June 2023

A Quarterly interactive e-book publication of primary research findings conducted for Security Compass. The report quantifies the challenges and opportunities being confronted by US government agencies at the federal, state and local levels. Software development methods, security expertise, developer controls and mitigations, communication approaches, and current approaches to ATO compliant software development are explored.

In today’s cybersecurity landscape,threat modeling plays a critical role in identifying, assessing, and mitigating
potential security vulnerabilities in software systems. This evidence-based research explores the current state
ofthreat modeling and the challenges organizations face while scaling the process for applications they build
and deploy.