Threat Model Canvas

Identify what needs protection, describe the exposure without blame, estimate risk, choose layered controls, and plan recovery and reporting.

Grade 9 · CMP-0026 / CMP-0004 · no voice

Defensive model

Risk score: not assessed

Canvas evidence

Complete the asset → threat → risk → controls chain.

Defensive reasoning trace

  1. No model assessed yet.

Scenarios are fictional and defensive. If a real situation involves danger, abuse, coercion, or illegal activity, use local safeguarding/emergency procedures and a trusted responsible adult or authorised service.

⌂ Orco Academy
🧭 Middle · Grades 6–9 · Computing

How “Threat Model Canvas” works

🎓 You are learning to: Identify what needs protection, describe the exposure without blame, estimate risk, choose layered controls, and plan recovery and reporting.

This studio works in three steps:

  1. 📖 Read the challenge

    Understand what the system or program should do before touching it.

  2. 🔮 Predict, then test

    Say what you expect to happen, run it, and compare. Surprises are where the learning is.

  3. 🔧 Debug systematically

    Change one thing at a time and re-test until behaviour matches your prediction.

💡 Aim to explain your method, not just your answer.

Nothing you do here is saved or sent anywhere — experiment freely. Reopen this guide any time with the ? Help button.