← CIS Controls v8 in plain English

16.14 IG3

Control 16 / Application Software Security

Conduct Threat Modeling

Think of it likePlanning for potential break-ins by identifying the weakest points in your home’s layout.

In plain English

Threat modeling maps out potential risks in their software designs, the way one would spot the weakest points of a home.

Related CSF subcategories (unofficial mapping)