Libraries and Categories

One basic functionality in Diri is libraries with suggestions and categorisation, and the following feature can be found in Step 3 - Risk assessment. Diri comes with pre-defined catalogues for Events and Consequences that users can choose from and add to in the risk assessment. This eases the workload a lot because the Diri users do not have to think of everything by themselves. Through research and experience we have found that there is generally a limited set of both events and consequences that occurr in a cybersecurity. We also recognize that some events will be specific to one or very few systems, so new items can be added by the user to the list.

Knowledge libraries in Diri

While in the risk assessment, you can open the knowledge libraries by clicking "New event"  or  "New category" or editing an existing one. Clickin "New event"  will open the following prompt:

Registering a new event for the risk assessment

In the above prompt, you can choose an existing event from the list that appears by clicking "Select event". The event library contains many cybersecurity events that you can work with in the risk assessment. The event selection is a category and you can provide a description in the text field below. The written description will be prioritized in the risk register, but if left empty, the risk register will show the event category.

However, if none of the existing events are what you are looking for you can click "Add new event" colored in blue which will open the following prompt:

Adding a new event to the event register.

You can add a new event to your risk assessment. Your new event will only be visible to users of this specific risk assessment. Check the box and type the event name you want to work with.  You will be asked to give both the name of the event in your current language and an English description. If both are in English, feel free to duplicate the name.

Click "Save" and the new event will appear in the original list.

The feature works identically for Consequences:

Adding a new consequence to your library.

Categories in Diri

One of the main pillars of Diri is categorisation and re-use. You will find that categorisations are built in many places throughout the tool. These categories allow for quantification, aggregation, and statistical views.

• Related Articles

• Filtering and sorting lists

  All lists in Diri can be sorted alfabethically on variables. Filtering is a generic functionality available for all lists in Diri. Filtering is activated by clicking the funnel icon in the upper right corner of most lists: The funnel icon for ...

• The Diri helper (Discontinued Jan 2024)

  The Diri helper will dissappear from Jan 2024, and has been replaced with forms and tooltips several places. We are working to re-introduce the Diri helper as a smart adviser on a later point in time with more dynamic advice. The Diri helper is an ...

• The Asset Registry

  What is the Asset Registry? The Asset Register is a listing of all the assets that your users can see in the Diri application. The assets can be sorted according to location, risk assessment type, name, asset type, and criticality. And you can filter ...

• The Risk Registry

  What is the Risk registry? The Risk Register is a listing of all the risks that your users can see in the Diri application. The risks are ranked according to severity and allows the user to search using the filtering function. Variables in the risk ...

• Dynamic Translation fields (Discontinued jan-2024)

  Language in user-defined fields Diri contains several pre-defined choices in, for example, adverse events, threats, vulnerabilities, and consequences. Previously, these items were bound to only one language, but our new update solves this problem. If ...