Threat Modeling for anxious planners

Do you think of yourself as a meticulous planner, needing to foresee all the possible ways your activities could be disrupted and be ready with plan B, C, or even Z? In this fast-paced, 40-minute session we’ll reframe that planner energy as a professionally useful talent. Threat modeling is structured “what-if” thinking: clarifying what you’re building, imagining what could go wrong, deciding what to do, and defining which risks can be acceptable and which instead need a (cost-effective) workaround. We’ll walk through two parallel examples: a real-world holiday trip, then a simple booking website to translate the everyday concepts into technical IT threat model thinking. You’ll learn a lightweight, repeatable approach using STRIDE and a simple risk matrix, and you’ll see how to convert the insights you gain into concrete backlog items. Expect quick audience participation by show of hands or Mentimeter.

Speakers:

Giulia Lorini –  Product Owner, Security Champion and Risk Manager in B2B Network and Security
Fawsiya Cade – Security Analyst in B2B Threat Detection & Response (former Security Consultant)

Agenda:

16:00 – 16:30 Arrival & Registration

16:30 – 17:00 Welcome and Introductions WIC / Swisscom Talent & Performance Development

17:00 – 18:00 Main Session – “Threat Modelling for Anxious planners” and Q&A

18:00 –  Networking and Apero

Swisscom Privacy Statement: https://www.swisscom.ch/en/residential/legal-information/privacy.html