObjectProperty
provenance: ETSI 303645

owner Of
type: ObjectProperty

owns Asset
type: ObjectProperty
domain: Stakeholder
range: Asset
provenance: NIST Framework

part Of Component Solution
type: ObjectProperty
sub property of: part Of Solution
domain: Component
range: Component Solution

part Of Deployment Solution
type: ObjectProperty
sub property of: part Of Solution
domain: Deployment Node
range: Deployment Solution

part Of Solution
type: ObjectProperty
inverse of: solution Of
range: Solution Structure

promoted By
type: ObjectProperty

protocol Supported By
type: ObjectProperty
inverse of: supports Protocol
provenance: ETSI 303645

protocol Used By
type: ObjectProperty
inverse of: uses Protocol

provides Function
type: ObjectProperty
domain: Component
range: Function

provides Functionality
type: ObjectProperty
domain: Component
range: Port
provenance: ETSI 303645

provides Service
type: ObjectProperty
inverse of: service Provided By
domain: Component
range: Service

published
type: ObjectProperty
inverse of: published By
domain: Organization
range: Publication

published By
type: ObjectProperty

references Architecture
type: ObjectProperty
domain: Reference Architecture
range: Architecture
provenance: ETSI 303645

refers To
type: ObjectProperty
domain: Publication Constraint
range: Publication

related To
type: ObjectProperty

related To Problem
type: ObjectProperty
sub property of: related To
domain: Problem
range: Problem
description: Used to define possible chain of problems.
comment: ETSI 303645

requires Functionality
type: ObjectProperty
domain: Component
range: Port
provenance: ETSI 303645

requires Service
type: ObjectProperty
inverse of: service Required By
range: Service

runs On
type: ObjectProperty
domain: SW Application
range: Device

service Provided By
type: ObjectProperty

service Required By
type: ObjectProperty

service Used By
type: ObjectProperty
domain: Service
range: Component

solution Of
type: ObjectProperty

solution Of Architecture
type: ObjectProperty
provenance: ETSI 303645

suggests Counter Measure
type: ObjectProperty
domain: Provision
range: Counter Measure

supplies
type: ObjectProperty
domain: Supplier
range: Asset
comment: IEC references System or component
comment: NIST Framework : References an asset

supports Protocol
type: ObjectProperty
range: Protocol
provenance: ETSI 303645

uses
type: ObjectProperty
provenance: ETSI 303645

uses Algorithm
type: ObjectProperty
sub property of: uses
domain: Connection
range: Algorithm
provenance: ETSI 303645

uses Channel
type: ObjectProperty
sub property of: uses
domain: Connection
range: Channel
comment: ETSI 303645

uses Encryption
type: ObjectProperty
sub property of: uses
domain: Class
  union of: Connection
  union of: Protocol

uses Protocol
type: ObjectProperty
sub property of: uses
domain: Connection
range: Protocol

vulnerable To
type: ObjectProperty
range: Vulnerability

applies Cryptography
type: DatatypeProperty
type: FunctionalProperty
range: boolean
provenance: ETSI 303645

date Of Adoption
type: DatatypeProperty
type: FunctionalProperty
range: dateTime
comment: ETSI

date Of Publication
type: DatatypeProperty
type: FunctionalProperty
range: dateTime
comment: ETSI

date Of Withdrawal
type: DatatypeProperty
type: FunctionalProperty
range: dateTime
comment: ETSI

is Authenticated
type: DatatypeProperty
type: FunctionalProperty
domain: Interface
range: boolean

is Critical
type: DatatypeProperty
type: FunctionalProperty
range: boolean
provenance: IEC
provenance: NIST Framework

is Debug Interface
type: DatatypeProperty
type: FunctionalProperty
domain: Interface
range: boolean
description: Physical interface used by the manufacturer to communicate with the device during development or to perform triage of issues with the device and that is not used as part of the consumer-facing functionality
provenance: ETSI 303645

