Threat modeling considers possible harm and ways controls could reduce the likelihood or impact of an attack.

### Why this is right Threat modeling examines attack paths, possible consequences, and safeguards. Considering harm helps the organization choose controls that reduce the chance of an attack succeeding or limit its effects. ### The concept A threat model is more than a list of attackers. It connects system structure to potential attacks and outcomes. The resulting analysis can inform priorities and security design. ### The other options - **False**: this would wrongly omit the consequences and mitigations that make threat modeling useful. ### Terms - **Threat modeling**: A structured method for identifying possible attacks and reducing their potential effects. - **Control**: A safeguard used to manage risk. ### Remember A useful threat model links attack paths to harm and safeguards.