Overview

What is threat analysis or threat modelling and how does it benefit me?

A threat can be defined as any condition, circumstance, incident or person with the potential to cause harm by exploiting a vulnerability in a system.

The purpose of a threat model is to document all possible threats against an application with the goal of implementing countermeasures at the design level where feasible.

International standards about risk management always document the necessity to perform an analysis of the threats. Astyran can help you analyse the threats to your business processes. Threats can be categorized as standard threats, common to all applications or threats that are really specific to your application.

Generic threats and risks may be handled by standard countermeasures while specific threats will require special care and consideration. The creation of a threat model helps the development team consider the security threats that your applicaion will face and supports the development of mitigation strategies in the design and architecture phase of the development cycle.

Threat analysis and modelling also greatly improves communication between business and technical level withing your company.

Key Differentiators

What makes us stand out from the crowd?

Asytran consultants have a deep understanding of the security of applications and a large experience and insight in IT processes.

A threat model is often created by having multiple brainstorming sessions with key staff members of business or development departements.