Our org has instituted threat modeling as part of our SDL and it has been instrumental in building a culture of security focus. We found that it both allowed te

Our org has instituted threat modeling as part of our SDL and it has been instrumental in building a culture of security focus. We found that it both allowed teams to build relationships with us while also setting aside time for them to think specifically about the security of their feature. If you’re thinking about starting this, do it! The benefits for us have been enormous.