Best Practices for
Threat Modeling in DevOps
Networking Dinner at One Market, San Francisco

Here’s what we discussed:

Anyone who is concerned about the privacy, safety, and security of their system should threat model. It’s a proactive process that identifies potential attacks on an important asset and helps improve the security posture of your product by informing decisions to mitigate risk in subsequent design, development, testing, and post-deployment phases.

As threats increase in complexity and severity, and the availability of skilled security resources decreases, threat modeling becomes even more crucial — and also more difficult. Scalability becomes a key concern, especially in regard to manual modeling.

In this executive roundtable session, we discussed best practices for achieving scalable, consistent, and auditable threat modeling.

You left the conversation with a better understanding of tactics that will help organizations easily adhere to principles and patterns that lead to successful threat modeling, including automation and a developer-centric approach.