How the MITRE ATT&CK Framework Helps CISOs Communicate Risk to Stakeholders
Devo
Threat-Based Methodology: An Introduction
John Allison