Transforming Threat Modeling: From Burden to Benefit

Guest:

• Or Brokman, Strategic Google Cloud Engineer, Security and Compliance, Google Cloud

Topics:

• Can you tell us about one particular cloud consulting engagement that really sticks out in your memory? Maybe a time when you lifted the hood, so to speak, and were absolutely floored by what you found – good or bad!
• In your experience, what's that one thing – that common mistake – that just keeps popping up? That thing that makes you say 'Oh no, not this again!'
• 'Tools over process' mistake is one of the 'oldies.' What do you still think drives people to it, and how to fix it?
• If you could give just one piece of cloud security advice to every company out there, regardless of their size or industry, what would it be? 

Resources:

• Video (YouTube)
• “Threat Modeling: Designing for Security” by Adam Shostack
• EP16 Modern Data Security Approaches: Is Cloud More Secure?
• EP142 Cloud Security Podcast Ask Me Anything #AMA 2023
• “For a successful cloud transformation, change your culture first” (OOT vs TOO blog)
• https://www.linkedin.com/in/stephrwong/ 
• New Paper: “Autonomic Security Operations — 10X Transformation of the Security Operations Center” (2021)