A method to assess ‘forgivable’ vs ‘unforgivable’ vulnerabilities

Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.

Source:: NCSC Guidance