diff --git a/README.md b/README.md
index 1aea434e7ec6a554b2dc1324b5515df34553cfbf..45fb0e2b95535734061cd54d4c8897c618cfe040 100644
--- a/README.md
+++ b/README.md
@@ -37,7 +37,7 @@ A checklist to help you setup and use the security controls in Google's domain b
 9. [Glossary](7_glossary.md)
 A glossary defining the technical terms used in these documents in as non-technical language as possible
 
-Appendix A. [Assumed Threat Model](A_threat_model.md)
+10. Appendix A. [Assumed Threat Model](A_threat_model.md)
 A narrative threat model describing the expectations of operating environment, end user capabilities and adversary capabilities for use by technical readers and technical support personnel.
 
 ## Finally...