Webinars

Episode two with Necessary Security and IriusRisk explores what you can do to integrate governance, risk and compliance tools to further enhance your secure by design efforts.

Episode one begins with an exploration of issue trackers, and in particular Azure DevOps, Servicenow and Jira. Join Necessary Security, and IriusRisk to see how issue tracker management and threat modeling can further enhance your secure by design efforts.

Join our upcoming session with Brett Crawley on his book, ‘Threat Modeling Gameplay with EoP: A reference manual for spotting threats in software architecture’. Ideal if you are a fan of STRIDE or the Elevation of Privilege Card Game from Adam Shostack.

The penultimate episode talks about Delivering Value. It may be evident you did a great job, but how do you demonstrate the value and success that you brought? What was the cost, have there been other benefits such as a reduction in defects? Or perhaps the key advancement was the speed of delivery being much faster with threat modeling. Whatever the case may be, tune in with John Taylor of Deloitte, and Stephen de Vries of IriusRisk.

Arguably one of the most important questions of the Four Question Framework - how do you know if your efforts were successful? What are the results and how can you learn from the data outputs and wider outcomes? Join John Taylor of Deloitte, alongside guest speakers Sandy Blackwell and Chris Ramirez of Axway, to flesh out whether you really did do a good job - and how can the results be improved or learnt from for next time.

Episode 4 of this series focuses on ‘Driving your Program’. Join John Taylor of Deloitte, and guest speaker, Brook Schoenfield of Resilient Software Security, will share practical advice on what you should consider to maximize success once you have begun adoption and engaged with key stakeholders. Are workshops or scenario-based training the best options? Can AI or automation really help deliver results? John and Brook will share their valuable insights, based upon years of rolling out threat modeling and security initiatives to large corporations.

Explore expert strategies for successfully launching and driving adoption of threat modeling programs. Discover how to maximize buy-in, integrate with existing processes, and ensure effective implementation for your organization's security initiatives.

Most likely, LLM applications are popping up in your organization like mushrooms after a Spring rain. What can you do to control security risk? Who should do what work? And how should they do it? Join our upcoming webinar with Dr Gary McGraw, Co-founder of the Berryville Institute of Machine Learning (BIML) to hear about LLM-related risks and controls.