is Disclosed
type: DatatypeProperty
type: FunctionalProperty
domain: Vulnerability
range: boolean
provenance: ETSI 303645

is Embedded
type: DatatypeProperty
type: FunctionalProperty
domain: Device
range: boolean

is Encrypted
type: DatatypeProperty
type: FunctionalProperty
range: boolean

is Essential
type: DatatypeProperty
type: FunctionalProperty
domain: Class
  union of: Function
  union of: Service
range: boolean

is External
type: DatatypeProperty
type: FunctionalProperty
range: boolean
provenance: ETSI 303645

is Hard
type: DatatypeProperty
type: FunctionalProperty
domain: Constraint
range: boolean

is Internal
type: DatatypeProperty
type: FunctionalProperty
domain: Threat
range: boolean
provenance: NIST Framework

is International
type: DatatypeProperty
type: FunctionalProperty
range: boolean

is Mandatory
type: DatatypeProperty
type: FunctionalProperty
range: boolean

is Normative
type: DatatypeProperty
type: FunctionalProperty
domain: Class
  union of: Publication Constraint
  union of: Requirement Dependency Constraint
range: boolean

is Online
type: DatatypeProperty
type: FunctionalProperty
range: boolean

is Physical
type: DatatypeProperty
type: FunctionalProperty
domain: Class
  union of: Asset
  union of: Interface
range: boolean
description: Indicates physical port or air interface (such as radio, audio or optical) used to communicate with the device at the physical layer
description: Physical existing asset
provenance: ETSI 303645
provenance: NIST Framework

is Public
type: DatatypeProperty
type: FunctionalProperty
range: boolean
comment: ETSI

is Real Time
type: DatatypeProperty
type: FunctionalProperty
domain: Operating System
range: boolean

is Remote
type: DatatypeProperty
type: FunctionalProperty
domain: Interface
range: boolean
description: Intended to be accessible from outside the local network
provenance: ETSI

is Role Protected
type: DatatypeProperty
type: FunctionalProperty
range: boolean
comment: This attribute may indicate if the item can be accessed via role protection. MAy be modelled differently, via Component's property.

is SW
type: DatatypeProperty
type: FunctionalProperty
domain: Class
  union of: Component
  union of: Deployment Node
range: boolean

is Smart
type: DatatypeProperty
type: FunctionalProperty
range: boolean

is Solved
type: DatatypeProperty
type: FunctionalProperty
domain: Vulnerability
range: boolean
provenance: ETSI 303645

is Special Purpose
type: DatatypeProperty
type: FunctionalProperty
domain: Device
range: boolean

is Transportable
type: DatatypeProperty
type: FunctionalProperty
domain: Device
range: boolean

is Updatable
type: DatatypeProperty
type: FunctionalProperty
range: boolean
provenance: ETSI 303645
provenance: Flag which indiates if the item can be updated.

is Vulnerable
type: DatatypeProperty
type: FunctionalProperty
range: boolean
provenance: ETSI 303645
comment: Based on algorithm catalogs, this flag indicates if it is vulnerable in general without explicitely knowing the actual vulnerability.

is Wireless
type: DatatypeProperty
type: FunctionalProperty
domain: Class
  union of: Component
  union of: Connection
range: boolean

pages
type: DatatypeProperty
type: FunctionalProperty
domain: Publication
range: boolean
comment: ETSI

priority
type: DatatypeProperty
type: FunctionalProperty

probability
type: DatatypeProperty
type: FunctionalProperty
domain: Threat
range: float
provenance: NIST Framework

receives Data
type: DatatypeProperty
type: FunctionalProperty
range: boolean
provenance: ETSI 303645

security Level
type: DatatypeProperty
type: FunctionalProperty
domain: Class
  union of: Component
  union of: Component Requirement
range: integer

sends Data
type: DatatypeProperty
type: FunctionalProperty
range: boolean
provenance: ETSI 303645

severity
type: DatatypeProperty
type: FunctionalProperty
domain: Class
  union of: Threat
  union of: Vulnerability
range: integer
comment: Associates a cuantitave value to evaluated the degree of severity to a problem or threat.

