This presentation is focused on the tools and techniques that are needed in order to identify subset of threats, check for completeness, socio technical modelling and identify and prioritise control.