Question1:
To enhance the security of information systems, enterprises are developing and adopting information system management systems. However, if an information management system is exploited, applications and the data they contain will be compromised. Therefore, it is important to perform comprehensive threat modeling throughout the enterprise.
Explain (a) what is threat modeling, and (b) why it is important for an enterprise to address threat modeling extensively.