https://www.lifars.com/2021/03/risk-assessment-nist-800-30-vs-iso-iec-27005/
Risk Assessment: NIST 800-30 vs ISO/IEC 27005