{"references": ["Regulatory Compliance Modelling Using Risk Management Techniques. https://doi.org/10.1109/AIIoT52608.2021.9454188", "Cybersecurity for SMEs: Introducing the Human Element into Socio-technical Cybersecurity Risk Assessment. https://doi.org/10.5220/0010332902660274", "Systematic Risk Assessment of Cloud Computing Systems Using a Combined Model-based Approach. https://doi.org/10.5220/0009342700530066", "Modelling compliance threats and security analysis of cross-border health data exchange. https://doi.org/10.1007/978-3-030-32213-7_14", "Trust Modelling in 5G mobile networks. https://doi.org/10.1145/3229616.3229621", "Trustworthy systems design using semantic risk modelling. http://eprints.soton.ac.uk/id/eprint/383465", "A Novel Risk-based Approach for Online Community Management. http://eprints.soton.ac.uk/id/eprint/354147", "Next generation community management: A proactive risk-based approach. http://eprints.soton.ac.uk/id/eprint/354148"]}

The System Security Modeller (SSM) automates much of a cyber-security risk assessment. As well as looking for cyber threats it will also check for compliance (e.g. GDPR). It follows the process of ISO 27005 and thereby supports ISO 27001 compliance.