${taskforce.name} Avatar
  1. OMG Task Force

Risk Analysis and Assessment Modeling Language (RAAML) 1.2 RTF — Open Issues

Open Closed All
Issues not resolved

Issues Summary

Key Issue Reported Fixed Disposition Status
RAAML12-50 HarmRealization should be in General instead of STPA RAAML 1.2b1 open
RAAML12-49 Fig 9.113 is wrong RAAML 1.2b1 open
RAAML12-48 UndesiredControlActionHarmPotential diagram wrong RAAML 1.2b1 open
RAAML12-47 harmPotential in AbstractFMEAItem RAAML 1.2b1 open
RAAML12-46 Assumption is in the profile but not in Fig. 10.3 RAAML 1.2b1 open
RAAML12-45 Hazard is different in the Profile than the fig. 10.3 RAAML 1.2b1 open
RAAML12-44 AbstractCause figure should show generalization of Factor RAAML 1.2b1 open
RAAML12-43 private attributes RAAML 1.2b1 open
RAAML12-42 AnyVehicleUse should be AnyVehicleUsage RAAML 1.2b1 open
RAAML12-41 Severity should be lower case RAAML 1.2b1 open
RAAML12-40 using 'Kind' for enumerations RAAML 1.2b1 open
RAAML12-39 Usages are singular RAAML 1.2b1 open
RAAML12-38 Rationale?? RAAML 1.2b1 open
RAAML12-37 Exposure is capitalized RAAML 1.2b1 open
RAAML12-36 HarmRealization is wrong on this diagram RAAML 1.2b1 open
RAAML12-35 Association called UndesiredStateHarmPotential not described anywhere except on Fig. 10.3 RAAML 1.2b1 open
RAAML12-34 Wrong Multiplicity between AnySituation and Scenario RAAML 1.2b1 open
RAAML12-33 HarmRealization is shown in General Concepts RAAML 1.2b1 open
RAAML12-32 Wrong Multiplicity between AnySituation and Scenario RAAML 1.2b1 open
RAAML12-22 Add stereotype for Vulnerability RAAML 1.1 open
RAAML12-23 Add stereotype for Weakness RAAML 1.1 open
RAAML12-18 Add ProcessModel and ControlAlgorithm stereotypes to STPA Profile RAAML 1.1 open
RAAML12-17 Threat should also be a subtype of Limitation-Factor RAAML 1.1 open
RAAML12-16 Threat is not stereotyped as Threat, and must be stereotyped for consistency RAAML 1.1 open

Issues Descriptions

HarmRealization should be in General instead of STPA


Fig 9.113 is wrong

  • Key: RAAML12-49
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    need Generalization to Causality... and need to and from from Causality

  • Reported: RAAML 1.2b1 — Thu, 5 Nov 2026 01:33 GMT
  • Updated: Thu, 5 Nov 2026 13:12 GMT

UndesiredControlActionHarmPotential diagram wrong

  • Key: RAAML12-48
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    UndesiredControlActionHarmPotential diagram wrong.... it needs to have a Generalization of UndesiredStateHarmPotential
    and redefine harmPotential and undesiredState (by undesiredControlAction) instead of from and to

  • Reported: RAAML 1.2b1 — Thu, 5 Nov 2026 01:17 GMT
  • Updated: Thu, 5 Nov 2026 13:12 GMT

harmPotential in AbstractFMEAItem

  • Key: RAAML12-47
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    harmPotential in AbstractFMEAItem... does not need subset scenarioStep

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 23:31 GMT
  • Updated: Thu, 5 Nov 2026 13:11 GMT

Assumption is in the profile but not in Fig. 10.3


Hazard is different in the Profile than the fig. 10.3

  • Key: RAAML12-45
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    Hazard is different in the Profile than the fig. 10.3

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 22:46 GMT
  • Updated: Thu, 5 Nov 2026 13:11 GMT

AbstractCause figure should show generalization of Factor

  • Key: RAAML12-44
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    AbstractCause figure should show generalization of Factor

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 22:09 GMT
  • Updated: Thu, 5 Nov 2026 13:10 GMT

private attributes

  • Key: RAAML12-43
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    I am not sure why the attributes all over the standard were made private... e.g. Verified has an attirbute result which is private... so one could not read it out of the Verified

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 21:35 GMT
  • Updated: Thu, 5 Nov 2026 13:10 GMT

AnyVehicleUse should be AnyVehicleUsage

  • Key: RAAML12-42
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    AnyVehicleUse should be AnyVehicleUsage to be consistent

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 21:03 GMT
  • Updated: Wed, 4 Nov 2026 21:14 GMT

Severity should be lower case


using 'Kind' for enumerations

  • Key: RAAML12-40
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    standard model practice is to use 'Kind' after a word to indicate an Enumeration.. like ASILKind

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 20:29 GMT
  • Updated: Wed, 4 Nov 2026 20:42 GMT

Usages are singular

  • Key: RAAML12-39
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    Standard modeling practice is to have all usages singular and let multiplicities define if you have more than one... so a usage conditions (plural) would be changed to condition

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 20:21 GMT
  • Updated: Wed, 4 Nov 2026 20:42 GMT

Rationale??

