Look inside
Using STRIDE and OWASP Threat Dragon, you can find the threats that impact your architecture. OWASP provides a risk rating methodology that allows an individual or team to review risk and determine the impact on the organization. With this information, the organization can implement controls and timelines that are commensurate with the rated risk.