Which steps are involved in threat modeling for an enterprise cloud migration?

• A. Define business objectives; create a disaster recovery plan; implement firewall; run penetration test.
• B. Deploy security controls; measure success; retire legacy systems; update training.
• C. Identify assets, actors, and threats; model threats using STRIDE; map threats to mitigations; assess residual risk; integrate into governance.
• D. Catalog cloud service providers; perform vendor risk assessment; discontinue on-premises; hire incident response.

Answer: (C)