Description: A set of risk taxonomy (O-RT) and risk analysis (O-RA) specifications for describing and assessing information security risks (including human and business factors).

Host Organization: The Open Group

Status: Stable, open industry standard.

Find out more at: https://www2.opengroup.org/ogsys/catalog/C13G (O-RA) and https://www2.opengroup.org/ogsys/catalog/C13K (O-RT)