A structured process for identifying, quantifying, and addressing security risks by analyzing potential attack vectors and vulnerabilities during system design and development.