http://h7isucmawckzflxhipflydxvxpaytk5fozfk5immffg66rhboc74yxyd.onion/doku.php?id=threat_modelling&rev=1564858746&do=diff
And, since you probably can’t do everything at once, you’ll need to understand the greatest threats you face, and so which are deserving of the greatest attention, and what measures are “nice to haves”, which could be done at some point in the future.