management approach that quantifies total severity weights of relevant attacking
paths for COTS-based systems. T-MAP’s strengths lie in its ability to maintain
sensitivity to an organization’s business value priorities and Information
Technology (IT) environment, to prioritize and estimate security investment