Implementing Digital Forensic Readiness, 2nd Edition

Addendum F: Threat Modeling

Introduction

The threat landscape is in a constant state of evolution in line with dependencies placed on complex technology infrastructures. Building—and sustaining—an effective defense-in-depth strategy to manage threats requires organizations to have a balanced understanding of both their adversaries and themselves so they can comprehend the nature of threats they face.

Threat risk modeling is an essential exercise that must be viewed as a component of every organization’s overall risk management program. This exercise should be completed to build appropriate countermeasures that effectively reduce business risk impact through the identification of contributing threats. It is important that a structured threat risk ...