Analyzes companies from an attacker's perspective to identify their most vulnerable points for profit-driven security improvements.