Fortune 500 Technology Organization Looks to IriusRisk to Enhance its Security Strategy & Practices for Future Growth

Company Background

The Client, a Fortune Global 500 Technology organization was facing challenges with their previous threat modeling tool and looked to IriusRisk to improve the threat modeling strategy and processes.

‍‍

Challenges

• Their previously implemented threat modeling tool lacked stability and reliability which led to issues in production environments. 
• Critical features lacking, such as versioning, which forced teams to redo threat models from scratch for each new product release. 
• The absence of a comprehensive questionnaire feature also hindered the ability to implement a hybrid threat modeling approach efficiently.

‍

Solution

The Client decided to explore alternative threat modeling solutions. After additional research, they selected IriusRisk due to its robust feature set and user-friendly interface. The key features that stood out included:

• Enabled the client to carry forward previous threat models into new product versions, saving significant time and effort.
• Allowed the client to implement a hybrid threat modeling approach, streamlining the process by consolidating common security questions across different review stages.
• IriusRisk provided a stable and reliable platform, which was crucial for its large-scale operations.

‍

Benefits

• The versioning feature has drastically reduced the time spent on creating threat models for product updates, allowing the client to focus on innovation.
• The integration of questionnaires has unified various security checks, minimizing redundant efforts across teams and speeding up the product review process.
• With 200 teams currently using IriusRisk and plans to expand usage to over 1,000 users across various departments, the client is well-positioned to scale its threat modeling efforts globally.
• The technical support from IriusRisk’s account management team has been instrumental in the client's successful adoption of the platform, providing training and alternative solutions tailored to their needs.

‍