“The threat modeling aspect of this is understanding your system, understanding the potential threats in that system, and then figuring out ways to mitigate those or create countermeasures, and then, plan out that as essentially your design of your system.”

Transcript evidence from Chris and Robert -- The Activities of the Secure Development Lifecycle.