CISSP-ISSMP: Information Systems Security Management Professional

Misuse-case modeling, threat and risk modeling, and security design and architecture reviews are design-phase activities that evaluate the proposed system’s attack surface, architecture, and safeguards. Their outputs establish security requirements and derive security test cases. OWASP describes misuse and abuse cases as a way to identify vulnerabilities, countermeasures, and the security requirements needed to mitigate risks.