01 — Discover
Establish business context, critical assets, threat assumptions, existing controls, and evidence quality.
Method
From exposure to durable control.
Control cycle / 05
A five-stage method connects discovery, analysis, architecture, implementation, and validation without turning security into a one-off report.
02 — Analyze
Trace attack paths, dependencies, trust boundaries, failure modes, and control gaps.
03 — Design
Define the target state, tradeoffs, priorities, ownership, and measurable acceptance criteria.
04 — Implement
Integrate controls in safe phases with operational documentation and knowledge transfer.
05 — Validate
Test effectiveness, close findings, measure coverage, and feed lessons back into the program.