{"id":1621,"date":"2021-08-20T23:53:12","date_gmt":"2021-08-20T23:53:12","guid":{"rendered":"https:\/\/golfdaleconsulting.com\/?p=1621"},"modified":"2023-06-13T14:22:09","modified_gmt":"2023-06-13T14:22:09","slug":"security-compass-the-2021-state-of-threat-modeling","status":"publish","type":"post","link":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/","title":{"rendered":"Security Compass &#8211; The 2021 State of Threat Modeling"},"content":{"rendered":"<div class=\"\" data-block=\"true\" data-editor=\"ig_static\" data-offset-key=\"bf6ef-0-0\">\n<div class=\"public-DraftStyleDefault-block public-DraftStyleDefault-ltr\" data-offset-key=\"bf6ef-0-0\"><span data-offset-key=\"bf6ef-0-0\">With cybersecurity threats rising at an alarming rate over the past year, enterprises that build applications are increasingly realizing the necessity of adopting a security posture built on precautionary principles. With cyberattacks, it is no longer the case of &#8220;will it happen?&#8221; Rather, applications are more likely than not to come under many and varied cybersecurity attacks. As a result, engineers of complex software systems have a burden of proof that what they create is safe from its onset rather than determining if it represents an unintended danger after the fact. Criminals are &#8220;innocent until proven guilty&#8221;; software applications are &#8220;guilty until proven innocent&#8221;.<\/span><\/div>\n<\/div>\n<div class=\"__EMPTY_CONTAINER\" data-block=\"true\" data-editor=\"ig_static\" data-offset-key=\"76o1r-0-0\">\n<div class=\"public-DraftStyleDefault-block public-DraftStyleDefault-ltr\" data-offset-key=\"76o1r-0-0\"><span data-offset-key=\"76o1r-0-0\">\u00a0<\/span><\/div>\n<\/div>\n<div class=\"\" data-block=\"true\" data-editor=\"ig_static\" data-offset-key=\"9kmjn-0-0\">\n<div class=\"public-DraftStyleDefault-block public-DraftStyleDefault-ltr\" data-offset-key=\"9kmjn-0-0\"><span style=\"font-size: 16px;\">Addressing these imbalances, threat modeling has become core to ensuring applications can withstand future attacks. It is essential from the onset of the software development lifecycle to anticipate where attacks are likely to come from and to prescribe controls to mitigate risk from these threats. Additionally, it is essential that much of this process becomes automated, to ensure that time to market for new applications, and upgrades to existing systems, are not compromised.<\/span><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>To understand the current state of threat modeling and the challenges large enterprises encounter with the applications they build and deploy, Security Compass commissioned a comprehensive study on the topic.<\/p>\n","protected":false},"author":3,"featured_media":1633,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"footnotes":""},"categories":[15,25,13],"tags":[29,17],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Security Compass - The 2021 State of Threat Modeling | Golfdale Consulting<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Compass - The 2021 State of Threat Modeling | Golfdale Consulting\" \/>\n<meta property=\"og:description\" content=\"To understand the current state of threat modeling and the challenges large enterprises encounter with the applications they build and deploy, Security Compass commissioned a comprehensive study on the topic.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/\" \/>\n<meta property=\"og:site_name\" content=\"Golfdale Consulting\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-20T23:53:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-13T14:22:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"305\" \/>\n\t<meta property=\"og:image:height\" content=\"199\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Gary Edwards, PhD\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Golfdale_\" \/>\n<meta name=\"twitter:site\" content=\"@Golfdale_\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Gary Edwards, PhD\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/\"},\"author\":{\"name\":\"Gary Edwards, PhD\",\"@id\":\"https:\/\/golfdaleconsulting.com\/#\/schema\/person\/edd822fcf520808c1b29683e40167a4a\"},\"headline\":\"Security Compass &#8211; The 2021 State of Threat Modeling\",\"datePublished\":\"2021-08-20T23:53:12+00:00\",\"dateModified\":\"2023-06-13T14:22:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/\"},\"wordCount\":185,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png\",\"keywords\":[\"Cybersecurity\",\"Digital Transformation\"],\"articleSection\":[\"Blog\",\"Interactive online report\",\"Reports\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/\",\"url\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/\",\"name\":\"Security Compass - The 2021 State of Threat Modeling | Golfdale Consulting\",\"isPartOf\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png\",\"datePublished\":\"2021-08-20T23:53:12+00:00\",\"dateModified\":\"2023-06-13T14:22:09+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#primaryimage\",\"url\":\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png\",\"contentUrl\":\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png\",\"width\":305,\"height\":199},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/golfdaleconsulting.