Suggestion: with these topics always start with working on your threat model and risk matrix and let everything else come out of that. This helps focus the effo

Suggestion: with these topics always start with working on your threat model and risk matrix and let everything else come out of that. This helps focus the effort and the mitigations on what is relevant for you and what you're protecting.