Threat Modeling and Risk

The RISCS report I mention is at https://bpb-eu-w2.wpmucdn.com/blogs.bristol.ac.uk/dist/3/939/files/2024/08/RISCS-Cyber-Risk-Quantification-Research-Project-D1_AW.pdf and the blog post about coaching is at https://shostack.org/blog/coaching/