size
type: DatatypeProperty
type: FunctionalProperty
provenance: NIST Framework

API
type: Class
comment: Application Program Interface, defines the methods and behaviour required and expected for communication

API Kind
type: Class
subclass of: Kind
comment: There are mulitple kinds such as REST, ROA, RMC, RMI

Access Control Mechanism
type: Class
subclass of: Mechanism
description: Security safeguard designed to detect and deny unauthorized access and permit authorized access to an information system or physical facility.
provenance: ETSI 303645

Actuator
type: Class
subclass of: Device
description: a device that causes a machine or other device to operate
provenance: ETSI 303645

Algorithm
type: Class
description: Process or set of rules to be followed in calculations or other problem-solving operations, especially by a computer.
provenance: ETSI 303645
replace by: fabio:Algorithm

Architecture
type: Class
description: Conceptual model that defines the structure, behavior, and more views of a system.
provenance: ETSI 303645

Asset
type: Class
description: An item owned by a person or company, regarded as having value or being useful.
description: NIST Framework

Authentication Mechanism
type: Class
subclass of: Mechanism
description: Method used to prove the authenticity of an entity
provenance: ETSI 303645

Boolean Constraint
type: Class
subclass of: Constraint
description: Represents a boolean constraint also interpreted as condition.

Buyer
type: Class
subclass of: Stakeholder
description: The people or organizations that consume a given product or service.
provenance: NIST Framework

Capability
type: Class
equivalent class: Functionality
description: Ability to perform a specified task
comment: A delegated capability is not native to the component,however, the component is considered to posses it as it is inherited from a surrounding system component.

Category
type: Class
description: General concept to define possible categories and divivsions of elements.

Channel
type: Class
description: Communication channels are mediums through which you can send information.
description: Logical or physocal link between assets.
comment: ETSI 303645

Component
type: Class
description: A part or element of a larger wholesuch as a system. It can be seen as a buillding block.

Component Requirement
type: Class
subclass of: Requirement
comment: A requirement targeting components that build up a system

Component Solution
type: Class
subclass of: Solution Structure

Composite
type: Class
equivalent class: Restriction
  on property: composed Of
  min qualified cardinality: 1
  on class: Component
description: Components may bring their own set of components, which makes it a composition of existing components

Concern
type: Class

Configuration
type: Class
description: Arrangement or set-up of the hardware and software that make up a computer system.
provenance: ETSI 303645

Connection
type: Class
description: Object that is used as communication channel between components. This connection can be attributed and configured.

Constrained Device
type: Class
subclass of: Class
  intersection of: Device
  intersection of: Restriction
    on property: has Device Physical Limitation
    some values from: Device Physical Limitation
description: Device which has physical limitations in either the ability to process data, the ability to communicate data, the ability to store data or the ability to interact with the user, due to restrictions that arise from its intended use
provenance: ETSI 303645

Constraint
type: Class
description: Limitation or restriction. Requirements may have constraints imposed.

Core
type: Class
subclass of: Framework Element
description: Set of cybersecurity activities, desired outcomes, and applicable references that are common across critical infrastructure sectors. The Framework Core provides a set of activities to achieve specific cybersecurity outcomes, and references examples of guidance to achieve those outcomes
provenance: NIST Framework

Counter Measure
type: Class
description: Reduces a threat, vulnerability or the result of an attack. It may be able to discover it and report it so that proper action can be taken.
comment: Measure used to avoid/ mitigate a theat or problem, solve a vulnerability

Customer
type: Class
subclass of: Stakeholder
provenance: NIST Framework

Deployment Node
type: Class
description: A node that is a part of a deployment solution. Commonly referring a device with an IP address.
label: Deployment node

Deployment Solution
type: Class
subclass of: Solution Structure

Detection Mechanism
type: Class
subclass of: Mechanism
description: Detect the presence of events.
provenance: ETSI 303645

