Skip to main content

Threat Modeling for Security Champs (301) Course

Course Overview

Threat Modeling for Security Champs enables security champs to support threat modeling work by their teams. The outcome is champs supporting threat modeling execution by product teams, not champs ready to train and leave.

Participants will be led through how to introduce threat modeling to teams, with or without Elevation of Privilege, learn about leading threat modeling work, and how to evaluate such work in depth.

Course Content

This course is 10 learning hours, roughly equivallent to a one day in person class. The time is split between short video 'lectures,' like the one below, homework assignments and group discussion via Zoom.

Introducing TM to teams
Using the Elevation of Privilege deck
Leading TM work
Reviewing TM — evaluating models of systems
Reviewing TM — evaluating threat records
Reviewing TM — evaluating bugs (and reports)
Effective retrospectives (Did we do a good job?)
Soft skills in threat modeling

Skills covered in this course

Threat Modeling
Network Security
Threat & Vulnerability Management

Who is this for?

Those skilled in threat modeling looking to help support others. This specifically includes champs within a business unit or a security advisor within a center of excellence. It also includes:

Security-focused developers
Security-focused architects of all levels
Security-focused testers
Scrum masters
Security-focused business analysts
SOC analysts

Pre-requisites

This course is for people who are already skilled in threat modeling. They can draw a DFD from either a specification or by interview. They can use STRIDE and the Kill Chain to address what can go wrong, and discuss when each might be appropriate.

Other Courses

Worlds Shortest Threat Modeling Videos (series)
LinkedIn Learning Courses (30-60 min)
Play Elevation of Privilege with Adam, hosted by Agile Stationery
Threat Modeling for Engineers (201)
Threat Modeling Intensive (222)
Threat Modeling for Champs (301)

We often have other courses listed in our list of open training courses.

Our site works best with Javascript enabled, however we have done our best to minimize any negative impacts to your experience without it.