  • Key: RAAML12-38
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    Exposure says a Rationale must be attached... Rationale is SysML... and this is not necessarily SysML... so perhaps an attribute should be created instead to hold the Rationale

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 20:14 GMT
  • Updated: Wed, 4 Nov 2026 20:41 GMT

Exposure is capitalized

  • Key: RAAML12-37
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    to keep the convention... exposure should be lowercase as a usage

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 20:12 GMT
  • Updated: Wed, 4 Nov 2026 20:41 GMT

HarmRealization is wrong on this diagram

  • Key: RAAML12-36
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    HarmRealization should be a Specialization of AbstractRisk and Causality ... there are two redefines so harm and harmPotential is ok... but the other redefine should be to and from .... from Causality,,, look at Fig. 10.3 ... there are many conflicts... also could show Specialiation of AbstractRisk and Causality on Fig. 10.3

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 19:50 GMT
  • Updated: Wed, 4 Nov 2026 20:41 GMT

Association called UndesiredStateHarmPotential not described anywhere except on Fig. 10.3

  • Key: RAAML12-35
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    Association called UndesiredStateHarmPotential not described anywhere except on Fig. 10.3

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 19:28 GMT
  • Updated: Wed, 4 Nov 2026 20:41 GMT

Wrong Multiplicity between AnySituation and Scenario

  • Key: RAAML12-34
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    the Opposite from scenarioStep between AnySituation and Scenario should be 0..*

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 19:28 GMT
  • Updated: Wed, 4 Nov 2026 20:40 GMT

HarmRealization is shown in General Concepts

  • Key: RAAML12-33
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    HarmRealization is shown in General Concepts in Fig. 10.3 but is described in the standard in STPA on page 86
    and is not described in the General Concepts section...

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 19:19 GMT
  • Updated: Wed, 4 Nov 2026 20:40 GMT

Wrong Multiplicity between AnySituation and Scenario

  • Key: RAAML12-32
  • Status: open  
  • Source: Elparazim ( Mr. George Edward Roberts)
  • Summary:

    the Opposite from scenarioStep between AnySituation and Scenario should be 0..*

  • Reported: RAAML 1.2b1 — Wed, 4 Nov 2026 18:36 GMT
  • Updated: Wed, 4 Nov 2026 20:40 GMT

Add stereotype for Vulnerability

  • Key: RAAML12-22
  • Status: open  
  • Source: Ford Motor Company ( Mr. Kyle Post)
  • Summary:

    The Vulnerability element is stereotyped by a generic <<Situation>> stereotype and there is no dedicated <<Vulnerability>> stereotype. To resolve this add a stereotype for Vulnerability. This change should help ensure consistency with Factors and Limitations in the STPA Loss Scenario

  • Reported: RAAML 1.1 — Mon, 13 Apr 2026 12:51 GMT
  • Updated: Mon, 13 Apr 2026 13:03 GMT

Add stereotype for Weakness

  • Key: RAAML12-23
  • Status: open  
  • Source: Ford Motor Company ( Mr. Kyle Post)
  • Summary:

    The Weakness element is stereotyped by a generic <<Situation>> stereotype and there is no dedicated <<Weakness>> stereotype. To resolve this, the ticket calls for adding a stereotype for Weakness. This change should help ensure consistency with Factors and Limitations in the STPA Loss Scenario.

  • Reported: RAAML 1.1 — Mon, 13 Apr 2026 12:58 GMT
  • Updated: Mon, 13 Apr 2026 13:02 GMT

Add ProcessModel and ControlAlgorithm stereotypes to STPA Profile

  • Key: RAAML12-18
  • Status: open   Implementation work Blocked
  • Source: MITRE ( Ms. Mary Tolbert)
  • Summary:

    The issue is that ProcessModel and ControlAlgorithm are not currently stereotypes in the STPA profile, but is required to accurately model a STPA Control Structure.

  • Reported: RAAML 1.1 — Tue, 24 Mar 2026 15:52 GMT
  • Updated: Wed, 8 Apr 2026 15:36 GMT

Threat should also be a subtype of Limitation-Factor

  • Key: RAAML12-17
  • Status: open   Implementation work Blocked
  • Source: MITRE ( Ms. Mary Tolbert)
  • Summary:

    The issue is that Threat is not currently considered as a Limitation-Factor, which is necessary in creating STPA Loss Scenarios. To resolve this, the ticket calls for making Threat a subtype of Limitation.

  • Reported: RAAML 1.1 — Tue, 24 Mar 2026 14:02 GMT
  • Updated: Wed, 8 Apr 2026 15:35 GMT

Threat is not stereotyped as Threat, and must be stereotyped for consistency

  • Key: RAAML12-16
  • Status: open   Implementation work Blocked
  • Source: MITRE ( Ms. Mary Tolbert)
  • Summary:

    The issue is that Threat is not currently stereotyped as Threat, which puts it out of alignment with the other RAAML profile elements. To resolve this, the ticket calls for stereotyping it as Threat.

  • Reported: RAAML 1.1 — Tue, 24 Mar 2026 13:58 GMT
  • Updated: Wed, 8 Apr 2026 15:35 GMT