Blue Goat CyberBlue Goat CyberSMMedical Device Cybersecurity
    All infographics
    Threat Modeling · Part 3

    Cybersecurity hazard analysis: from threat to harm to control

    How one row of a medical device cybersecurity hazard analysis links a threat to a patient harm, a security control, and the test that proves it.

    Infographic chain of seven steps: threat, vulnerability, CIA loss, hazardous situation, harm rated per ISO 14971, security control, and verification, with shared IDs on every row.
    Shared IDs on every row (for example T-07, H-12, C-04, TST-31) let a reviewer follow any threat to its test.
    Download the graphicTalk through it with us

    What the graphic says

    The full text version, so the content is readable without the image.

    The seven links

    How security risk (exploitability) and safety risk (ISO 14971) connect in one row.

    1. Threat
    A STRIDE threat at a trust boundary.
    2. Vulnerability
    The weakness that lets the threat succeed.
    3. CIA loss
    Loss of confidentiality, integrity, or availability.
    4. Hazardous situation
    The patient is exposed to the hazard.
    5. Harm
    Severity rated per ISO 14971.
    6. Control
    A security control reduces the risk.
    7. Verification
    A test proves the control works.

    Keep reading

    More in Threat Modeling

    Ready when you are

    Secure your device before it reaches patients.

    30-minute strategy session. No cost, no commitment - just answers from people who've supported 275+ FDA submissions, with zero cybersecurity rejections.

    Book strategy sessionExplore services