APA Threat modeling

8 Oct 2020 | Inception Activities

Threat modeling is a process by which potential threats can be identified, enumerated, and mitigations can be prioritized. Depending on your inception context, you might have to explicitly add an activity for raising the conversation and listing the threat scenarios to be considered. The APA threat modeling activity organize the threats by exploring the Attackers, the Principals and the Assets.

Step by step:

      1. Explain the following template to everyone: Attackers use Principals to get Assets

    – Attacker –the threat agent, the individual or organisation who performs the malicious activities to an asset.
    – Principal – the entity that can be authenticated
    – Asset – the valuable data and/or equipment to be secure

    1. Ask the participants to list the Attackers, the Principals and the Assets
    2. Describe the threats by combining Attackers, Principals and Assets into the template
    3. Have a conversation about the threats (consider categorising and rating each threat)

    step 2 example (obfuscated for confidentiality)

    Example: Hactivist uses Website to get Bank account info

    I learned this activity from Rodrigo Rech, a security specialist.

 

>> This content is part of a series on inception activities.

 

Paulo Caroli

Paulo Caroli is the author of the best-selling book “Lean Inception: How to Align People and Build the Right Product” (the first on a series of books about Lean Strategy and Delivery). He's also the creator of FunRetrospectives.com , a site and book about retrospectives, futurospectives and team building activities. Caroli writes on this blog frequently. Receive the next post in your email. Sign up here .
Product Market Innovation Matrix

Product Market Innovation Matrix

The Product Market Innovation Matrix assists in the understanding of the different projects or initiatives across an organization´s innovation portfolio. Step by step: List all the projects, initiatives, or ideas into cards Rate each card independently and place it in...

read more
Facilitation techniques

Facilitation techniques

How do you facilitate a meeting, an activity or a workshop session? Should it be one large group with everyone talking? Start with an individual brainstorming? Work in smaller groups? You should consider many options for deciding the group formation and communication...

read more

Pin It on Pinterest

X
X
X