The quality engineering approach differs from QA in that quality teams partner with business users and product managers to better understand requirements and to catch problems as products are being built—not after the fact. There are two pillars to building a true quality engineering organization: culture and process.

Threat modeling helps you determine where to focus your security testing efforts when building your app. But people often wonder how it can fit into their existing agile software development process. Here are three things you can do to integrate threat modeling into your agile workflow, either early on or mid-project.

The most important element for revolutionizing quality engineering across the board—for testers, others in the product group, stakeholders, and even competitors—is an open mind toward quality. This means a willingness to consider new avenues toward pursuing quality, including techniques, roles, and attitudes.