Threat modeling includes documenting possible threats and security controls that could reduce their likelihood or impact.

### Why this is right The lesson identifies documenting potential threats and possible controls as part of threat modeling. Controls are considered in terms of reducing the chance of a threat succeeding or limiting the harm if it does. ### The concept A threat model helps organize security thinking around system data flows, possible attack paths, and safeguards. It supports prioritization by showing which threats matter and what mitigations may be useful. It is a planning aid, not a guarantee that a system is safe. ### Terms - **Mitigation**: an action or safeguard that reduces risk. - **Likelihood**: an estimate of how probable an event is. - **Impact**: the harm or consequence if an event occurs. ### Remember A useful threat model connects threats to practical safeguards.