Threat modeling is a way of thinking about what can go wrong and how to prevent it. ​Instinctively, we all think this way in regard to our own personal security and safety. When it comes to building or evaluating information systems, we need to develop a similar mindset. ​In this workshop, you'll learn practical strategies to develop a Threat Modeling Mindset by: understanding a system, identifying threats and vulnerabilities, determining mitigations, and applying the mitigations through risk management.