What's Next When Facing a Vulnerability in Threat Modeling Without a Fix?

The number of potential vulnerabilities within a threat model can be extremely high. But what happens if I can't implement the recommendation? What happens if the business suddenly says that you don't understand the underlying business impact? What possibilities are there for us as information security architects to create suitable remedies for our top management, but also for our business?

In the session, you will learn how we use a risk analysis to pick up the business. At the same time, you will learn what decision-making options top management and the business have if the vulnerability recommendation cannot be resolved.

Speakers:

Manuel Blessing,Team Lead, Security Architecture
Ana Ila: Senior Manager, Information Security Governance