Threat modeling is a structured exercise to identify, before a system is built or changed, what could be attacked, how and with what impact, and to decide which controls prevent it. For example, when designing a customer portal, the team reviews how users authenticate and where their data travels. It should be repeated whenever the system changes.
How TecnetOne handles it: Cybersecurity Consulting
threat model, STRIDE, secure design review, design-phase risk analysis