# Threat Modeling

Record: `arch:threat-modeling`
Kind: activity
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: mandatory for sensitive systems
Scope: feature, system, architecture
Canonical: https://banes-lab.com/ontology#arch-threat-modeling

## Repair

- Refactored by: Add Threat Model, Add Mitigation
- Detected by: missing threat model for sensitive flow
- Violated by: security-sensitive change without threat review
- Measured by: threat model coverage
- Enforced by: security review gates

## requires

- [Assets](https://banes-lab.com/records/lex/assets.md)
- [Trust Boundaries](https://banes-lab.com/records/lex/trust-boundaries.md)
- [Threat Scenarios](https://banes-lab.com/records/lex/threat-scenarios.md)

## reinforces

- [Security by Design](https://banes-lab.com/records/arch/security-by-design.md)
- [Risk Management](https://banes-lab.com/records/arch/risk-management.md)

## enables

- [Control Selection](https://banes-lab.com/records/lex/control-selection.md)

## conflicts-with

- [Assumption-Driven Security](https://banes-lab.com/records/lex/assumption-driven-security.md)
- [Security Theater](https://banes-lab.com/records/arch/security-theater.md)

## tensions-with

- [Delivery Speed](https://banes-lab.com/records/lex/delivery-speed.md)

## tensions

- [Threat Modeling Delivery Speed](https://banes-lab.com/records/tension/delivery-speed-threat-modeling.md)

## referenced-by

- [Security by Design](https://banes-lab.com/records/arch/security-by-design.md)