The talk is all about doing security architecture and threat modelling work as part of development planning.

The presentation starts by introducing OWASP Cornucopia and the simplified OWASP “Top 5” for developers and then moves into looking at how one can practically include a form of threat modelling (using Cornucopia) into one’s agile development practices in an effective manner.

There is a brief discussion on gamification, covering the usual FAQs on that and then it moves onto implementation at scale and some of the experiences we’ve had there.

After the talk there will be an interactive virtual Fishbowl for you to ask questions and discuss with Grant and the panelists