AI Case Management System - Threat Modelling DFD

A ready-to-use AI system architecture for hands-on threat modelling practice.

Give your team a realistic AI-enabled system to threat model without needing to prepare one of your own.

This reusable A3 Data Flow Diagram presents a fictional local-authority case management platform combining traditional application components with Large Language Models, machine learning, RAG and AI agents.

Use it to explore security risks, data flows, trust boundaries and AI-specific threats as a team — whether you are playing the Elevation of Machine Learning Security game, running an AI security workshop, or simply looking for a realistic architecture to practise on.

The diagram is laminated for use with dry-wipe pens, allowing teams to annotate the architecture, highlight areas of concern and map threats directly onto the system during a session.

A copy of our Westford Council Threat Modeling Exercise is included to provide the story and technical context behind the architecture.