Methodologies Blog
Organizations are increasingly aware of the need to bring threat modeling into their cybersecurity efforta. Choosing a methodology helps identify threats
See More
SBOM: Where’s My Threat Model?
Do not rely on SBOM alone for your software supply chain threat model. Always consider each software interaction, including flows or points in a system
The Hierarchy of Needs for Threat Modeling
All categories of the Hierarchy of Needs for Threat Modeling limits you to see what is the best way to scale Threat Modeling. Except when Self-Actualized
MITRE ATT&CK for Industrial Control Systems in IriusRisk
Complementing IEC 62443 with MITRE ATT&CK for industrial control systems in IriusRisk. It provides threats, mitigations, and even data sources and detections.
Product Update: Release 4.11
IriusRisk 4.11 includes configuration of issue trackers at Threat level, multiple files for Terraform and CloudFormation and colour change of dataflows
Threat Modeling Terminology
Are you looking to get familiar with the threat modeling lingo? Check out this guide below to get you started with your threat modeling journey.
Implementing Security: what technology for which controls?
Security technologies and techniques that implement controls and countermeasures reported in standards and regulations, and used in threat modeling.
Healthcare Cybersecurity: the challenges and how to mitigate the risks
IriusRisk helps the healthcare industry to identify, mitigate, track security risks and/or requirements described in cybersecurity standards & frameworks
Product Update: Release 4.10
IriusRisk 4.10 includes new widgets on the Home Dashboard, Expand-all button for threats and countermeasures, and 11 new Azure components...
How to Use the Mitre ATT&CK Library in IriusRisk
This new Mitre ATT&CK library within IriusRisk provides techniques, mitigations and detections so that users can build their own risk patterns.
NIST SSDF and IriusRisk Threat Modeling
Software vendors whose products have been threat modeled can demonstrate that their products have gone through a proper risk assessment