Having a clear understanding of where your data ... and all user roles that have and require access to data at every point. For targeted threat modeling, it may be helpful to create additional data ...