British Insurance Services Provider moves from manual to automated threat modeling with IriusRisk.
From manual to automated
The company is a UK-based insurance services provider.
The company started threat modeling as a paper-based, tick-box exercise. However they did see the value in good design and the security teams saw the threat modeling process as “measure twice, cut once’ for software security. In other words, design it right in the first place.