Developer
type: Class
subclass of: Stakeholder
provenance: ETSI 303645

Device
type: Class
subclass of: Product
subclass of: Restriction
  on property: is SW
  has value: true
comment: Device is a kind of component. It is a discrete physical asset that provides a set of capabilitites

Device Physical Limitation
type: Class
description: Physical limitations can be due to power supply, battery life, processing power, physical access, limited functionality, limited memory or limited network bandwidth.
provenance: ETSI 303645

Domain
type: Class
equivalent class: Restriction
  on property: related To
  some values from: Domain
description: Concept to define areas of interest .

Driver
type: Class
subclass of: Concern
description: Something that creates and fuels activity, or gives force or impetus regarding the goals of an organization.
provenance: NIST Framework

Embedded Device
type: Class
subclass of: Device
description: Device which has physical limitations in either the ability to process data, the ability to communicate data, the ability to store data or the ability to interact with the user, due to restrictions that arise from its intended use
provenance: IEC 62443 4-2
comment: A kind of special purpose device

Firmware
type: Class
comment: Permanent software programmed into a read-only memory.

Framework
type: Class
description: Concept that represents real or conceptual structure intended to serve as a support or guide for the building of something that expands the structure into something useful
provenance: NIST Framework

Framework Element
type: Class
description: Concept used to define building elements of a framework.
provenance: NIST Framework

Function
type: Class
comment: Components provide set of relatedfunctions with a specific task

Functional Requirement
type: Class
subclass of: System Requirement
description: A requisite demanded to define a system or its component

Functionality
type: Class
comment: Components provide also functionalities which can trigger special events; be targets of threats; could be part or associated to capabilities

Generic Property
type: Class
comment: Items have properties. Properties can describe characteristic something. Devices may have specific attributes that may be exposed to different threats, while others may reduce the risk of other threats appareances.

Guideline
type: Class
subclass of: Publication
description: General rule, principle, or piece of advice

HUI
type: Class
subclass of: UI
comment: Kind of interface, intended for human use

HW Solution
type: Class
subclass of: Solution Structure
provenance: ETSI 303645

Host Device
type: Class
subclass of: Device
description: Device which has physical limitations in either the ability to process data, the ability to communicate data, the ability to store data or the ability to interact with the user, due to restrictions that arise from its intended use
provenance: IEC 62443 4-2
comment: A kind of general purpose device with an OS

Input Device
type: Class
subclass of: Device
description: A piece of equipment used to provide data and control signals to an information processing system.
provenance: IEC 62443 4-2

Interface
type: Class
comment: Components have interfaces such as buttons, keyboards, internet ports, hmdi and other interfaces. Those determine interaction points.

Kind
type: Class
equivalent class: Type
comment: A group of things which share similar characteristics

Manufacturer
type: Class
equivalent class: Supplier
subclass of: Stakeholder
provenance: ETSI 303645

Mechanism
type: Class
subclass of: Counter Measure
description: The process, way, or system used to produce a particular result.
comment: ETSI 303645

Memory Access Control
type: Class
subclass of: Access Control Mechanism
description: Way to control memory access rights
provenance: ETSI 303645

Mobile Device
type: Class
subclass of: Device
provenance: IEC 62443 4-2
comment: A kind of device which can be moved/transported

NIST Category
type: Class
subclass of: Class
  intersection of: Category
  intersection of: Core
  intersection of: Restriction
    on property: has Type
    has value: Type _ NIST
description: Subdivisions of a Function into groups of cybersecurity outcomes closely tied to programmatic needs and particular activities
provenance: NIST Framework

NIST Function
type: Class
subclass of: Class
  intersection of: Core
  intersection of: Restriction
    on property: has Type
    has value: Type _ NIST
description: One of the main components of the Framework. Functions provide the highest level of structure for organizing basic cybersecurity activities into Categories and Subcategories.
provenance: NIST Framework

