Comprehensive data flow diagrams ultimately show where the systems make data vulnerable. Threat modeling best practices generally consider data safest when at rest, so look to points in data flow ...

Examples of errors include forgetting to include a data flow or pointing an arrow in the wrong direction. A key reason why keeping data flow diagrams up-to-date is to address issues of system growth.