# Threat Model Report: {{engagement_name}}

**Type:** {{engagement_type}}
**Period:** {{start_date}} — {{end_date}}
**Status:** {{status}}
**Prepared by:** NERF

---

## 1. System Overview

{{mission}}

### System Description

{{system_description}}

### Technology Stack

{{technology_stack}}

---

## 2. Data Flow Diagram

{{data_flow_diagram}}

---

## 3. Trust Boundaries

{{#trust_boundaries}}
### Boundary: {{name}}

- **Components Inside:** {{inside}}
- **Components Outside:** {{outside}}
- **Data Crossing:** {{data}}
- **Controls:** {{controls}}

{{/trust_boundaries}}

{{^trust_boundaries}}
Trust boundary analysis was not recorded for this engagement.
{{/trust_boundaries}}

---

## 4. STRIDE Analysis

| Category | Threat | Component | Risk | Mitigation |
|----------|--------|-----------|------|------------|
{{#stride_threats}}
| {{category}} | {{threat}} | {{component}} | {{risk}} | {{mitigation}} |
{{/stride_threats}}

{{^stride_threats}}
STRIDE analysis was not performed during this engagement.
{{/stride_threats}}

---

## 5. Risk Assessment

{{#findings}}
### [{{id}}] {{title}}

| Field | Value |
|-------|-------|
| **Severity** | {{severity}} |
| **Likelihood** | {{likelihood}} |
| **Impact** | {{impact_rating}} |
| **Risk Score** | {{risk_score}} |
| **ATT&CK** | {{attack}} |

**Description:** {{description}}

**Attack Scenario:** {{proof}}

**Existing Controls:** {{existing_controls}}

**Recommended Mitigations:** {{remediation}}

---
{{/findings}}

{{^findings}}
No risks were identified during this threat modeling exercise.
{{/findings}}

## 6. Mitigations Summary

### Implemented Controls
{{#mitigations_implemented}}
- {{.}}
{{/mitigations_implemented}}

### Recommended Controls
{{#mitigations_recommended}}
- {{.}}
{{/mitigations_recommended}}

### Accepted Risks
{{#risks_accepted}}
- {{.}}
{{/risks_accepted}}

---

## 7. Assumptions and Dependencies

### Assumptions
{{#assumptions}}
- {{.}}
{{/assumptions}}

### Dependencies
{{#dependencies}}
- {{.}}
{{/dependencies}}

---

## 8. Scope & Constraints

**Targets:**

{{targets}}

**Constraints:**

{{constraints}}

---

*Report generated by NERF on {{end_date}}*
