“In order to make your system resilient, you have to take into account that every inbound from other systems, whether they're inside the company or not, are potentially inbound attack vectors, and therefore they're outside of your control.”

Transcript evidence from Geoff Hill -- Rapid Threat Model Prototyping Process.