IriusRisk, the Open Threat Modeling platform, has announced a partnership with Shostack + Associates to help customers build and sustain a security-first culture through effective threat modeling.
As part of the partnership, Adam Shostack, the pioneer, consultant, and author on threat modeling, and his team at Shostack + Associates will deliver coaching sessions to help users understand threat modeling to improve secure design, which will complement existing training courses on how to use IriusRisk’s automated threat modeling platform.
Coaching sessions
The coaching will offer either 1-3 live instruction sessions over a week, or self-paced, virtual sessions
The coaching will offer either 1-3 live instruction sessions over a week, or self-paced, virtual sessions, focused on ensuring every member of a team has the technical skills to understand and deploy threat modeling and secure by design principles.
When delivered to an entire team, the coaching is designed to create a consistent baseline between those who are new to threat modeling and those who’ve learned via apprenticeship, other courses, or perhaps self-taught approaches.
Threat modeling
The coaching will help customers overcome the stumbling blocks sometimes encountered while rolling out threat modeling, such as aligning programmes with corporate goals, defining roles and responsibilities within the threat modeling programmes, and embedding threat modeling into existing engineering culture.
Adam’s team will work closely with customers to determine the metrics, people, culture, and processes that need to be in place to successfully integrate threat modeling into their company. By equipping leadership with the right materials, processes, and information, they can then communicate their mission back to internal stakeholders in a way that aligns with those stakeholders’ needs.
Shift left on security
IriusRisk empowers developers, architects, and security engineers to build secure software at every stage
IriusRisk empowers developers, architects, and security engineers to build secure software at every stage of the Software Development Lifecycle (SDLC).
By integrating security from the initial design phase and tracking its implementation through the development toolchain, IriusRisk’s platform addresses the critical need for developers to ‘shift left’ on security, minimising design flaws and cutting associated costs.
Essential customer skills
“We’re excited to partner with Adam to deliver this new coaching programme,” said Stephen de Vries, Co-Founder, and CEO of IriusRisk.
“As threat modeling rapidly becomes a must-have strategy for security and development teams, this coaching equips our customers with the essential skills to implement successful threat modeling programmes and effectively champion its value across their organisation.”
Tackling issues
“Threat modeling, in a lot of ways, isn’t just technical steps for security and developer teams - it’s a cultural shift in how they operate. To master it, you need to have the right information and tools,” added Adam Shostack.
“That’s why we’re proud to partner with IriusRisk to help its customers tackle teething issues around implementing threat modeling and deliver a successful programme that can scale.” The coaching is aimed specifically at the leadership owning a threat modeling programme in both the North American and international markets.
