Risk Assessment For Enterprise Application In The Insurance Sector

With the rapid pace of digital transformation, many organizations have realized the imminent cyber threats and risks that may impact the organization. In particular, these threats may come from applications used to support business transactions in the organization, and various threat modeling has been widely utilized since its introduction. This research employs STRIDE and DREAD threat modeling methods to assist the risk assessment process of business applications used in the insurance sector to determine the risk score and appropriate risk mitigation to the highly valued assets in the organization.