Security Threat and Risk Assessment

Definition
Security Threat and Risk Assessment (STRA) is a tool that identifies general business and security risks for the purpose of determining the adequacy of security controls with the service and mitigating those risks.