## 4 Results
### Risk Assessment-Related Methods and Models
\begin{table}
\begin{tabular}{l l l l} \hline \hline
**Ref.** & **Title** & **Description** & **Cat.** \\ \hline
[109] & [PERSON]’s Three-Level Model of Situational Awareness & Model for understanding and developing situational awareness. & Model \\ \hline
[130] & OCTAVE & Operationally Critical Threat, Asset, and Vulnerability Evaluation. & Method \\ \hline
[130] & FAIR & Factor Analysis of Information Risk. & Method \\ \hline
[130] & CRAMM & Central Computer and Telecommunications Agency (CCTA) Risk Analysis and Management Method. & Method \\ \hline
[117] & CVSS & Common vulnerability scoring system (CVSS); for measuring the severity of vulnerabilities. & Method \\ \hline
[101] & STRIDE Threat Model & Threat modeling method focusing on six categories: Spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. & Model \\ \hline
[9] & PASTA & Threat modeling method used to align technical requirements with business objectives. & Model \\ \hline
[9] & DREAD & Method for risk assessment that evaluates threats based on five factors: Damage, reproducibility, exploitability, affected users, and discoverability & Method \\ \hline
[121] & Holistic Risk Assessments & Assessment method considering interconnected and interdependent risks, such as disaster risks, cybersecurity risks, and cascading effects. & Method \\ \hline
[114] & Security Score Model & Model that quantifies security based on predefined scoring criteria. & Model \\ \hline
[130] & Direct Testing Method & Risk assessment through audit, exercise, and penetration testing. & Method \\ \hline
[115] & Five-Phase Resilience Assessment Framework & Framework based on Bayesian network that quantifies resilience contributors & M.F. \\ \hline
[110] & RAMA & Framework for risk analysis using factors like probability, impact, historical data, and contextual relevance. & M.F. \\ \hline
[105] & ICAO Security Risk Assessment Methodology for security risk assessment using probability and impact in aviation security. & Method \\ \hline
[101] & TARA (Threat Analysis and Risk Assessment) & Combination of STRIDE for categorizing threat scenarios and DREAD for quantifying feasibility, likelihood, and impact. & Method \\ \hline
[101] & System Security Risk Assessment (SSRA) & Method defined by DO-326A/ED202A for security risk assessment in & Method \\ \hline
[131] & Logical Attack Graph (LAG) & A method for visualizing potential attack paths and assessing their impact on systems. & Method \\ \hline
[131] & Mission Impact Propagation Graph (MIPG) & Graph-based method for assessing how cyber-attacks propagate through missions. & Method \\ \hline
[131] & Mission Impact Assessment Graph (MIAG) & Graph-based method for assessing the impact of threats on mission-critical operations. & Method \\ \hline
[39] & Event Tree Analysis & Systematic approach for analyzing the possible outcomes following an initial event. & Method \\ \hline
[39] & Physical and Cyber Risk Analysis Tool (PACRAT) & Tool for conducting comprehensive risk analysis that includes both physical and cyber threats. & Tool \\ \hline
[117] & Threat, Vulnerability, and Risk Analysis (TVRA) & Method for assessing threats, vulnerabilities, and overall risk in systems. & Method \\ \hline
[117] & i-TRACE Risk Assessment & Framework for risk assessment combining traceability and vulnerability management. & M.F. \\ \hline
[107] & SOHRA (Shipboard Operation Human Reliability Analysis) & Method for assessing human error probability in shipboard operations. & Method \\ \hline
[20] & Extreme Value Theory (EVT) & Statistical approach for modeling extreme risk events in cybersecurity. & Model \\ \hline \hline \end{tabular}
\end{table} 
Table 6: _Cont._Lastly, some documents not specified in the table--such as Bank for International Settlements (BIS) [141]--recommend other standards, methods, and guidelines to increase resilience, but do not specify any particular risk assessment methods themselves.