CY0-001: CompTIA SecAI+

Threat modeling begins by defining the architecture and its trust levels, including the boundaries where components operate under different security assumptions. Those boundaries establish the context for identifying threats, evaluating resource risk, and applying security controls. AWS Well-Architected guidance likewise places identifying components and trust levels before threat identification, mitigations, and risk assessment.