Implement — BCS EXIN Professional Certificate in SIAM™

The official BCS documentation our Implement practice questions are cited to. Review the primary sources, then practise.

Official references for this objective

Bcs — 10 best practices for secure software development | BCS

Attack surface analysis, a subset of threat modeling can be performed by exposing software to untrusted users
Bcs — Best practices for software projects: task-based CM | BCS

They should be managed in a central repository and, ideally, in the same repository as CM for complete consistency and traceability.