Using the Threat Modeling Manifesto to Build an Enterprise Threat Modeling Program

This course explains how to use the Threat Modeling Manifesto as a foundation for an enterprise threat modeling program. It addresses collaboration, iterative practice, process selection, tools, mitigations, STRIDE, ASVS, and quality checks.

Syllabus

Introduction
Agenda
The Challenge
The Threat Modeling Manifesto
What is Threat Modeling
Threat Modeling for Everyone
Why Did We Put This Together
The Four Key Questions
Benefits of Threat Modeling
Using the Manifesto
People in Collaboration
Journey of Understanding
iterative approach
threat modeling
the 30 minute rule
the principles
outcomes are meaningful
antipatterns
positive patterns
useful toolkit
choosing a solid process
embed threat modeling
threat modeling champions
teaching threat modeling
embracing stride
adapt with ASVS methodology
focus on mitigations
adopt the right tool sets
threat model quality checks
summary