MITRE ATT&CK
Knowledge base of adversary tactics and techniques
Standards
What?! Compliance ain’t no security? You must be kidding. 
NIST CSF
Cybersecurity Framework
NIST PF
Privacy Framework
NIST RMF
Risk Management Framework
NIST SP 800-30
Guide for Conducting Risk Assessments
NIST SP 800-39
Managing Information Security Risk - Organization, Mission, and Information System View