The DSSA has developed a tailored version of the NIST 800-30 methodology during the first phase of its work. That methodology is described in detail in our Phase 1 Final Report. In addition, the working group is continuously refining an Excel worksheet that makes it very easy to apply the methodology to develop and evaluate risk scenarios. The latest version of this worksheet is posted here. Prior versions of the worksheet, plus risk-scenarios developed and evaluated by working group members, are documented HERE.
7-June-2012–> DSSA - Risk Scenarios v6.xls