Tentative steps with Microsoft style threat modelling.