[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-detail-573798-en":53,"doc-seo-573798-105":73},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":5,"data":54},{"doc_id":55,"user_id":56,"nickname":57,"user_avatar":58,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":60,"doc_content":61,"file_id":62,"file_url":63,"file_type":64,"file_size":65,"view_count":9,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":42,"language":66,"language_code":67,"site_id":68,"html_lang":67,"table_of_contents":69,"faqs":70,"seo_title":71,"seo_description":60,"update_tm":72,"read_time":8},573798,2336474466712,"Quinn Holloway","https://ap-avatar.wpscdn.com/davatar_a8503ba1806abce46bf441b54a3ca4cd","Guide to Cyber Threat Modelling - February 2021","Guide to Cyber Threat Modelling (February 2021) explains how system owners should prioritise cybersecurity risks when limited resources make it impossible to mitigate every vulnerability. It defines threat events and shows why identifying these events is central to determining likelihood and impact. The guide then presents a practical, systematic approach for building robust threat models, including system-level methods, common missteps, and how to integrate threat modelling into cybersecurity risk assessment.","GUIDE TO CYBER THREAT MODELLING  \nFEBRUARY 2021  \nCONTENTS  \n1 INTRODUCTION ................................................................................................................2  \n1.1 Importance of Threat Modelling...................................................................................................... 2  \n1.2 Purpose of Document .......................................................................................................................... 2  \n1.3 Scope .......................................................................................................................................................... 3  \n2 APPROACH ........................................................................................................................4  \n2.1 System Level Approach .......................................................................................................................4  \n2.2 Common Missteps in Threat Modelling........................................................................................ 5  \n2.3 Integrating Threat Modelling into Risk Assessment Process ................................................ 5  \n3 METHODOLOGY ................................................................................................................7  \n3.1 Overview of Method............................................................................................................................. 7  \n3.2 Step 1: Preliminaries and Scope Definition.................................................................................. 7  \n3.3 Step 2: System Decomposition......................................................................................................... 8  \n3.4 Step 3: Threat Identification .............................................................................................................. 9  \n3.5 Step 4: Attack Modelling.................................................................................................................. 14  \n3.6 Step 5: Bringing Everything Together ......................................................................................... 16  \n4 REFERENCES.....................................................................................................................21  \nANNEX A-SAMPLE THREAT MODELS.................................................................................22  \nA1- Information Communication Technology (ICT)– Web Application and Database System................................................................................................................................................................................. 22  \nA2- Industrial Control System (ICS)– According to Purdue Model............................................. 25  \nANNEX B – OTHER METHODS...............................................................................................28  \n1 INTRODUCTION  \n1.1 Importance of Threat Modelling  \nDue to finite resources of the system owner, it is difficult to mitigate every vulnerability within a system. Therefore, system owners must prioritise risks and treat them accordingly. A key step in determining risk is identifying threat events, which contribute to the likelihood and impact of risk. A threat event refers to any event during which a threat actor 1, by means of threat vector2, acts against an asset in a manner that has the potential to cause harm. In the context of cybersecurity, threat events can be characterised by the tactics, techniques and procedures (TTP) employed by threat actors.  \nThreat modelling helps owners comprehensively identify threat events that are relevant to the system, so that owners can focus on implementing effective control measures to protect key components within the system. This makes it harder for the adversary to compromise key components by establishing a foothold, pivoting and moving laterally within the system. Consequently, system owners can stem and curtail t","cbCaid2YcdhU4wM9","https://ap.wps.com/l/cbCaid2YcdhU4wM9","pdf",1300279,"English","en",105,"# Introduction\n## Importance of Threat Modelling\n## Purpose of Document\n## Scope\n# Approach\n## System Level Approach\n## Common Missteps in Threat Modelling\n## Integrating Threat Modelling into Risk Assessment Process\n# Methodology\n## Overview of Method\n## Step 1: Preliminaries and Scope Definition\n## Step 2: System Decomposition\n## Step 3: Threat Identification\n## Step 4: Attack Modelling\n## Step 5: Bringing Everything Together\n# References\n# Annex A - Sample Threat Models\n## ICT– Web Application and Database System\n## Industrial Control System (ICS)– According to Purdue Model\n# Annex B – Other Methods","[{\"question\":\"Why is threat modelling important when resources are limited?\",\"answer\":\"Because system owners cannot mitigate every vulnerability, they must prioritise risks. Threat modelling helps identify relevant threat events that drive likelihood and impact, enabling targeted control measures.\"},{\"question\":\"What is the purpose of this guide?\",\"answer\":\"It supplements CSA’s guide on conducting cybersecurity risk assessment by elaborating on threat modelling. It provides approaches, methods, and a suggested framework with practical examples to derive robust threat models and threat events.\"},{\"question\":\"How should threat modelling results be used in practice?\",\"answer\":\"System owners can incorporate identified threat events into their cybersecurity risk assessment to develop and prioritise effective controls, helping reduce blind spots and disrupt an adversary’s kill-chain.\"}]","Guide to Cyber Threat Modelling - February 2021 | PDF",1791946390,{"code":4,"msg":74,"data":75},"ok",{"site_id":68,"language":67,"slug":76,"title":59,"keywords":77,"description":60,"schema_data":78,"social_meta":133,"head_meta":135,"extra_data":137,"updated_unix":138},"guide-to-cyber-threat-modelling-february-2021","",{"@graph":79,"@context":132},[80,96,115],{"@type":81,"itemListElement":82},"BreadcrumbList",[83,87,90,93],{"item":84,"name":85,"@type":86,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":88,"name":10,"@type":86,"position":89},"https://docshare.wps.com/template/",2,{"item":91,"name":51,"@type":86,"position":92},"https://docshare.wps.com/template/general/",3,{"item":94,"name":59,"@type":86,"position":95},"https://docshare.wps.com/template/guide-to-cyber-threat-modelling-february-2021/573798/",4,{"url":94,"name":59,"@type":97,"image":98,"author":103,"headline":59,"publisher":105,"fileFormat":108,"inLanguage":67,"description":60,"dateModified":109,"datePublished":109,"encodingFormat":108,"isAccessibleForFree":110,"interactionStatistic":111},"DigitalDocument",{"url":99,"@type":100,"width":101,"height":102},"https://docshare.wps.com/thumbnails/guide-to-cyber-threat-modelling-february-2021/573798.png","ImageObject",442,249,{"name":57,"@type":104},"Person",{"url":84,"name":106,"@type":107},"DocShare","Organization","application/pdf","2026-10-14",true,{"@type":112,"interactionType":113,"userInteractionCount":9},"InteractionCounter",{"@type":114},"ViewAction",{"@type":116,"mainEntity":117},"FAQPage",[118,124,128],{"name":119,"@type":120,"acceptedAnswer":121},"Why is threat modelling important when resources are limited?","Question",{"text":122,"@type":123},"Because system owners cannot mitigate every vulnerability, they must prioritise risks. Threat modelling helps identify relevant threat events that drive likelihood and impact, enabling targeted control measures.","Answer",{"name":125,"@type":120,"acceptedAnswer":126},"What is the purpose of this guide?",{"text":127,"@type":123},"It supplements CSA’s guide on conducting cybersecurity risk assessment by elaborating on threat modelling. It provides approaches, methods, and a suggested framework with practical examples to derive robust threat models and threat events.",{"name":129,"@type":120,"acceptedAnswer":130},"How should threat modelling results be used in practice?",{"text":131,"@type":123},"System owners can incorporate identified threat events into their cybersecurity risk assessment to develop and prioritise effective controls, helping reduce blind spots and disrupt an adversary’s kill-chain.","https://schema.org",{"og:url":94,"og:type":134,"og:title":59,"og:site_name":106,"og:description":60},"article",{"robots":136,"canonical":94},"index,follow",{"doc_id":55,"site_id":68},1792019576]