Improving Cyber Risk Management with Threat Modeling
summary
Government of Alberta teams use threat modeling as a proactive five‑stage process, applying STRIDE and PASTA and running the Microsoft Threat Modeling Tool to generate an initial list (the demo produces 26 autogenerated risks), then triaging since fewer than half are relevant to the environment. Output becomes concrete risk register entries with likelihood, impact, exposure and decisions to reduce or accept; outcomes include earlier mitigations, visual system clarity and iterative models, but it requires developer involvement and struggles with very large systems.
AI-written summary · about
chapters (9)
- 0:00Introduction and speaker intro
- 1:49What is threat modeling
- 8:12Threat modeling tools and frameworks
- 12:37Five-stage threat modeling process
- 16:30Threat modeling example walkthrough
- 20:24Risk management connection
- 28:02Value and challenges of threat modeling
- 33:23Key takeaways and closing
- 35:11Q&A session
related talks
01h 00mThreat Modeling for Secure Software Design
53mThreat Modeling: uncover vulnerabilities without looking at code
58mThreat Modeling In And For Your Organization
43mThreat modeling
22mEmpowering Developers through Threat Modeling Excellence
40mCloud Threat Modeling - from Architecture Design to Application Development
57mUnlocking Threat Modeling
49mThreat Modeling Panel