# Threat Model Failure **Entity class:** Security-analysis concept ## Definition A **threat model failure** occurs when the defender's representation omits or misweights an adversary, asset, vulnerability, attack path, motive, or consequence. Controls can work exactly as designed and still fail because they were designed against the wrong model. ## Relevance to this collection It connects [[wiki/Failure of Imagination|Failure of Imagination]], [[wiki/Zero-Day Threat Model|Zero-Day Threat Model]], [[wiki/Intelligence Failure|Intelligence Failure]], and [[wiki/Predictive Defense|Predictive Defense]]. ## Relationships - **master collection:** [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]]. - **convergence:** [[wiki/Counterterrorism-Cybersecurity Convergence|Counterterrorism–Cybersecurity Convergence]]. ## Sources / Provenance - [National Commission on Terrorist Attacks Upon the United States, *The 9/11 Commission Report*, July 22, 2004](https://www.9-11commission.gov/report/911Report_Ch11.htm). **As of:** 2026-09-23