SecurityX

A security analyst is asked to assign a specific dollar value to the potential loss from a data breach affecting a customer database, calculating expected annual losses in monetary terms. Which type of risk assessment approach is the analyst using?

An organization wants to model potential threats by analyzing adversary tactics and techniques, common weakness enumeration for attack patterns, and threat categories such as spoofing and tampering. Which set of frameworks aligns with the threat modeling task?