An organization hires a security consultant to establish a SOC that includes a threat-modeling function. During initial activities, the consultant works with sy...