Which IT Risk Assessment Methodlogy Do You Use?

• FAIR - Factor Analysis of Information Risk

• OCTAVE - Operationally Critical Threat, Asset and Vulnerability Evaluation

• TARA - Threat Agent Risk Assessment

• WFITW - Wet Finger In The Wind

• None

• NIST - RMFthe National Institute of Standards and Technology's / Risk Management Framework

• Other: