Solution-level threat modeling
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
threat-model a whole solution and rank threats by risk.
Planned topics
- Start from a data-flow view with trust boundaries; ask what can go wrong at each boundary (a method such as STRIDE helps; verify the method wording before recording).
- Look at the whole: integrations, admin paths, third parties, and people processes.
- Rate each threat by likelihood and impact; threats are not equal.
- Every top threat gets a control, an owner, and a way to check the control works.
Draft outline details
Demonstration
a threat table: ID, boundary, threat, likelihood, impact, control, owner, evidence.
Check your understanding
Why rank threats before choosing controls?
Show answer
Budget and effort are limited; controls should follow risk, not habit.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.