“I'd create a diagram that shows a user with a browser on their laptop and they're connecting to a web interface with a backend, and then there's an administrative interface for the, the legal person to go evaluate it, and there's trust boundaries, there's firewalls and things, and then I'd start looking at,”

Transcript evidence from Bill Dougherty — INCLUDES NO DIRT, practical threat modeling for healthcare and beyond.