Business Pitch Dictionary by pitch.dog
Reliability, security & resilience · Working

Threat model

Also called: security threat model

ELI5

A map of what could attack the system and how to reduce the risk.

Used in conversation

“The threat model should be updated when architecture changes.”

Definition

A structured analysis of assets, threats, attack paths and mitigations.

Here “Threat model” means: A structured analysis of assets, threats, attack paths and mitigations.

Pitch context

You will see “Threat model” in product strategy decks, roadmaps, experiments and architecture reviews when the discussion reaches reliability, security & resilience.

Why it matters: In reliability, security & resilience, the scope can change what data may be used, who may access it and which controls are required.

Sources & evidence · 2

Direct term-level sources and supporting source families.