When the complex threat models still trip you up

I can secure most of the systems I'm handed. But when the threat model gets genuinely complex, all the ways things could go wrong at once, I feel myself losing the thread. I sat in a design review last week trying to hold every angle of attack in my head and quietly lost track of half of them.