NIST Sub Category
type: Class
subclass of: Class
  intersection of: Category
  intersection of: Core
  intersection of: Restriction
    on property: has Type
    has value: Type _ NIST
  intersection of: Restriction
    on property: has Main Category
    qualified cardinality: 1
    on class: Category
description: Specific outcomes of technical and/or management activities. They provide a set of results that help support achievement of the outcomes in each Category. Division of categories into more concrete technical activities.
provenance: NIST Framework

Network Device
type: Class
subclass of: Device
provenance: IEC 62443 4-2
comment: A kind of device which deals with data flow and data flow restriction

Network Type
type: Class
subclass of: Type
comment: A network type might be usefull to determine the type of connection security

Non Functional Requirement
type: Class
equivalent class: Quality Attribute
subclass of: System Requirement
description: A system attribute demanded. They serve as constraints or restrictions on the design of the system

Operating System
type: Class
comment: Operating system that can run on a device. It supports a device's basic functions, such as controlling peripherals and interfaces.

Organization
type: Class
comment: Entity in charge of making standards

Outcome
type: Class
subclass of: Concern
description: Result or a conclusion reached through a process of logical thinking or motivated by a driver.
provenance: NIST Framework

Policy
type: Class
subclass of: Counter Measure
comment: A policy is a set of rules or guidelines to follow in or to achieve compliance. Components consider policies, policies are addressed or demanded by requirements.

Port
type: Class
description: A port is a virtual point where network connections start and end. They are associated to services provided by components.
provenance: ETSI 303645

Practice
type: Class
subclass of: Counter Measure
description: Procedures that are accepted or prescribed as being correct or most effective

Problem
type: Class
comment: ETSI 303645
comment: General concept that defines a probllem that may affect any kind of asset.

Product
type: Class
subclass of: Asset

Profile
type: Class
subclass of: Framework Element
description: Component of the framework. It represents the alignment of the Functions, Categories, and Subcategories with the business requirements, risk tolerance, and resources of the organization. A Profile enables organizations to establish a roadmap for reducing cybersecurity risk that is well aligned with organizational and sector goals, considers legal/regulatory requirements and industry best practices, and reflects risk management priorities
provenance: NIST Framework

Protocol
type: Class
comment: Used by components to communicate

Protocol Property
type: Class
subclass of: Generic Property
provenance: ETSI 303645

Provision
type: Class

Publication
type: Class
comment: Document developed by an organization that is published

Publication Constraint
type: Class
subclass of: Constraint

Quality Attribute
type: Class
provenance: ETSI 303645

Recommendation
type: Class
subclass of: Class
  intersection of: Provision
  intersection of: Restriction
    on property: is Mandatory
    has value: false
description: A provision that is not mandatory but is proposed as to the best course of action

Reference Architecture
type: Class
subclass of: Solution Structure
provenance: ETSI 303645

Requirement
type: Class
subclass of: Class
  intersection of: Provision
  intersection of: Restriction
    on property: is Mandatory
    has value: true
comment: A requisite demanded for quality reasons

Requirement Dependency Constraint
type: Class
subclass of: Constraint

Risk
type: Class
description: A measure of the extent to which an entity is threatened by a potential circumstance or event, and typically a function of: (i) the adverse impacts that would arise if the circumstance or event occurs; and (ii) the likelihood of occurrence.
provenance: NIST Framework

Risk Assesement
type: Class
description: Association object between assets and risk. It can be attributed e.g. priority, effect, likelihood
provenance: NIST Framework

SW Application
type: Class
subclass of: Product
comment: A kind of component that builds an IACS

SW Solution
type: Class
subclass of: Solution Structure
provenance: ETSI 303645

Scope
type: Class
description: Extent of the area or subject matter that something deals with or to which it is relevant
provenance: ETSI 303645

Secure Boot Mechanism
type: Class
subclass of: Mechanism
description: Mechanism that verifies the integrity of every code being loaded, before it's allowed to execute
comment: ETSI 303645

Sensor
type: Class
subclass of: Device
provenance: ETSI 303645

Service
type: Class
subclass of: Product
comment: Components provide services, which are units of funtionality that can run independently.

