“If unmitigated threats become issues, then as they close, the threat model is up to date.”

Transcript evidence from Mike Goodwin -- The OWASP Threat Dragon.