CEO, Director, Principal Consultant Mercury Information Security Services Australian Defence Force Academy, Australia
The purpose of this talk is to provide an overview of tools, techniques and processes to conduct threat modeling. Whether it's a whole organization or specific project, the role of threat modelling is to provide clarity around stakeholders' risk appetite and prioritization. Structured threat models have been available and widespread. However, these can be hard to apply and grasp, especially in varying contexts. By understanding the concept of threat models, attendees will ensure that resources can be effectively applied to projects and that priority information requirements and sustainment are established.
Learning Objectives:
Understand the effectiveness and shortfalls of governance-driven approaches to security.
identify different threat modelling techniques and approaches, along with their strengths and limitations.
Learn to conduct threat modelling in your own organization, using tools techniques and methods discussed during this talk.