FAIR STRIDE - Building Business Relevant Threat Models

Explore the FAIR STRIDE method for creating application threat models in this 51-minute conference talk from BSidesSF 2023. Learn how to determine the ROI of security controls and prioritize risk reduction efforts for your product. Discover techniques for building business-relevant threat models that can help answer critical questions, such as whether to focus on fixing high-priority vulnerabilities or addressing multiple medium-priority issues. Gain insights into developing a scalable risk reduction roadmap for your product using the FAIR STRIDE approach.