Having a clear understanding of where your data is being consumed is a critical first step toward being able to secure and ultimately protect it. Using data flow diagrams, it is possible to know the ...

Because data flow diagrams were developed by system engineers rather than security pros, they include a lot of overhead that isn’t necessary for threat modeling.

Examples of errors include forgetting to include a data flow or pointing an arrow in the wrong direction. A key reason why keeping data flow diagrams up-to-date is to address issues of system growth.