- [Instructor] Threat modeling
is an important part of the risk management process.
It provides valuable information
about the threats facing an organization
and the attack types that those threats might engage in.
As the organization identifies vulnerabilities
that it might have to specific threats,
it should continue to evolve its security controls.
Let's take a look at the technology and process remediation
that should accompany threat modeling efforts.
From a technology perspective,
threat modeling should prompt periodic reviews
of the security infrastructure.
For example,
if security analysts see the issue of data theft
coming up repeatedly and they're a threat modeling,
this may indicate a deficiency
in the organizations ability to combat the loss
of confidential information.
It becomes even more concerning
if actual data loss incidents take place
in the organization.
This combination of circumstances
should prompt a review of whether the organization
has appropriate data protection controls in place.
An organization in this situation
might decide to implement a data loss prevention
or DLP system that can identify
and block attempts to exfiltrate confidential records.
Implementing this control reduces the likelihood
of future incidents
and changes the threat model significantly.
Software development companies have special concerns,
because they must not only conduct
their own threat modeling,
but also consider the threats facing their customers
when customers use their software products.
If a threat model detects repeated deficiencies
that may effect customer security,
the vendor might respond by making
a significant change in software architecture.
Finally, organizations may need to adapt their
operational processes based upon the results
of threat models.
For example, if an organization is repeatedly stung
by attackers using an automated direct deposit
payroll change form,
the organization should of course
consider technical changes to that form
to make it more secure.
But, at the same time,
they might also change their business practices
to require that the payroll department
call to confirm direct deposit changes
with the employee before relying upon the new information.
These are three examples of how organizations might
adapt their technology and processes to remediate threats.
The important lesson to take away
is that threat modeling should inform the rest
of the security program,
and the results of threat models
may require adjustments to the way
the organization does business.