CS0-003: CompTIA Cybersecurity Analyst (CySA+)

Threat modeling systematically evaluates a system’s design, attack surface, potential attackers, and threats so that risks can be identified and addressed before production deployment. NIST describes threat modeling as a form of risk assessment and notes that it can identify design-level security issues.