4R and 4D Threat Modelling
You may be familiar with the qualitative risk equation: consequence multiplied by likelihood. Consider a similar approach here. We will assess the consequence of the 4 R’s: Revenue, Reputation, Regulation, and Resiliency. And we will compare them against the likelihood of the 4 D’s: Disruption, Destruction, Degradation, Deception.