“At the highest levels, when we threat model, we ask 4 key questions. 1, what are we working on? 2, what can go wrong? 3, what are we going to do about it? And 4, did we do a good enough job?”

Transcript evidence from The Threat Modeling Manifesto – Part 2.