Create threats.yaml for SecMgmt

Still need to add to this probably

services/crypto/SecMgmt/threats.yaml

@@ -0,0 +1,14 @@
+common_threats:
+  - CCC.TH01 # Access control is misconfigured
+  - CCC.TH03 # Deployment region network is untrusted
+  - CCC.TH04 # Data is replicated to untrusted or external locations
+  - CCC.TH05 # Data is corrupted during replication
+  - CCC.TH06 # Data is lost or corrupted
+  - CCC.TH07 # Logs are Tampered With or Deleted
+  - CCC.TH09 # Logs or Monitoring Data are Read by Unauthorized Users
+  - CCC.TH11 # Event Notifications are Incorrectly Triggered
+  - CCC.TH13 # Resource Tags Are Manipulated
+  - CCC.TH14 # Older Resource Versions Are Exploited
+  - CCC.TH15 # Automated Enumeration and Reconnaissance by Non-Human Entities
+  - CCC.TH16 # Non-compliance with encryption key management policies
+