Technique · Threat modeling
Risk prioritization
Orders confirmed weaknesses by exposure, exploit likelihood and impact so fixes start where risk is highest.
Sub-techniques
-
Decision trees
V1063.001SSVC decisions from exploitation, exposure and impact.
-
Likelihood scores
V1063.002EPSS for known vulnerabilities.