1. Identify all the DFD elements. (People often miss the data flows.
2. Identify all threat types to each element.
3. Identify three or more threats: one for a data flow, one for a data store and one for a process.
4. Identify first-order mitigations for each threat.Extra credit: The level 1 diagram is not perfect. What would you change,add, or remove?