1. Purpose of the gate
Threat model baselined confirms that the attackers in scope, the attack surface and the risk to each asset have been analysed and reviewed, and that every high risk has a treatment decision. It is the basis for the security requirements and, later, for the evaluation laboratory's own analysis.
The gate is about completeness and soundness, not about having no risks. A good threat model can contain many accepted risks, each with an owner and a reason. What the gate must not pass is a model that leaves out interfaces, states or attackers, or ratings nobody can explain.
15 more sections for registered members.