ISC2 Certified Cloud Security Professional (CCSP) Practice Question

The Process for Attack Simulation and Threat Analysis (PASTA) is a seven-stage, risk-centric threat-modeling methodology. It emphasizes simulating realistic attacker tactics and enumerating business impacts so that mitigation priorities align with risk. STRIDE is a mnemonic for classifying threats, not a full risk-centric process. DREAD is only a scoring model used after threats are identified. ATASM focuses on architecture and attack surfaces but does not include iterative attack simulation. Therefore, PASTA most closely satisfies management's stated needs.