“It allows business owners who don't know how to write code to write these user stories and use cases and then hand that off to the security team and say, okay, here's what we want to test for.”

Transcript evidence from Apollo Clark -- Malicious User Stories.