While working on patterns & practices Security guidance, I pushed the idea of “Visual Threats and Countermeasures.”
I wanted a simple way to show customers how to quickly whiteboard their application and find issues.
It was very effective for finding hot spots and drilling in.
Here is an example: