Architects debating a new permitting portal disagree: one wants STRIDE-style threat categories; another says abuse cases are unnecessary because 'users are mostly honest.' What should the program choose?

Structured threat modeling methodologies systematically enumerate threat types and misuse cases against the architecture. Assuming benign user intent leaves spoofing, elevation of privilege, and information disclosure unexamined. CISSP expects application of recognized modeling concepts rather than ad hoc optimism.