The Path to Influence: How Three Threat Modelers Can Influence an Entire Organization

September 28, 2024
11:10am
Seacliff C/D
Expert Talk

About this session

Ever felt overlooked when raising security concerns? Discover how we transformed our approach to make a significant impact. This session will showcase how a small team used data-driven insights to drive change across an entire organization through threat modeling. We’ll detail our journey, focusing on the adoption of a threat modeling framework and effective management of threat intelligence. Learn how we prioritized high-value activities and navigated challenges to influence our organization’s security culture.

The presentation will provide an overview of our organization’s size and structure, demonstrating how our approach shaped decision-making. We’ll cover three key strategies: adopting a common threat modeling language to standardize practices, embedding threat modeling into daily operations to tailor processes for each team’s needs, and automating threat intelligence management for greater efficiency. By the end of this session, you’ll gain actionable insights to apply in your own organization and build confidence in driving meaningful change through threat modeling.

Speaker

Speakers

Laurent Bouchard
Offensive Security Threat Modeler, Desjardins
Léandre Forget-Besnard
Team Lead, AppSec & Threat Modeling, Desjardins