“I took those and I put those into the board, and then I added Post-its for pink ones for the threats, orange ones for proposed mitigations, and green ones for mitigations that are already existing in the design or in the implementation.”

Transcript evidence from Brett Crawley -- Threat Modeling Gameplay with EoP.