“We've been stepping through this with some of the other sub-departments, like say the compliance people, they have to do evaluations of a product that we're bringing in, like, well, let's threat model that.”

Transcript evidence from Mark Loveless -- Threat modeling in a DevSecOps environment..