v0.4 | November 2026
Scope · Landscape · Model · Boundaries · Threats · Prioritise · Mitigate · Validate · Record · Continuous
threatmodel.govassured.com
Quick checks 0/10
The lifecycleSelect any stage for the purpose, the steps, the sources and a quick check.
The threat modelling lifecycle — ten stages
CURRENT CATALOGUES AND GUIDANCENCSC threat modelling v2.0 · MITRE ATT&CK v20.1 · MITRE ATLAS 2026.10 · OWASP LLM Top 10 2026 · OWASP Agentic AI · NIST AI RMF 1.0 · SLSA v1.2For people working in cyber security, resilience and assurance. A community teaching resource, not a standard and not official guidance.
THE FOUR QUESTIONS | THE HANDRAIL FOR THE WHOLE PASS
What are we working on?What can go wrong?What will we do about it?Did we do a good enough job?
WHAT’S NEW 2024–2026Dates and versions were checked on 10 November 2026 (Europe/London). Open the What’s new tab for the full briefing.
The lifecycle, end to end
TEN STAGES
FEEDBACK LOOP — when the design, the threats or your assumptions change, stage 10 returns you to stage 1 and the model is opened again
WHEN TO REOPENChange Data flows, trust boundaries, identities, a model or agent, or a dependency alterSignal A relevant incident or advisory appearsCadence On the planned review cycle you have agreedLearn Monitoring, incidents and lessons feed back into stages 2 and 5Retire Close the model when the service itself is retired
