← CIS Controls v8 in plain English

16.14

Control 16 / Application Software Security

Conduct Threat Modeling

Think of it likePlanning for potential break-ins by identifying the weakest points in your home’s layout.

In plain English

The family conducts threat modeling to identify and mitigate potential risks in their software designs, just as they would plan for possible break-ins by identifying weak points in their home’s layout.