NIST SP 800-30 Rev. 1: Guide for Conducting Risk Assessments (NIST, Sep 2012)

NIST's method for information security risk assessment, widely used for device threat and risk analysis.