Number: 
Creation Date:  2025-02-12
Category:  Risk Management
Effective Date:  2025-02-12
Version:  1.0
Last Reviewed:  2025-02-12
Security Classification:  Protected A
Scheduled Review Date: 2026-02-28
Status:  Approved

Description:
Please note that information classified as Protected (per the Data and Information Security Classification standard) is only accessible to Government of Alberta Employees. External users are therefore not able to download this document. To request access, please contact us: imt.policy@gov.ab.ca.

​This guideline provides a framework for conducting effective solution threat modeling activities in the Government of Alberta (GoA). Solution threat modeling is a proactive approach used to identify and assess potential security threats and vulnerabilities in systems, applications, and processes. These guidelines aim to ensure consistency, thoroughness, and collaboration during the solution threat modeling process.​


Keywords: DISC, information controller, information custodian, risk assessment, risk mitigation, SDLC, security classification, solution delivery lifecycle, threat modeling