Threat modeling systems and related methods including mitigating components

A threat modeling system, comprising:

• one or more computing devices communicatively coupled with one or more data stores, the one or more data stores comprising:
• a plurality of threat model components stored therein;
• a plurality of threats stored therein, wherein each threat is associated with at least one of the threat model components through the one or more data stores;
• a plurality of security requirements stored therein, including an indication for each security requirement indicating whether the security requirement comprises a compensating control, wherein each compensating control is associated with at least one of the threats through the one or more data stores;
• a diagram interface displayed on one or more displays of the one or more computing devices, the diagram interface configured to, in response to receiving one or more user inputs, diagram one of a system, an application, and a process, using visual representations of the threat model components stored in the one or more data stores, to define a threat model;
• a threat report interface displayed on the one or more displays, the threat report interface including a threat report displaying each threat that is associated through the one or more data stores with one of the threat model components included in the threat model;
• and;
• a compensating control report displayed on the one or more displays, the compensating control report displaying each compensating control that is associated through the one or more data stores with one of the threats included in the threat report.

A threat modeling system, comprising:

• one or more computing devices communicatively coupled with one or more data stores, the one or more data stores comprising:
• a plurality of threat model components stored therein;
• a plurality of threats stored therein, each of the threats associated with at least one of the threat model components through the one or more data stores;
• a plurality of mitigating components stored therein and associated with the threats through the one or more data stores, wherein each mitigating component comprises one of a security requirement and a compensating control;
• a diagram interface displayed on one or more displays of the one or more computing devices, the diagram interface configured to, in response to receiving one or more user inputs, diagram one of a system, an application, and a process, using visual representations of the threat model components stored in the one or more data stores, to define a threat model;
• and
• one or more interfaces displayed on the one or more displays and displaying:
• a threat report displaying each threat that is associated through the one or more data stores with one of the threat model components included in the threat model;
• and
• a display correlating one or more of the mitigating components with one or more mitigatable threats included in the threat report, the one or more mitigating components configured to mitigate the one or more mitigatable threats.