Summary

This chapter provided an overview of key threats, risks, and governance factors that CSAs must consider when designing security architectures and programs. This included the following:

• Threat landscape:
  • Architects must have in-depth knowledge of threat actors, their motivations, and TTPs. Staying current on emerging threats through TI is critical.
  • Threat modeling using approaches such as STRIDE provides a systematic way to identify vulnerabilities and attack vectors.
• Risk management:
  • Risk assessments, both initial and residual, are essential to identify, analyze, and prioritize risks. Special consideration should be given to risks such as data breaches, ransomware, and third-party vendors.
  • Risk treatment involves selecting mitigation strategies to reduce unacceptable risks. This may include controls, process changes, or risk transfer.
• Governance:
  • Policies, standards, and procedures form the foundation of cybersecurity governance. Compliance with regulations such...