Threat Modeling
Conceptualize Security Threats to Develop Product Resiliency
What Does a Threat Model Do For Me?
A threat model is a diagram of a device's entire ecosystem designed to help make the full scope of possible threats become clear. The threats identified are not specific attack vectors but conceptual weaknesses that could be exploited if proper design controls and mitigations are not put into place. Adaptiv Risk's threat modeling capability is tailor-made for medical device manufacturers with the following features:
- Interactive: Adaptiv Risk contains an interactive, drag-and-drop threat model designer. No third-party tool required.
- Ready to Go: STRIDE and CAPEC are fully integrated into Adaptiv Risk so assigning threats is a breeze.
- Traceability: The FDA expects to see traceability from a threat model to other aspects of the cybersecurity requirements. Adaptiv Risk makes that easy with built-in traceability capabilities.
A threat model is an integral part of the FDA eSTAR and is required when submitting a 510(K). Contact us if you want to learn more about Adaptiv Risk's threat modeling.