SPECTRA — Agent Category enumeration needs clarification

Review 16-05-2025

Agent Category Enumeration –
o “Hazard” is not a type of agent. Hazards are situations that may result in loss. This needs to be rectified because it is not at all consistent with how our peers in safety engineering think about hazards and we need to have a consistent terminology with safety. This would be a good opportunity to leverage what RAAML has for Hazard.
o I would suggest the enumeration is missing “stakeholder”, “owner”, and perhaps “developer” at least. All are agents who, through functions they perform in defining or designing the system, introduce cyber risk.