nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Derive requirements from traced cybersecuirty controls

medini_1072437044

I would like to display requirements derived from CS controls in Medini Analyze for CS in the "Risk Determination and Risk Treatment Decision" table.

These requirements are linked to the controls via trace.

A new column, "Requirement derived from measure", shall automatically display these traced requirements.

I tried to fill the column via the following script:

self.user_applied_measures.mediniGetTracedElements(safetygoals::SafetyRequirement)

->collect(e | e.oclAsType(safetygoals::SafetyRequirement).getProfilePropertyValue('name')

Unfortunately, that didn't work out and leads to the result according to the screenshot.

Does anyone have a scripting solution for my use case?

Find more posts tagged with

medini

medini legacy

Accepted answers

All comments

medini_1063548292

Hi Anton ,

I suggest to first start to test the statement in the OCL Console View, then paste int inside of property, nut there are still some tiny differences that you can finetune the OCL code.

And similar to the other forum thread you can see the details of a problem by mouse-over the cell with the property.

Marian

medini_1024169437

Anton, could you in addition post the real error behind this? You get it either as tooltip at the errorneous cell or in the error log details, later is better to copy and paste I guess.

Just in case you haven't solved it yet.

I suspect that "self.user_applied_measures" is a derived property as well or is it a reference property? As Marian said, one way is to test it in the console. Marian had posted a table which tells you whether the OCL in the console is the same or slightly different then in medini OCL.

Happy Scripting

Jan

medini_1072437044

Please finde the console feedback for the oroginal script attached.

According to Marian's feedback i edited the script as follows:

self.user_applied_measures.mediniGetTracedElements(safegoals::SafetyRequirement)

->collect(e | e.oclAsType(safegoals::SafetyRequirement)).getProfilePropertyValue('name')

No the console is showing the following result:

Cannot find operation (mediniGetTracedElements(SafetyRequirement)) for the type (OclAny)

medini_1063548292

Anton,

ok this one is because of OCL and derivedProfileProperty and its output being OclAny.

I usually use selectByKind(..) to force certain typing and avoid too many oclAsType()

So without going too deep into technicalities I would suggest to use:

-- get profile property
self.user_applied_measures
--filter only on Masures ( also Safety & Security Mechanisms will be accepted) * enforce type)
 ->selectByKind(safety::Measure).mediniGetTracedElements(safegoals::SafetyRequirement)
--filter safetyRequiremnts 9neofre type for OCL) on TreacedELemnts , 
 ->selectByKind(safegoals::SafetyRequirement).name

or alternatively B:

self.getProfilePropertyValue('user_applied_measures')
 ->selectByKind(safety::Measure).mediniGetTracedElements(safegoals::SafetyRequirement)
 ->selectByKind(safegoals::SafetyRequirement).name

Marian

medini_1072437044

Hi Marian,

thanks a lot. It worked!

medini_1072437044

Is there a possibility to display the subRequirements as well?

I want to display all contributing requirements incl. subRequirements for applied measures and derivation of the cs goals.

So far I was only able to display 1st level requirements analogous to "Contribuiting Requirements" from the best practice template. Or derived from controls like the solution above.

Is there a way to display the contribiuting as well as the sub contribuiting requirements in one column each for applied measures and derived requirements from cs goals.

I tried already the following which did not work:

self.requirements.targetRelations->collect(rel | rel.source.targetRelations->collect(r | r.source))

In another column I would like to display the contribuiting requirements incl. subRequirements which are contribuiting to the additional measures. The column for the additional measures is a reference column.

Thanks for your help in advance.

medini_1072437044

In case some one else searchs for a solution I found one myself:

Display all contributing requirements in one column, sorted by origin and identifier:

self.requirements.targetRelations->collect(rel |

if rel.source.oclIsKindOf(safegoals::SafetyRequirement) then

'[Goal] [' + rel.source.oclAsType(safegoals::SafetyRequirement).identifier + '] ' +

rel.source.oclAsType(safegoals::SafetyRequirement).name

else

endif

)->asSet()->sortedBy(s | s)

->union(

self.getProfilePropertyValue('user_additional_applied_measures')

->selectByKind(safety::Measure).mediniGetTracedElements(safegoals::SafetyRequirement)

