No single organisation is able to define and keep on top of best practise. Threat and Risk Modelling as a Service (TRiMaaS?) has become a thing at multiple levels. For business cyber risk there are platforms like the one adopted by AXA XL (below). For developers there are platforms like ThreatModeler …:
Following the successful adoption of Guidewire Cyence Risk Analytics (Cyence) by AXA XL’s cyber insurance business in North America, the major insurer is now rolling out the risk modelling tool not only across business lines but also globally.
Designed to help quantify the financial impact of cyber risk exposures, Cyence uses real-time analytics and expertise in predicting the probability of a cyber event for a company. It helps underwriters and pricing specialists by significantly enhancing the underwriting process and AXA XL’s offering.