Jason Nelson -- Three Pillars of Threat Modeling Success: Consistency, Repeatability, and Efficacy

Jason Nelson, an accomplished expert in information security management, joins Chris to share insights on establishing successful threat modeling programs in data-intensive industries like finance and healthcare. Jason presents his three main pillars to consider when establishing a threat modeling program: consistency, repeatability, and efficacy. The discussion also provides a series of fascinating insights into security practices, regulatory environments, and the value of a threat modeling champion. As a threat modeling practitioner, Jason provides an essential perspective to anyone serious about application security. Jason Nelson is an information security executive focused on building programs and directing teams in highly regulated financial healthcare and insurance industries.Connect with Jason Nelson:→ FINOS Common Cloud Controls→ NIST OSCALMentioned in this episode:→ FINOS Common Cloud Controls→ NIST OSCAL→ MITRE ATT&CK→ Malware Analyst's Cookbook→ Threat Modeling: A Practical Guide for Development Teams→ Schneier on Security→ The Security Table (podcast)→ Start With WhyFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Introduction02:13 Security Origin Story07:48 Threat Modeling the Cloud16:44 Threat Modeling Pillar One: Consistency27:30 A Threat Modeling Champion33:35 Threat Modeling Pillar Two: Repeatability39:07 Threat Modeling Pillar Three: Efficacy48:09 Lightning Round