“Publish your threat model. Yes, really.” Adam Shostack proposed an idea that will make most cybersecurity professionals and organizations very uncomfortable. It is worth reading through the comments of Adam’s post. What do I think? I’m in total agreement and will change my practice to publish my threat models, help my customers publish theirs, and Read More