Examples of errors include forgetting to include a data flow or pointing an arrow in the wrong direction. A key reason why keeping data flow diagrams up-to-date is to address issues of system growth.

Because data flow diagrams were developed by system engineers rather than security pros, they include a lot of overhead that isn’t necessary for threat modeling.