Identify Assets and Risks

  • Comprehensive asset inventory of physical and digital components (e.g., cloud infrastructure, blockchain nodes, smart contracts, APIs, data storage).

  • Risk identification through threat modeling, vulnerability scanning, and external assessments.

  • Reference: NIST SP 800-30r1

Last updated