18:30 on Thu 24 Mar 2022: What is Threat Modelling and how it supports DevSecOps processes

[Immo Hüneke]

Roy Harrow, newly appointed chair of the DevSecOps SG, writes:

Please join us in person or remotely for practical exploration of threat modelling and how it can help improve DecSecOps practices.

Registration required: https://24marchdevsecops.eventbrite.co.uk/

Speakers
Julian Fellows and Arnaud Monhon Bah, from IriusRisk

Agenda
18:00 - Refreshments and networking at BCS London
18:30 - Main presentation – Julian Fellows and Arnaud Monhon Bah
19:30 - Q&A
20:00 - Close

Synopsis
This meeting will provide a practical introduction to the topic of Threat Modelling, explaining the key elements of this practice, some of the techniques and how its use can help support the concept of "shift left". Identifying potential threats and risks is an essential consideration to any development project and growing in its importance, to continue to retain the trust of the various stakeholders for a modern application.

Approaches to threat modelling techniques have existed for some time, but the need to identify and prioritise such issues quickly and effectively is even more important with the increasing use of rapid development processes and automation.

This event will provide an introduction to the topic and then demonstrate through example, how the techniques of threat modelling can be used to alongside other common development and automation technology.

Julian and Arnaud will explain how you can learn these techniques yourself by making use of a free community edition of the IriusRisk software.

There will be plenty of time for questions to allow you to understand how to make use of these important techniques.

Attendance can be in person or remotely via Zoom.