Aon interview question

design a threat model for a http website