Identify critical vulnerabilities with mission-focused threat modeling and targeted penetration tests