Risk Management Frameworks

Risk Assessment should be considered separate from Application Threat modeling, although similar but Application Threat Modeling is more of a calculated approach.

• ISO27001
• BSI Grundschutz
• NIST Cybersecurity Framework

Risk Management Activities