A threat model is a structured framework used to identify, assess, and prioritize potential security threats to a system, application, or network to mitigate risks effectively.