Two types of diagrams are required for threat analysis: A service architecture diagram One or more information flow diagrams (either data flow diagrams, sequence diagrams, or both) Examples of each of ...