Threat Modelling · VIVA

Project · risk · architecture

STRIDE across a non-profit’s web app, database, server and network: 12 threats found, rated, and remediated.

• 12 threats identified
• 12 remediated

• My role Assessor and remediator
• Method STRIDE · CVSS
• Scope App · database · server · network
• Result 12 / 12 remediated

Make trust boundaries explicit

The system was drawn as data flows across trust boundaries first, then analysed with STRIDE element by element.

From threats to closed work

Each threat was scored, prioritised and fixed; a leadership-facing report explains the risks and the controls in plain language.