Security Risk Assessment is an important task in systems engineering and used to derive security requirements for a secure system design and the evaluation of design alternatives as well as vulnerabilities. Security Risk Assessment is a complex and interdisciplinary task, where experts from the application and the security domain have to collaborate and understand each other. Automated and tool-supported approaches are desired to help manage the complexity. However, the models used for system engineering usually focus on functional behavior and lack security-related aspects. For example, the consequences of security incidents, such as loss of intellectual property, are typically not modeled by system engineers. Therefore, we present our modeling approach that alleviates communication between the involved experts and features steps of computer aided modeling to achieve consistency and to avoid errors of omission. We demonstrate our approach with an example and discuss the resulting advantages
