mitigation strategies, and identifying additional risks that are added by the
software architecture. Applied iteratively through the development life cycle
phases, these methods can help refine the understanding of risk with increasing
degrees of detail and granularity. Several software risk assessment (i.e., threat