practitionerThreat Modeling
Build security beyond policies
Said by Robert Hurlbut ·
“You can't start it by having some exec saying, now we're going to have secure software and writing a bunch of policies and handing them to everybody and saying, see, now we're secure.”
Transcript evidence from Season 5 Finale — A cross section of #AppSec.