Hello community!
As we’re planning for the content for Threat Modeling Connect for 2023, we’d like to know what interests you the most and the top challenges where you’d like more resources and support around.
⬇️ Share your input by taking this poll:
(Feel free to add a comment and share more context/details, e.g. peer support groups for XYZ topics , workshops for XYZ topics)
Operationalizing a threat modeling program & Getting leadership buy-in are the 2 topics that i would like to know more about
Thank you
I think it is critical to build a TM program that engages developers to aim for as much self-service threat modeling, and bake it in as a cyclic activity.
I think it is critical to build a TM program that engages developers to aim for as much self-service threat modeling, and bake it in as a cyclic activity.
Great feedback
I would have to toss a vote in for Operationalizing a threat model program which might also include scaling that program. Easy to do a lot of things on a small scale, its adding 10k developers where it really starts to get fun!
I voted for “Getting leadership buy-in” - I’ve found this to be a key topic in the success of those who are in the weeds of creating, operating, and maturing a threat modeling program.
I think the overall best topic, if I had a second vote, is for “Engaging the development teams” because this is the key to actually getting threat modeling done!
I would have to toss a vote in for Operationalizing a threat model program which might also include scaling that program. Easy to do a lot of things on a small scale, its adding 10k developers where it really starts to get fun!
I voted for “Getting leadership buy-in” - I’ve found this to be a key topic in the success of those who are in the weeds of creating, operating, and maturing a threat modeling program.
I think the overall best topic, if I had a second vote, is for “Engaging the development teams” because this is the key to actually getting threat modeling done!
Appreciate the input
A session on the patterns and anti-patterns of the Threat Modeling Manifesto (https://www.threatmodelingmanifesto.org/) would be good.
It seems we all struggle at times to get TM working within an org, so by ensuring a plan has a good dose of the patterns - and measures to avoid the anti-patterns - then it’s definitely a good starting point.
Not a member yet? Become a member to join forum discussions, participate in community events and apply to write articles.
Create an accountEnter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.