Use IT security frameworks to map the threat landscape and reduce attack vectors