Aon Interview Question

design a threat model for a http website