STRIDE, attack trees, security-requirement extraction, mitigation and control selection, compliance mapping.
