Jul 6, 2018 | Attack Surface Analysis, Cyber Risk, ThreatModeler
Good news for companies: the Total Cost Of Risk (TCOR), a measurement used by the insurance industry and risk managers, continues to decline. Continuing a trend from the previous three years, the average TCOR decreased another 3% in 2017 vs 2016 according to the newly...
Jun 7, 2018 | Enterprise Threat Modeling, Threat Modeling as a Service, ThreatModeler
Fortune 1000 companies increasingly want the benefits of a collaborative, self-serve enterprise threat modeling practice. Quite frankly it is an easy sell. Whether through on-site or cloud-based deployment – or through the new Threat Modeling as a Service option – a...
Nov 22, 2017 | DevOps, ThreatModeler
Organizations are becoming increasingly digital-driven, causing the business world to become highly interconnected. Relationships between organizations and their vendors, suppliers, and distributors are now remotely managed across global networks. Evolving customer...
Oct 5, 2017 | DevOps, DevSecOps, Threat Models, ThreatModeler
A flat tire on your morning commute can leave you stranded for hours, and a broken cog in the factory can wreak havoc on the entire assembly line. The same is true for DevOps implementation. It is virtually impossible to realize the promised benefits of DevOps from a...
Aug 29, 2017 | DevSecOps, ThreatModeler
DevSecOps is all about pushing security left with tools that automate the integration between security and DevOps teams working in an agile environment. Ideally, that left-shift will go as far as integrating security considerations into the architect’s whiteboarding...
Aug 18, 2017 | Extended Capabilities, ThreatModeler
In our previous articles comparing ThreatModeler™ and Microsoft Threat Modeling Tool (Microsoft TMT), we considered the tools from an AppSec perspective and the CISO’s perspective. In this installment, we compare the capacity of each to provide outputs based on...