The Google BigQuery Threat Model used by top global banks.
A risk-based, open-source threat model for securing Google BigQuery against misconfigurations, compliance gaps, and active threats. Built by TrustOnCloud and trusted by Fortune 500 security teams.
- Data Flow Diagram showing how data moves within Google BigQuery to identify exposure points.
- MITRE ATT&CK mapping giving full visibility into BigQuery attack techniques.
- Prioritized threat list with the top risks and the controls that mitigate them.
- Control activities & testing procedures tailored to documented BigQuery threats.
- Compliance mappings for PCI DSS and 318+ frameworks via Secure Controls Framework.
- Machine-readable formats (JSON) for automation and pipeline integration.
A complete BigQuery threat
model in one document.
Six security artifacts, organized so your team can move from threat to control to test in a single read.
Data Flow Diagram
Visualize every endpoint, identity, and trust boundary in BigQuery so you can model risk before it reaches production.
MITRE ATT&CK Mapping
Every threat tagged to MITRE tactics so red teams and detection engineers speak the same language.
Prioritized Threat List
CVSS-scored threats ranked by severity, permissions required, and the data flows they touch. Top risks first.
Control Activities & Tests
For each control, exact testing procedures, implementation effort, and mitigating impact rating.
Compliance Mappings
Mapped to PCI DSS, SOC 2, ISO 27001, NIST, FedRAMP, CIS, and 318+ more frameworks via Secure Controls Framework.
Machine-Readable JSON
Every threat and control ships in JSON. Pipe it into your CNAPP, CSPM, or internal tooling and turn research into policy.
