Threat modeling helps you determine where to focus your security testing efforts when building your app. But people often wonder how it can fit into their existing agile software development process. Here are three things you can do to integrate threat modeling into your agile workflow, either early on or mid-project.

Decision-making in a climate of ambiguous responsibility is a no-win situation. If you're in a position of some authority, how can you define exactly what that authority allows in order to better secure sponsor support for your decisions? It involves considering some scenarios and asking the right clarifying questions.

Many new project fields look simple from a distance because we only see the outputs and interfaces. But corner cases, bad data, users with special needs, regulations—getting inside a new knowledge domain and teasing out the special cases and unhappy paths is a skill. This is why business analysts are so important.