practitionerThreat Modeling
Design security capabilities, not isolated fixes
Said by Brook S.E. Schoenfield ·
“You have to build an encryption capability or you have to build— and then you have the problem of what you do with the crypto keying materials, the things that make the encryption.”
Transcript evidence from Brook S.E. Schoenfield -- Security in the Design and Architecture.