13 templates
Data flow diagram templates
Structured-analysis data flow diagrams in the Gane–Sarson notation: external entities, numbered processes, data stores and labelled flows, at any level (context diagram through level 2+). Trust boundaries are first-class, which makes the same figure a STRIDE threat model. Balance checking catches the classic defects — a store that is only ever read, a process with input and no output (a black hole) or output and no input (a miracle).
DFD — Patient Portal (PHI)
Level-1 flow of a patient portal across public internet, a portal DMZ and the clinical PHI network, balancing 14 nodes against 17 flows and listing all 10 boundary crossings as the attack surface.
Risk & ReliabilityDFD — Card Authorisation (PCI DSS)
Level-2 decomposition of card capture, tokenisation, authorisation and settlement, with the PCI cardholder data environment drawn as a trust zone so the 9 flows that enter or leave CDE scope are enumerated.
Risk & ReliabilityDFD — RAG Support Assistant
Retrieval-augmented support assistant from knowledge-base ingest to grounded answer, isolating the third-party embedding and completion APIs so the 8 flows leaving the trusted VPC — prompt text included — are counted as attack surface.
AI & PipelinesDFD — Shop-Floor MES
Discrete assembly plant from ERP order release to goods movement, laid out over Purdue levels 4, 3 and 2 so the 8 enterprise-to-plant hops a segmentation review has to justify are the ones the findings strip names.
Operations & OpsDFD — Parcel Sortation Hub
Inbound trailer to outbound van at a parcel hub, proving that the scan, route and customs stores are each both written and read, and flagging the 7 flows that reach the partner network.
Operations & OpsDFD — Student Records System
Enrolment to transcript in a student information system, separating the self-service portal from the system of record and showing that every transcript release writes the disclosure log the statutory return later reads.
Data & SchemaDFD — Smart Metering (AMI)
Half-hourly meter reads travelling from the home area network through the DCC wide-area network into head-end validation, settlement and billing, with four network segments as trust zones and 9 crossings between them.
ArchitectureDFD — Housing Benefit Claim
A citizen benefit claim from identity verification to Bacs payment across four trust zones, counting the 8 crossings between citizen internet, the public digital service, cross-government APIs and restricted case working.
Risk & ReliabilityDFD — Retail Loyalty CDP
Retail customer data platform from till transaction to activated audience, tracing how the consent register gates the identifiers reaching the email and advertising vendors that sit outside the platform boundary.
Data & SchemaDFD — Clinical Trial Data Capture
Phase III electronic data capture from site eCRF to database lock, separating the identifiable site zone from the pseudonymised sponsor EDC and exposing the subject-key read that is the trial's re-identification path.
Data & SchemaDFD — Smart Meter Half-Hourly Settlement
Level-1 flow of SMETS2 meter reads from the consumer premises through the regulated data network into supplier aggregation and industry settlement, with every boundary crossing drawn as attack surface.
Data & SchemaDFD — Outsourced Payroll Bureau
Level-1 model of a bureau running payroll for client employers, drawing the bureau processing zone, HMRC's gateway and the BACS submission path as separate trust zones around special-category pay data.
Risk & ReliabilityDFD — University Clearing and Enrolment
Level-1 data flow for a university clearing hotline through offer, enrolment and student loan notification, with the UCAS and Student Loans Company interfaces held outside the campus trust boundary.
Data & Schema