Threat modeling is an important piece of the security puzzle that may be missing in many IT organizations.