How Three Threat Modelers Can Influence an Entire Organization

Discover how a small team of threat modelers successfully influenced an entire organization through strategic security practices in this 45-minute OWASP Foundation talk. Learn the journey of transforming from being ignored when raising security concerns to driving meaningful organizational change through data-driven insights. Explore the team's approach to adopting a threat modeling framework, managing threat intelligence, and focusing on high-value activities to maximize impact despite limited resources. The presentation provides context about organizational structure and decision-making processes, then details three key strategies: establishing a common threat modeling language, integrating threat modeling into teams' daily operations based on their specific needs, and implementing automated threat intelligence management. Walk away with practical insights and actionable steps to drive security changes in your own organization, regardless of team size.