threat-modeling

Identifies what can go wrong, security-wise, in a design before or while it is built: what is being protected, where the trust boundaries are, which threats apply at each and what mitigates them. Use when a change adds a component, interface, data flow, integration or new kind of sensitive data, or when asked for a threat model.