Security threat model for Media & Entertainment

Your prompt is ready 2 brackets to fill

You are an expert in this kind of work, and you know the Media & Entertainment sector from the inside.

## Your task
Act as an application-security engineer. Build a STRIDE threat model for [SYSTEM OR FEATURE] at a media studio publishing video and podcasts, which handles data for audiences, advertisers and creators. List assets, entry points and trust boundaries, then each threat with likelihood, impact and a mitigation. Prioritise against copyright, licensing and release schedules.

## About my situation
- How we measure success: audience retention and watch time

## What matters in Media & Entertainment
- Rules and standards that usually apply: copyright and licensing for music and footage; the limits of fair use; platform policies (YouTube, Spotify, Instagram); disclosure of sponsored content; defamation and privacy law.
- Common risks to plan for: copyright strikes; algorithm changes; creator burnout; missed release dates; brand-safety problems.
- Tools commonly used: YouTube Studio; Spotify for Podcasters; Premiere Pro or DaVinci Resolve; Canva; social schedulers.
- Words people in this field use: hook; thumbnail; CTR; retention curve; episode; sponsor read; licensing; release schedule.
- Rules differ by country. If I have not said where I work, ask me, and do not present one country's law as if it applied everywhere.

## What I will give you
Architecture description: [DESCRIBE ARCHITECTURE]

## How to work through it
1. Describe the system: assets, users, entry points and trust boundaries.
2. Go through STRIDE (spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege) for each entry point.
3. Rate each threat by likelihood and impact.
4. Give a practical mitigation for each.
5. Order the mitigations by priority.

## What to deliver
- Assets and trust boundaries
- Threat table with likelihood, impact and mitigation
- Prioritised action list
- A data flow diagram in Mermaid syntax

## Rules
- Make every point specific to my situation and my industry; replace generic advice with detail that fits.
- Use plain language, short sentences, and tables where they make the answer easier to scan.
- Use only the facts I give you. Do not invent figures, laws, sources or quotes. Mark anything you had to assume with "Assumption:".
- If something important is missing, ask me up to 3 short questions before you start.

## Before you answer
Check your draft against this list and fix anything that fails:
- The code works as written: no invented libraries, functions or APIs, and versions are named where they matter.
- It is written for a media studio publishing video and podcasts; nothing in it would read the same for any other business.
- Nothing in it breaks copyright, licensing and release schedules.
- Every item under "What to deliver" is included.

Open in ChatGPT Claude Perplexity

How to use this prompt

Copy the prompt. Press Copy prompt and the full text goes to your clipboard.
Fill the brackets. Use the form above, or replace [SYSTEM OR FEATURE], [DESCRIBE ARCHITECTURE] with your own details.
Paste and send. Paste it into ChatGPT and Claude and send. Ask follow-up questions to refine the answer.

Why this prompt works

The “Security threat model” prompt tells the assistant exactly what to hand back: assets and trust boundaries; threat table with likelihood, impact and mitigation; prioritised action list; and a data flow diagram in Mermaid syntax. It makes the assistant work through 5 steps in order, starting with "describe the system: assets, users, entry points and trust boundaries", instead of jumping straight to an answer. Before replying, the assistant checks its draft against 4 tests and fixes anything that fails.

This version is written for a media studio publishing video and podcasts, so the assistant keeps copyright, licensing and release schedules in mind and judges the result by audience retention and watch time. If an important detail is missing, it asks you up to 3 short questions before it starts.

How to get the best answer

Fill every bracket with real detail: [SYSTEM OR FEATURE], [DESCRIBE ARCHITECTURE] should hold real names, numbers and dates, not placeholders.
Paste real material: where the prompt asks for notes, data or text, paste the actual content rather than a summary.
Refine in the same chat: ask "make it shorter", "turn it into a table" or "add more detail on step 2".
Check the result: review it against what you know about audience retention and watch time before you share it.

Other industries

Same prompt for other industries

The same security threat model prompt, rewritten for each industry.

FAQ

Frequently asked questions

Which AI assistant works best with the “Security threat model” prompt?

The “Security threat model” prompt works in any chat assistant and suits ChatGPT and Claude best. Paste it in, send it, and ask follow-up questions in the same chat to refine the answer.

What do I fill in before sending the “Security threat model” prompt?

Replace the 2 highlighted brackets – [SYSTEM OR FEATURE], [DESCRIBE ARCHITECTURE] – with your own details. The more specific you are, the better the answer.

Is the “Security threat model” prompt only for Media & Entertainment?

No. This version is written for a media studio publishing video and podcasts, and the same prompt is also written for 15 other industries, listed on this page.

Is the “Security threat model” prompt free to use?

Yes. First AI Prompt prompts are free to copy and use in personal and business work, with no sign-up, no account and no daily limit.

Can I trust the answer the “Security threat model” prompt gives?

Treat it as a strong first draft: the prompt tells the assistant not to invent facts and to mark its assumptions, but check figures yourself, especially anything with legal, financial or safety consequences.

Keep exploring