The IT Law Wiki

Definition[]

Security Threat and Risk Assessment (STRA) is a tool that identifies general business and security risks for the purpose of determining the adequacy of security controls with the service and mitigating those risks.