Planning Tools and Resources

Threat Modeling Tools

• Microsoft Threat Modeling Tool
• OWASP Threat Dragon
• IriusRisk
• ThreatModeler

Risk Assessment Tools

• CVSS Calculator
• MITRE Medical Device Rubric
• NIST Risk Assessment Templates

Architecture Tools

• Draw.io/Diagrams.net
• Microsoft Visio
• Lucidchart
• PlantUML

Standards and Guidance

• MITRE Playbook for Threat Modeling
• AAMI SW96 for risk management
• ISO 14971 for integration
• NIST Cybersecurity Framework

Sources

Primary documents named in this section:

1. Common Vulnerability Scoring System (CVSS), FIRST.Org, Inc..
2. Playbook for Threat Modeling Medical Devices, MITRE and MDIC.
3. ANSI/AAMI SW96:2023, Standard for medical device security: Security risk management for device manufacturers, AAMI.
4. ISO 14971:2019, Medical devices: Application of risk management to medical devices, ISO.
5. NIST Cybersecurity Framework, NIST.