malaysiang
KUALA LUMPUR, IriusRisk, the industry’s threat modelling and secure design solution in application security, has announced a partnership with Shostack + Associates to help customers build and sustain a security-first culture via effective threat modelling.
As part of the partnership, Adam Shostack, the pioneer, consultant and author on threat modelling, and his team at Shostack + Associates, will deliver coaching sessions to help users understand threat modelling to improve secure design, which will complement existing training courses on how to use IriusRisk’s automated threat modelling platform.
‘As threat modelling rapidly becomes a must-have strategy for security and development teams, this coaching equips our customers with the essential skills to implement successful threat modelling programs and effectively champion its value across their organisation,’ said IriusRisk Co-Founder and Chief Executive Officer, Stephen de Vries in a statement.
The coaching will offer either one to three live instructio
n sessions over the course of a week or self-paced, virtual sessions focused on ensuring every member of a team has technical skills to understand and deploy threat modelling and secure by design principles.
When delivered to an entire team, the coaching is designed to create a consistent baseline between those who are new to threat modelling and those who have learned via apprenticeship, other courses, or perhaps self-taught approaches.
The coaching will help customers overcome the stumbling blocks sometimes encountered while rolling out threat modelling, such as aligning programs with corporate goals, defining roles and responsibilities within the threat modelling programs and embedding threat modelling into existing engineering culture.
Shostack’s team will work closely with customers to determine the metrics, people, culture and processes that need to be in place to successfully integrate threat modelling into their company.
By equipping leadership with the right materials, processes, and information,
they can then communicate their mission back to internal stakeholders in a way that aligns with those stakeholders’ needs.
The coaching is aimed specifically at the leadership owning a threat modelling program in both the North American and international markets.
Source: BERNAMA News Agency
