Threat modeling is useful only after an attack has already occurred.

### Why this is right Threat modeling can be used during planning to identify possible attacks and select safeguards before an incident. It is not limited to post-incident investigation. ### The concept A proactive security approach tries to prevent or reduce threats in advance. Threat modeling supports that approach by considering attack paths and consequences while a system or strategy is being designed. Investigating what already happened is a different, reactive activity. ### The other options - **True**: this confuses preventive analysis with incident investigation, which occurs after or during an event. ### Watch out The word “only” makes the statement too restrictive. ### Terms - **Proactive security**: security work intended to prevent threats or reduce their effects before an incident.