Threats will be the practices, procedures and solutions used by risk actors that have the potential to cause damage to an organization's belongings. That will help establish probable threats to each asset, make use of a danger library like the Mitre ATT&CK Knowledge Base and sources in the Cyber Threat Alliance, which both of those give large-e