The Threat Model as Your Security Centrepiece  

Every team wants to threat model, knowing it holds real benefit in bringing security initiatives and engineering together. Few, however, have time or experience actually doing it.

This session shows how threat models become the centrepiece of security strategy, letting engineering teams deliver at pace while tracking assets, attack surface and controls as systems evolve. The clarity and unified understanding of security for systems rapidly increases speed to make engineering or architectural decisions and to gather data for compliance.

We’ll step through a live example in this session and showcase real examples of teams seeing these benefits through threat modelling.

Biography

As a former teenage hacker, Jonny has worked in software since the 2000s as engineer, security architect, and advisor to CISOs and CTOs. He has worked with major UK brands across banking, e-commerce, IoT, medical research, and defence. He founded Threatplane to bring risk-driven threat modelling to engineering teams building custom applications and connected systems. Jonny speaks regularly at conferences including DevSecCon and Infosecurity Europe, and is known for pragmatic, business-friendly security that keeps delivery teams moving without slowing them down.