5-Step-threat-modelin-process-to-improve-resiliency-identity-close-gaps-

1.What am I concerned about?

Select a digital asset-Digital Assets Includes: Systems, Processes, data, technology.

2. What could fo wrong?

Identify attack scenarios: Attackers & thier tactics, techniques, procedures. identify available detection methods.

3. What can protected from attacks?

Check existing controls: Preventive, detective & administrative controls. Check adequacy & effectiveness.

4. Is Protection sufficient?

Estimate residual risk: Cummulative risk for business interuption, regulatory fines, data loss & brand impact.

5. How do I justly cost for action?

Build business case: Add new controls, improve effectiveness, replace with better controls. Cost of doing vs cost of not doing?