StudyToCert

All certifications / SecurityX / Lessons

CompTIA SecurityX CAS-005 · Domain 1: Governance, risk and compliance

Threat modeling methods: STRIDE, PASTA, attack trees, MITRE ATT&CK and attack surface analysis

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Threat modeling is a structured way to ask what could go wrong with a system and what you will do about it, ideally during design when changes are cheapest. A simple loop works for any method: model the system, identify threats, decide on mitigations, and validate that the mitigations work.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study SecurityX for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SecurityX study plan