What order BEST reflects the steps when adding threat modeling practices to a Software Development...

Inventory use cases, categorize threats, evaluate business impact

Understand attack front, identify trust levels, decompose application

Inventory countermeasures, identify threats, implement mitigations

Establish monitoring, identify risks, implement countermeasures