Correct Answer: C. Decomposing the application. Threat modeling procedures commonly include decomposing the application to understand its components, data flows, trust boundaries, and attack surfaces. The OWASP Web Security Testing Guide incorporates structured analysis of application architecture as part of identifying and evaluating potential threats. Why The Other Options Are Incorrect A. Review of security requirements Reviewing security requirements is part of secure development lifecycle a