MITRE D3FENDdefensive technique
D3-ORA Operational Risk Assessment
- Tactic
- Model
- Synonyms
- Mission Risk Assessment
Definition
Operational risk assessment identifies and models the vulnerabilities of, and risks to, an organization's activities individually and as a whole.
Related
Child of · MITRE D3FEND (1)
- D3-OAM Operational Activity Mapping defensive technique
References
- https://www.sans.org/cyber-security-courses/managing-enterprise-cloud-security-vulnerabilities/ MGT516: Managing Security Vulnerabilities: Enterprise and Cloud
- https://csrc.nist.gov/CSRC/media/Projects/risk-management/documents/05-Assess%20Step/NIST%20RMF%20Assess%20Step-FAQs.pdf NIST RMF Quick Start Guide - Assess Step - Frequently Asked Questions (FAQ)
- https://doi.org/10.6028/NIST.SP.800-160v1 NIST Special Publication 800-160 Volume 1 - Systems Security Engineering
- https://doi.org/10.6028/NIST.SP.800-37r2 NIST Special Publication 800-37 Revision 2 - Risk Management Framework for Information Systems and Organizations
- https://doi.org/10.6028/NIST.SP.800-53Ar5 NIST Special Publication 800-53A Revision 5 - Assessing Security and Privacy Controls in Information Systems and Organizations
- https://doi.org/10.6028/NIST.IR.8011-1 NIST Interagency Report 8011 Volume 1 - Automation Support for Security Control Assessments