Standard
Threat Modelling Standard
This standard defines how the organization conducts threat modelling: the structured analysis that identifies what an attacker could do to a system, where, and how, before that system is built or substantially changed. Threat modelling complements the Penetration Testing Standard (which validates controls in practice) and the Vulnerability Management Procedure (which addresses present, known weaknesses) by surfacing the design-level attack surface that those activities cannot reach.
- Type
- Standard
- Version
- 1.0.16
- Date
- 2026-09-24
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material change to the system's trust-boundary inventory, the threat-actor taxonomy, or the underlying STRIDE / LINDDUN methodology
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance and accountability
- 4. Methodology
- 5. Application to specific system types
- 6. Triggers for re-modelling
- 7. Programme metrics
- 8. Framework alignment
- 9. References
Frameworks it maps to
Related documents
- Information Security Policysecurity
- Penetration Testing and Red Team Standardsecurity
- Vulnerability Management Proceduresecurity
- Secure Development and Engineering Policydev-security
- Developer Security Requirementsdev-security
- AI Security and Risk Standardai
- Enterprise Risk Management Standardrisk
Next
All Documents