{"id":864,"date":"2025-04-16T14:26:57","date_gmt":"2025-04-16T18:26:57","guid":{"rendered":"https:\/\/carleton.ca\/cipser\/?page_id=864"},"modified":"2025-07-30T16:00:22","modified_gmt":"2025-07-30T20:00:22","slug":"threat-and-risk-assessment-methodologies","status":"publish","type":"page","link":"https:\/\/carleton.ca\/cipser\/research-work\/canvas-canadian-assessment-and-vulnerability-analysis-system\/threat-and-risk-assessment-methodologies\/","title":{"rendered":"Threat and Risk Assessment Methodologies"},"content":{"rendered":"\n
\n
\n\n
\n
\n
\n

\n Threat and Risk Assessment Methodologies\n <\/h1>\n \n \n <\/header>\n\n <\/div>\n\n <\/div>\n\n <\/div>\n<\/section>\n\n\n\n
\"image\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

TRA Methodologies<\/h2>\n\n\n\n

Risk Assessment Methodologies<\/strong><\/h3>\n\n\n\n

We\u2019ve gathered a selection of methodologies used in Canada and internationally to guide risk assessments across CI domains. This is not a complete list, but a temporary reference point. Our future-state system will catalogue, assess, and align methodologies within a centralized platform\u2014powering high-quality, standardized, and evidence-informed assessments across Canada\u2019s critical infrastructure ecosystem.<\/em><\/p>\n\n\n\n

Methodology Name<\/th>Year<\/th>Summary<\/th>Link<\/th><\/tr><\/thead>
All-Hazards Risk Assessment (AHRA)<\/strong><\/span><\/td>2013<\/span><\/td>A comprehensive all-hazards approach that evaluates both malicious and non-malicious threats, taking into account vulnerabilities and potential consequences to inform mitigation strategies.<\/span><\/td>Link<\/a><\/td><\/tr>
Harmonized Threat and Risk Assessment (HTRA) Methodology<\/strong><\/td>2007<\/td>A modular framework designed to assess risks to assets, employees, and services, integrating with project management and system development life cycles for both strategic and operational applications.<\/span><\/td>Link<\/a><\/td><\/tr>
Hazard Identification Risk Assessment (HIRA)<\/strong><\/td>2023<\/td>Widely used in Ontario and several jurisdictions across Canada to systematically identify hazards and assess the associated risks to inform emergency management programs.
\n<\/span><\/td>		Link<\/a><\/td><\/tr>
Hazard, Risk and Vulnerability Analysis (HRVA)<\/strong><\/td>2023<\/td>A comprehensive tool used in British Columbia and other provinces to identify hazards, evaluate risks and vulnerabilities, and inform emergency plans and mitigation strategies.<\/td>Link<\/a><\/td><\/tr>
National Risk Profile (NRP) Methodology<\/strong><\/td>2023<\/td>Combines the All-Hazards Risk Assessment and Emergency Management Capability Assessment methodologies to evaluate Canada’s disaster risks and emergency management capabilities.<\/span><\/td>Link<\/a><\/td><\/tr>
Threat and Risk Assessment Guide – GCPSG-022<\/strong><\/td>2025<\/td>A guide developed by the RCMP to assist in conducting threat and risk assessments, serving as a companion to the RCMP’s TRA course and providing guidance for government departments.<\/span><\/td>Link<\/a><\/td><\/tr>
Risk Assessments for Public Health Professionals<\/strong><\/td>2023<\/td>Guidelines provided by the Public Health Agency of Canada for assessing risks to public health, aiding in the development of recommended actions and exploration of potential outcomes.<\/span><\/td>Link<\/a><\/td><\/tr>
Design Basis Threat<\/strong><\/td>2011<\/td> A structured approach used primarily in the nuclear and high-security sectors to define potential adversary capabilities, intentions, and tactics for which protection systems must be designed. It informs physical security system design and regulatory compliance.<\/span><\/td>Link<\/a><\/td><\/tr>
ISO 31000 – Risk Management Guidelines<\/strong><\/td>2018<\/td>Internationally adopted and widely used across Canadian jurisdictions and private industry, ISO 31000 provides principles and guidelines for risk management applicable to any organization.<\/span><\/td>Link<\/a><\/td><\/tr>
CSA ISO\/IEC 27005: Information Security Risk Management<\/strong><\/td>2018<\/td>Provides guidelines for information security risk management aligned with ISO\/IEC 27001, used in Canadian cyber and IT security domains.<\/span><\/td>Link<\/a><\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"

TRA Methodologies Risk Assessment Methodologies We\u2019ve gathered a selection of methodologies used in Canada and internationally to guide risk assessments across CI domains. This is not a complete list, but a temporary reference point. Our future-state system will catalogue, assess, and align methodologies within a centralized platform\u2014powering high-quality, standardized, and evidence-informed assessments across Canada\u2019s critical […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":484,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_cu_dining_location_slug":"","footnotes":"","_links_to":"","_links_to_target":""},"cu_page_type":[],"class_list":["post-864","page","type-page","status-publish","hentry"],"acf":{"cu_post_thumbnail":""},"_links":{"self":[{"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/pages\/864","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/comments?post=864"}],"version-history":[{"count":3,"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/pages\/864\/revisions"}],"predecessor-version":[{"id":1394,"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/pages\/864\/revisions\/1394"}],"up":[{"embeddable":true,"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/pages\/484"}],"wp:attachment":[{"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/media?parent=864"}],"wp:term":[{"taxonomy":"cu_page_type","embeddable":true,"href":"https:\/\/carleton.ca\/cipser\/wp-json\/wp\/v2\/cu_page_type?post=864"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}