The attack paths on your real systems, their likelihood, gravity and risk level.
Fourth EBIOS Risk Manager workshop, on your real systems: for each scenario the operational attack path (know, enter, find, exploit), the vulnerabilities used, its likelihood, gravity and risk level, and what your architects must verify. Works alone, or after workshop 3.
On your systems
Know, enter, find, exploit, against your architecture and vulnerabilities.
Judged scenario by scenario
Likelihood against the measures you have in place; the level is calculated.
What to verify
The assumptions your architects must check.