https://users.encs.concordia.ca/~clark/courses/1601-6150/scribe/L04c.pdf
https://www.sans.org/reading-room/whitepapers/auditing/overview-threat-risk-assessment-76
https://www.owasp.org/index.php/Threat_Risk_Modeling
