Skip to content

Collections & the Threat Model Status Board

Collections help you organize, manage, and track threat models efficiently in Devici.

They provide a structured way to group related threat models, control access, and monitor progress using the Threat Model Status Board.

Overview

Collections are the organizational backbone of threat modeling in Devici.

Use collections to:

  • Group related threat models
  • Control access and permissions
  • Track progress across threat models
  • Create and manage threat models at scale

Each collection includes a Threat Model Status Board, which displays threat models by status in a Kanban-style view.

Accessing Collections

When you log into Devici, you are taken to the Collections view.

From this screen, you can:

  • View all collections you have access to
  • Create new collections
  • Open a collection to view its Threat Model Status Board

Creating a Collection

To create a new collection:

  1. From the Collections view, select New Collection.
  2. Enter a name for the collection.
  3. (Optional) Add a description.
  4. Save the collection.

Note
Only the Owner of a collection can delete it.

Managing Collection Permissions

Collection permissions determine who can access and manage the threat models within a collection.

To manage access:

  1. Select the three-dot menu next to the collection name.
  2. Choose Manage Access.
  3. Use the right-hand drawer to add users or teams.

Permissions applied at the collection level affect all threat models within the collection.

The Threat Model Status Board

Each collection contains a Threat Model Status Board, displayed as a Kanban-style board.

The Status Board provides a high-level view of all threat models in the collection and their current stage.

You can use the board to:

  • View progress across all threat models
  • Move models between statuses as work progresses
  • Perform common management actions

Managing Threat Models from the Status Board

Each threat model on the board includes a three-dot menu with the following actions:

  • Move the threat model to a new status
  • Transfer the threat model to another collection
  • Duplicate the threat model
  • Archive the threat model

Updating Threat Model Status

You can update a threat model’s status in two ways:

  • Drag and drop the threat model into a different column on the Status Board
  • Select the three-dot menu and choose the desired status

Status changes help teams understand progress and identify models that need attention.

When to move a threat model between statuses

The Threat Model Status Board reflects progress in modeling maturity, not task completion.

Use the following guidance to decide when to move a model between stages:

  • Representation
    Move a model here when the system structure is being defined.
    The diagram should include key elements, data flows, and trust boundaries.

  • Threats & Mitigations
    Move a model here once the structure is stable and attributes have been applied.
    Threats are being generated, reviewed, and mitigations are being identified.

  • Retrospective
    Move a model here when threat review is complete and the model is being validated.
    This includes reviewing assumptions, refining attributes, and confirming mitigation coverage.

  • Done
    Move a model here when the threat model is considered complete for the current scope.
    The model accurately reflects the system, and no major gaps are identified.

Tip

Statuses are not strictly linear. Threat models often move back to earlier stages as systems evolve or new information becomes available.

Tip

Treat the board as a reflection of modeling progress, not a checklist. Movement between stages should be driven by confidence in the model, not time or process.

Moving a Threat Model to Another Collection

To transfer a threat model:

  1. Select the three-dot menu next to the threat model.
  2. Choose Transfer.
  3. Select the destination collection from the dropdown.
  4. Confirm the transfer.

Archiving and Restoring Collections

Archiving a Collection

To archive a collection:

  1. Select the three-dot menu next to the collection name.
  2. Choose Archive.
  3. Confirm when prompted.

Important
Archiving a collection also archives all threat models within it.

Archived collections are available from the Archive view in the left-hand navigation.

Restoring a Collection

To restore a collection:

  1. Navigate to the Archive view.
  2. Select the three-dot menu next to the archived collection.
  3. Choose Restore.

Sub-Collections

Sub-collections allow you to further organize threat models within a collection.

To manage sub-collections:

  1. Select the three-dot menu next to a collection.
  2. Choose Sub-Collections.
  3. Create or manage nested collections as needed.

Sub-collections are useful for large systems, multiple environments, or complex product lines.

Creating New Threat Models

All threat models exist within a collection.

To create a new threat model:

  1. Open the desired collection.
  2. From the Threat Model Status Board, select Create New.
  3. Enter a name and description in the right-hand drawer.
  4. Save and begin modeling.

Tips for Using Collections Effectively

  • Be specific — create collections around clear products, systems, or initiatives
  • Review regularly — archive or reorganize outdated collections
  • Use descriptive names — make it easy to understand a collection’s purpose

Well-structured collections and a clearly maintained Threat Model Status Board make threat modeling easier to manage and scale.