Threat model

A threat model is like a map — it helps you identify the things that might hurt you, so that you can plan how to defend yourself. In a cyber security threat model, you list all the things that might be able to cause harm to your online data and services, like bad guys trying to access your information without permission or hackers sending viruses to your computer. You also list how likely each threat is, so you can prioritize how you protect yourself. For example, if you’re a small business, you might prioritize defending against someone stealing personal data more than worrying about hackers sending viruses. A threat model helps you figure out the best ways to protect yourself from harm.