The Vulnerability Assessment and Mitigation (VAM) methodology helps to think beyond known vulnerabilities and head off surprise attacks.

Finding and Fixing Vulnerabilities in Information Systems