2.5.1.2. Section 2: Threat Summary. No change from a regular CDD to the threat summary of the IS-CDD; however, the Sponsor should strongly consider the cyber threats posed to an IS solution.

For reference or comparison, below is what the JCIDS Manual says for the CDD 2021 itself:

2.5.2.2 Cite the latest approved threat products used during the development of the CDD. Update the threat summary from the validated ICD with current threat analysis from the DIE. As the threat environment may have evolved since the validation of the ICD, clearly identify threats that are consistent with factors used to determine the capability captured in the ICD. If new threats have emerged since the validation of the ICD, describe the threat capabilities as outlined for Section 2 of the ICD.