Finally version 2 of the Microsoft Threat Analysis & Modeling (aka MS "TAM") tool is available on our download pages..... Some of the things it helps you design in terms of application risk management include:
- Data access control matrix- Component access control matrix- Subject-object matrix- Data Flows- Call Flows- Trust Flows
Try it out..... http://www.microsoft.com/downloads/details.aspx?FamilyID=334ad466-8b53-4440-8ff0-6ac8142d9198&DisplayLang=en
A nice video is available at: http://www.microsoft.com/downloads/details.aspx?FamilyID=29a6d444-9954-41f3-9666-3688417b5e08
If you like our Patterns & Practices MSDN pages (http://msdn.microsoft.com/practices/) here's another utility you will love.... The "Guidance Explorer" is a tool to easily find relevant patterns & practices guidance for your .NET applications!
http://www.gotdotnet.com/codegallery/codegallery.aspx?id=bb9aecfe-56ba-4ca9-8127-44e551b90962
http://channel9.msdn.com/wiki/default.aspx/GuidanceLibrary.GuidanceExplorer