Threat Modeling ICS

Instructions for AI security agents reviewing Microsoft Threat Modeling Tool threat-list exports.

[!NOTE] Treat the Microsoft TMT CSV as the primary artifact. Preserve native TMT identifiers, titles, categories, descriptions, priorities, states, and analyst-entered notes. Perform review by appending new columns to the exported dataset rather than rewriting the model into a different structure.

[!NOTE] When a Mermaid diagram is absent, a Microsoft TMT model file (*.tm7) is an acceptable architecture source. Extract system elements, trust boundaries, interfaces, and data flows from the model before reviewing the CSV.

• 1. Benefits
• 2. Principles
• 3. Frameworks
  • 3.1. Microsoft Threat Modeling Tool
  • 3.2. STRIDE
  • 3.3. MITRE ATT&CK
  • 3.4. CWE
  • 3.5. CVSS
  • 3.6. BSI Likelihood of Exploit