Solution Structure
type: Class
comment: Generic concept that represents solution structures for systems.

Stakeholder
type: Class
description: Person with an interest or concern in something
provenance: ETSI 303645

Standard
type: Class
subclass of: Publication
description: A standard is a document that provides rules or guidelines to achieve order in a given context.
comment: ETSI 303645

Status
type: Class
comment: Status of a document

Storage Mechanism
type: Class
subclass of: Mechanism
description: Mechanism that enables a computer or system to retain data, either temporarily or permanently
provenance: ETSI 303645

Supplemental Guidance
type: Class
comment: Generic class for extra informative content

Supplier
type: Class
subclass of: Stakeholder
description: Product and service providers used for an organization’s internal purposes (e.g., IT infrastructure) or integrated into the products of services provided to that organization’s Buyers.
comment: Certain suppliers are expected to provide documentation, and other kinds of information regarding their products, also safety related points
comment: Person or organization that provides a product or service

System
type: Class
subclass of: Asset
comment: System for which components will be defined

System Requirement
type: Class
subclass of: Concern
comment: Statement that identifies the functionality and characteristics of a system to satisfy the stakeholder’s requirements/needs/concerns

Technical Committee
type: Class
comment: Entity part of an organization in charge of developing standard

Technology
type: Class
subclass of: Counter Measure
description: Application of scientific knowledge for practical purposes

Threat
type: Class
equivalent class: Restriction
  on property: related To
  some values from: Threat
subclass of: Problem
comment: Something that can harm a system,component. A requirement can mitigate such threats. Multipple concepts such as System, components, technologies can be target of threats; while requirements and techonologies, and other items can mitigate them.

Tier
type: Class
subclass of: Framework Element
description: Tiers describe the degree to which an organization’s cybersecurity risk management practices exhibit the characteristics defined in the Framework (e.g., risk and threat aware, repeatable, and adaptive)
provenance: NIST Framework

Tolerance
type: Class
description: Value that describes the tolerance of a risk accepted by an organization
provenance: NIST Framework

Tool
type: Class
subclass of: Technology
description: A thing or technology used to help perform a job, e.g. SW that carries out a particular function, typically creating or modifying another program.

Type
type: Class
comment: Type is used to define a category of things having common characteristics Items can have types, devices also.

UI
type: Class
subclass of: Interface
comment: Kind of interface, intended for a users

Update Mechanism
type: Class
subclass of: Mechanism
description: Ways of updating SW
provenance: ETSI 303645

User
type: Class
subclass of: Stakeholder
description: Natural person or organization
provenance: ETSI 303645

Vulnerability
type: Class
subclass of: Problem
comment: Weakness within a system or component

Creative Commons Attribution 4.0 International
type: NamedIndividual

Internation Electrotechincal Commission
type: NamedIndividual
label: IEC
abbr: IEC

Security for industrial automation and control systems - Part 4-2: Technical security requirements for IACS components
type: NamedIndividual
developed By: IEC technical committee 65
published By: Internation Electrotechincal Commission
creator: IEC TechnicalCommittee 65
has version: 2
language: en
language: fr
publisher: Internation Electrotechincal Commission
label: IEC 62443 4-2
label: IEC _62443_4-2

IEC technical committee 65
type: NamedIndividual
belongs To: Internation Electrotechincal Commission
label: IEC _ TC _65
label: Industrial-process measurement, control and automation

International Organization for Standarization
type: NamedIndividual
label: ISO
abbr: ISO

MIT License
type: NamedIndividual
label: MIT _ License

National Institute Of Standards and Technology
type: NamedIndividual
label: NIST
abbr: NIST

Published
type: NamedIndividual
label: Status _ Published

Withdrawn
type: NamedIndividual
label: Status _ Withdrawn

Type _ NIST
type: NamedIndividual
type: Type