I read this post from Michael Dahn and I really liked what he called "Attack Vector Risk Management".
Attack Vector Risk Management
I read this post from Michael Dahn and I really liked what he called "Attack Vector Risk Management".