Threat modeling should be performed early in the application, system or product lifecycle to identify vulnerabilities before development. Threat modeling identifies vulnerabilities, prioritizes risks, guides security testing and monitoring, informs security requirements, and helps developers understand attacks to build defenses.

1. Threat modeling is used to identify the reasons and methods
that an attacker would use to identify vulnerabilities or threats
in the system. Describe and identify the stage in the application,
system or product lifecycle when threat modeling should be
performed? What are five (5) accomplishments of Threat
modeling?