Download Publication

This publication provides an updated methodology for identifying and mitigating risks in today’s cloud-first, AI-enabled landscape. Building on the original 2021 edition, this version expands the guidance on threat modeling frameworks. It also introduces AI security principles and modern automation tools. Learn how to integrate secure-by-design principles into your development lifecycle.

This threat modeling guidance aligns with frameworks such as the NIST Secure Software Development Framework and EU AI Act. Get detailed examples and visual tools, including step-by-step threat modeling cards and a full cloud threat model case study. Learn how to build continuous, adaptive models that reflect real-time system changes, enhance resilience, and enable proactive security decisions across complex, distributed environments.

Whether starting from scratch or optimizing mature programs, organizations navigating the evolving intersection of cloud architecture, AI governance, and cyber resilience will find this to be an essential guide.