How Three Threat Modelers Can Influence an Entire Organization
summary
Three full‑time threat modelers scale practice across a 58,000‑person firm with 4,000 developers over three years by adopting a concise AIV taxonomy, training lead architects and 30+ ethical hackers (8‑hour day or 6–8×2h sessions), building a centralized threat catalog (JSON source) and visualizing patterns in Power BI, decentralizing threat finding while centralizing intelligence, improving risk assessments and detection prioritization and reducing duplicate work.
AI-written summary · about
chapters (7)
- 0:00Influencing with threat modeling
- 3:15Common threat modeling language
- 7:26Threat modeling in operations
- 9:34Managing threat intelligence
- 16:36Success stories and lessons
- 35:17Key takeaways for orgs
- 36:01Q&A on resources
related talks
52mLessons From The Threat Modeling Trenches
58mThreat Modeling In And For Your Organization
48mTeaching Software Engineers to Threat Model: We Did It, and So Can You
29mRedefining Threat Modeling: Security team goes on vacation
49mThreat Modeling Panel
11mThreat modeling state of practice in Dutch organizations
41mThreat Modelling for ML/AI systems
35mValue Driven Threat Modeling