The Two Top Tips

  • Cross-company processes to document possible attack routes and assess risk
  • Threat modeling for one's own products/services (from the perspective of "others")