Threat Modeling Skill

Purpose

This skill provides structured methodology for identifying, analyzing, and mitigating security threats in the CIA platform using industry-standard frameworks including STRIDE, PASTA, and attack tree analysis. It ensures proactive security design aligned with Hack23 ISMS requirements.

When to Use This Skill

Apply this skill when:

• ✅ Designing new features that handle sensitive political data
• ✅ Integrating external APIs (Riksdagen, World Bank, Election Authority)
• ✅ Implementing authentication or authorization mechanisms
• ✅ Modifying security architecture or trust boundaries
• ✅ Before major releases to identify residual risks
• ✅ After security incidents to prevent recurrence
• ✅ Conducting annual security architecture reviews

Do NOT use for:

• ❌ Routine bug fixes without security implications