What reference framework or standard is used for the identification and taxonomy of threats and vulnerabilities in the assessment process

I am looking to properly assess threats and vulnerabilities for organizational assets, using an endpoint as an example.
However, I have noticed there are multiple frameworks and derivations for threat and vulnerability classification (e.g…. Continue reading What reference framework or standard is used for the identification and taxonomy of threats and vulnerabilities in the assessment process