Skip to main content

Crate use_security_risk

Crate use_security_risk 

Source
Expand description

§use-security-risk

Generic cybersecurity risk primitives for RustUse.

§Experimental

use-security-risk is experimental while the use-security workspace remains below 0.3.0. Expect small API adjustments during the first release wave.

§Example

use use_security_risk::{RiskImpact, RiskLikelihood, RiskPriority, priority_from_likelihood_impact};

let priority = priority_from_likelihood_impact(RiskLikelihood::Likely, RiskImpact::Major);

assert_eq!(priority, RiskPriority::P1);
assert!(priority.sort_key() < RiskPriority::P3.sort_key());

§Scope

  • Cybersecurity risk identifiers, categories, severities, likelihoods, impacts, treatments, owners, statuses, and priorities.
  • Small label and sorting helpers.
  • Lightweight risk metadata models for local application code.

§Non-goals

  • A GRC platform.
  • Risk workflow automation.
  • Compliance scoring or policy enforcement.

§License

Licensed under either of the following, at your option:

  • Apache License, Version 2.0
  • MIT license

Structs§

RiskOwner
SecurityRisk
Security risk metadata.
SecurityRiskId

Enums§

RiskCategory
Risk category labels.
RiskImpact
Risk impact labels.
RiskLikelihood
Risk likelihood labels.
RiskPriority
Sortable risk priority labels.
RiskSeverity
Risk severity labels.
RiskStatus
Risk status labels.
RiskTreatment
Risk treatment labels.
SecurityRiskError
Error returned when security risk metadata is invalid.

Functions§

priority_from_likelihood_impact
Returns a sortable priority from likelihood and impact.