Threat Assessment
What is Threat Assessment?
The process of evaluating potential threats to an organization by analyzing threat actors, their capabilities, intentions, and the likelihood of attack.
Terms that appear alongside threat assessment
Each of these is named in at least one of the same controls as threat assessment. The number is how many controls name both.
- vulnerability 6 shared controls
- risk assessment 5 shared controls
- vulnerability assessment 4 shared controls
- threat intelligence 3 shared controls
- insider threat 3 shared controls
- risk treatment 3 shared controls
- change management 2 shared controls
- malware 2 shared controls
Frameworks that govern threat assessment
What the standards actually require on threat assessment
Requirements naming threat assessment across 6 standards, quoted from the control text.
Weighing everything collected under the two preceding sub-clauses, the team should decide whether: the concern for violence is unfounded, so the matter (where an employee is involved) can go back to normal HR, disciplinary or employee relations handling;
ansi-asis-wvpi-aa-2020-workplace-violence-and-active-assailant::8.3.3 · 8.3.3 Evaluating information from the threat assessment →The project selects the mandated or applicable domain security control profile and related threat assessment reports (or develops a profile if none applies) and validates four things against project documentation such as the charter: that the profile's busines...
canada-itsg-33-it-security-risk-management::A2-3.2.1 · 3.2.1 Select applicable domain security control profiles and threat assessment reports →Agencies should carry out an emanation security threat assessment at the earliest possible stage of a project's lifecycle.
new-zealand-information-security-manual-nzism::10.7.8.C.01 · 10.7.8.C.01 Early emanation security threat assessment in projects →The company must document a threat assessment covering deliberate contamination or damage, whether from inside or outside the organisation.
brcgs-global-standard-for-food-safety-issue-9::4.2.2 · 4.2.2 A documented threat assessment and food defence plan reviewed at least annually and on new risks or incidents →NSS-17 + NSS-42-G adopt a graded approach with Computer Security Levels (CSLs) ranging from 1 (highest, applied to safety + security critical systems) to 5 (lowest, applied to general administrative systems).
IAEA-NSS17-GradedApproach-SecurityLevels-Risk-DBT · IAEA NSS-17 - Graded Approach + Computer Security Levels + Risk-Informed Methodology + Threat Assessment + DBT Alignment + Consequence Analysis →Per OWASP SAMM v2 Design business function: secure design practices. Security Practices: (1) Threat Assessment including application threat modelling + risk assessment + (2) Security Requirements including functional security requirements + supplier security r...
OWASPSAMM-2 · Design: Threat Assessment, Security Requirements, Security Architecture →Questions people ask about threat assessment
What is Threat Assessment?
Why is Threat Assessment important for compliance?
Which compliance frameworks address Threat Assessment?
Where can I learn more about Threat Assessment?
See how Threat Assessment applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.