Threat Modeling for Financial Organizations

Threat Modeling for Financial Organizations

Threat modeling in the financial industry is a crucial cybersecurity practice that involves identifying potential threats to assets, particularly financial data and related information. This practice is increasingly essential due to the industry’s attractiveness...
A Quick Overview of When to Threat Model

A Quick Overview of When to Threat Model

It’s easy to think of threat modeling as something developers do during the DevOps process to ensure a safe application. And that’s certainly true. To that end, threat modeling is something you do when developing an application. But that’s not the only time you should...
Threat Modeling is not the Same as Threat Mapping

Threat Modeling is not the Same as Threat Mapping

There’s a belief in the security community that if you’re doing threat mapping, you don’t need to do threat modeling. The idea is that threat mapping is just as good as, or at least takes the place of, threat modeling. It’s true they are both a formalized way to...
Can Threat Modeling Actually Improve Incident Response?

Can Threat Modeling Actually Improve Incident Response?

You threat model to identify threats and implement mitigations before you deploy an application. In this regard, the overarching reason for your commitment to do threat modeling is to avoid incident response altogether. Theoretically, an application with no...