Simple version for SMEs and local government.

Risks are analysed in several dimensions: confidentiality, integrity, availability, authenticity and accountability.

Safeguards (or countermeasures) are proposed to address the risk, with the residual risk being analysed through various stages of treatment.