All Trainings

About This Training

In the world of cybersecurity there is always a threat lurking — waiting in the shadows for the perfect moment to strike. You can sit back and hope for the best, or you can take control and see everything coming from miles away.

In this session, you'll dive deep into the art of threat modeling — an essential skill that allows you to anticipate risks, identify vulnerabilities, and develop a proactive defense strategy. Mike will guide you through the process and show you why threat modeling is an offer you simply can't refuse.

You'll learn how to analyze threats with precision, build effective threat scenarios, and develop a mindset that stays one step ahead of attackers. Ultimately you won't only understand threat modeling — you'll lead it with confidence.

Your Trainer

Mike van der Bijl
Mike van der Bijl
DevSecOps Expert · Full-stack Developer turned Security Specialist

Mike's career has taken him through a diverse journey, spanning roles that include full-stack developer, business analyst, IT manager, and now thriving in cybersecurity. For him, security resembles solving a 10,000-piece puzzle turned upside down. He approaches his work with a focus on people first, processes second, and technology third — ensuring that security changes are seamlessly integrated and embraced by teams and organizations.

Workshop Outline

Structured around five key principles: theoretical knowledge, practical application, critical reflection, additional resources, and storytelling-based delivery.

1

Introduction to Threat Modeling

  • What is threat modeling and why it matters
  • Key concepts, goals, and terminology
  • The role of threat modeling in modern development and security
2

Why and When to Use Threat Modeling

  • The importance of proactive versus reactive security
  • Business and technical benefits
  • When to apply threat modeling in a project lifecycle
3

Threat Modeling in Agile Environments

  • Integrating threat modeling into agile workflows
  • Balancing speed and security
  • Best practices for iterative threat assessments
4

Requirements for Effective Threat Modeling

  • Prerequisites for successful implementation
  • Tools and frameworks overview
5

Deep Dive: STRIDE 🔬 Hands-on

  • Understanding the STRIDE methodology
  • Applying STRIDE to real-world scenarios
  • Group exercise: threat identification using STRIDE
6

Deep Dive: PASTA 🔬 Hands-on

  • Understanding the PASTA methodology
  • Applying PASTA to real-world scenarios
  • Group exercise: threat analysis using PASTA
7

Practical Threat Modeling You Can Start Today

  • Simple strategies to start threat modeling immediately
  • Lightweight approaches for quick security wins
  • Tips for small teams or limited resources
— Q&A and Closing Remarks —

Who Should Attend

Make Them an Offer They Can't Refuse

Seats are limited. Training ticket required — separate from the main conference ticket.

Book Your Seat