->selectByKind(safegoals::SafetyRequirement)

->union(

self.getProfilePropertyValue('user_applied_measures')

->selectByKind(safety::Measure).mediniGetTracedElements(safegoals::SafetyRequirement)

->selectByKind(safegoals::SafetyRequirement)

)

->collect(req |

if req.oclIsKindOf(safegoals::SafetyRequirement) then

'[Measure] [' + req.oclAsType(safegoals::SafetyRequirement).identifier + '] ' +

req.oclAsType(safegoals::SafetyRequirement).name

else

endif

)->asSet()->sortedBy(s | s)

)

->sortedBy(s | s)

The subrequirements can be scrpted via:

self.requirements.targetRelations->collect(rel |

if rel.source.oclIsKindOf(safegoals::SafetyRequirement) then

rel.source.oclAsType(safegoals::SafetyRequirement).subRequirements

->collect(sub |

'[Goal] [' + sub.identifier + '] ' + sub.name

)

else

Set{}

endif

)->flatten()->asSet()->sortedBy(s | s)

->union(

self.getProfilePropertyValue('user_additional_applied_measures')

->selectByKind(safety::Measure).mediniGetTracedElements(safegoals::SafetyRequirement)

->selectByKind(safegoals::SafetyRequirement)

->union(

self.getProfilePropertyValue('user_applied_measures')

->selectByKind(safety::Measure).mediniGetTracedElements(safegoals::SafetyRequirement)

->selectByKind(safegoals::SafetyRequirement)

)

->collect(req |

if req.oclIsKindOf(safegoals::SafetyRequirement) then

req.oclAsType(safegoals::SafetyRequirement).subRequirements

->collect(sub |

'[Measure] [' + sub.identifier + '] ' + sub.name

)

else

Set{}

endif

)->flatten()->asSet()->sortedBy(s | s)

)

->sortedBy(s | s)

Remark: the field "user_additional_applied_measures" was created by me, it has the same function as the column "additional measures". But I was not able to find out which field is connected to the column, so I created my own, and used that one instead.

medini_1063548292

Hi Anton,

Sorry I did not respond but glad you found your way!

Just to clear the things I looked into the Additional measure and you can access it via self.measures

And to the question of collecting nested requirements one can use ->closure(...) that basically recursively applies the expression to any object, it can be as simple as just the feature name , for OCL there isa loot of overhead needed because of the OCL strictness <?WORD FLAGGED?> the closure result wil give you only the children's so you have to add the parent to the result.

so here is the general example of collecting all requirements from Threat event measures -> traced -> requirement and also goal ->contributing req

-- get the mechanisms/measure traced req and all sub reqs
let allReqsFromMeasure:Set(safegoals::SafetyRequirement)=
 -- get reqs realted by trace
 self.measures->selectByKind(safety::Measure).mediniGetTracedElements(safegoals::SafetyRequirement)
 --create a colelction req and all of its netsed sub-requirements
 ->collect(r|r.oclAsType(safegoals::SafetyRequirement)
 			--collect nested subrequirments using subRequirements feature,ensure proper typying for OCL 
 			->closure(subRequirements->selectByKind(safegoals::SafetyRequirement))
 			 -- add the parent to the results 
 			 ->including(r.oclAsType(safegoals::SafetyRequirement)))->sortedBy(identifier)->asSet(),
 -- get thegoal reqs (related through contirbution) and all sub reqs
allReqsFromGoal:Set(safegoals::SafetyRequirement)=
 -- get for a given goal ( safety or security)
 self.requirements->selectByKind(safegoals::SafetyGoal).targetRelations.source->selectByKind(safegoals::SafetyRequirement)
 --create a collection req and all of its nested sub-requirements
 ->collect(r|r.oclAsType(safegoals::SafetyRequirement)
 			--collect nested subrequirments using subRequirements feature,,ensure proper typying for OCL 
 			->closure(subRequirements->selectByKind(safegoals::SafetyRequirement))
 			 -- add the parent to the results 
 			 ->including(r.oclAsType(safegoals::SafetyRequirement)))->sortedBy(identifier)->asSet() 			 
in
--do something with the requirments
allReqsFromGoal->union(allReqsFromMeasure)

Marian