Explain how threat modeling can help connect a system’s design to security controls.

### The concept Threat modeling is a structured way to examine how a system might be attacked. It considers how data moves, where an attacker could interact with that data or system, and what consequences an attack could cause. The organization then identifies safeguards that may lower the chance of an attack or limit its effects. A useful model connects security decisions to the system and the organization’s objectives. ### What a good answer covers - How data moves through the system. - Where attackers could interact with it. - What harm could result. - How controls can reduce likelihood or impact. ### Terms - **Threat modeling**: structured analysis of possible attacks and ways to reduce their risk.