Question

A risk analyst is building a threat model for a new customer-facing web application that accepts payment data, passes it to an internal tokenization service, and stores tokens in a database. Using a data flow diagram (DFD) approach, which element should the analyst focus on FIRST to identify the most relevant threats?

Accepted Answer

The trust boundaries where data crosses between components of differing privilege or control levels

Answer

The estimated annualized loss expectancy of a breach involving the payment data store

Answer

The number of source code lines in the tokenization service that require secure code review

Answer

The vendor's SOC 2 report covering the hosting provider's physical data center controls