ISC2 Certified Cloud Security Professional (CCSP) Practice Question

Threat modeling provides the most value when it is performed once the system architecture has taken shape but before implementation begins, allowing security requirements and design changes to be incorporated with minimal cost. In a classic SDLC, this aligns with the design (or architecture) phase, which follows requirements analysis and precedes coding. Performing threat modeling later, during implementation or testing, uncovers issues after code has been written, leading to greater re-work, while performing it during initial requirements gathering is premature because architectural details needed to model threats are not yet available.