Solution to Exercises-9 It includes example solutions to Task 1 and 2.

Task 1: For scenario 1, create security risk management model using the Security Risk-aware BPMN modelling language.

 Fig. 1. Asset model using the Security Risk-aware BPMN modelling language

Fig. 2. Risk model using the Security Risk-aware BPMN modelling language

Fig. 3. Risk treatment model using the Security Risk-aware BPMN modelling

language

Task 2: For scenario 1, create a security risk management model using the Security Risk-aware Secure Tropos modelling language or Security Risk-oriented Misuse Cases modelling language.

 Fig. 4. Asset model using the Security Risk-oriented (Mis)use Cases

 

 Fig. 5. Risk model using the Security Risk-oriented Misuse Cases

 

 Fig. 6. Risk treatment model using the Security Risk-oriented Misuse Cases