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security Compass &#8211; The 2021 State of Threat Modeling\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/golfdaleconsulting.com\/#website\",\"url\":\"https:\/\/golfdaleconsulting.com\/\",\"name\":\"Golfdale Consulting\",\"description\":\"Trusted Advisors to Growth Focused Business Leaders\",\"publisher\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/golfdaleconsulting.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/golfdaleconsulting.com\/#organization\",\"name\":\"Golfdale Consulting\",\"url\":\"https:\/\/golfdaleconsulting.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/golfdaleconsulting.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2020\/06\/golfdale_new_logo.png\",\"contentUrl\":\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2020\/06\/golfdale_new_logo.png\",\"width\":161,\"height\":40,\"caption\":\"Golfdale Consulting\"},\"image\":{\"@id\":\"https:\/\/golfdaleconsulting.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/Golfdale_\",\"https:\/\/www.linkedin.com\/company\/golfdale-consulting\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/golfdaleconsulting.com\/#\/schema\/person\/edd822fcf520808c1b29683e40167a4a\",\"name\":\"Gary Edwards, PhD\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/golfdaleconsulting.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2020\/06\/gary_profile_sm.jpg\",\"contentUrl\":\"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2020\/06\/gary_profile_sm.jpg\",\"caption\":\"Gary Edwards, PhD\"},\"url\":\"https:\/\/golfdaleconsulting.com\/author\/gary_edwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security Compass - The 2021 State of Threat Modeling | Golfdale Consulting","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/","og_locale":"en_US","og_type":"article","og_title":"Security Compass - The 2021 State of Threat Modeling | Golfdale Consulting","og_description":"To understand the current state of threat modeling and the challenges large enterprises encounter with the applications they build and deploy, Security Compass commissioned a comprehensive study on the topic.","og_url":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/","og_site_name":"Golfdale Consulting","article_published_time":"2021-08-20T23:53:12+00:00","article_modified_time":"2023-06-13T14:22:09+00:00","og_image":[{"width":305,"height":199,"url":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png","type":"image\/png"}],"author":"Gary Edwards, PhD","twitter_card":"summary_large_image","twitter_creator":"@Golfdale_","twitter_site":"@Golfdale_","twitter_misc":{"Written by":"Gary Edwards, PhD","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#article","isPartOf":{"@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/"},"author":{"name":"Gary Edwards, PhD","@id":"https:\/\/golfdaleconsulting.com\/#\/schema\/person\/edd822fcf520808c1b29683e40167a4a"},"headline":"Security Compass &#8211; The 2021 State of Threat Modeling","datePublished":"2021-08-20T23:53:12+00:00","dateModified":"2023-06-13T14:22:09+00:00","mainEntityOfPage":{"@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/"},"wordCount":185,"commentCount":0,"publisher":{"@id":"https:\/\/golfdaleconsulting.com\/#organization"},"image":{"@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#primaryimage"},"thumbnailUrl":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png","keywords":["Cybersecurity","Digital Transformation"],"articleSection":["Blog","Interactive online report","Reports"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/","url":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/","name":"Security Compass - The 2021 State of Threat Modeling | Golfdale Consulting","isPartOf":{"@id":"https:\/\/golfdaleconsulting.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#primaryimage"},"image":{"@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#primaryimage"},"thumbnailUrl":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png","datePublished":"2021-08-20T23:53:12+00:00","dateModified":"2023-06-13T14:22:09+00:00","breadcrumb":{"@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#primaryimage","url":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png","contentUrl":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2021\/08\/Tmodel-pic2-1.png","width":305,"height":199},{"@type":"BreadcrumbList","@id":"https:\/\/golfdaleconsulting.com\/security-compass-the-2021-state-of-threat-modeling\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/golfdaleconsulting.com\/"},{"@type":"ListItem","position":2,"name":"Security Compass &#8211; The 2021 State of Threat Modeling"}]},{"@type":"WebSite","@id":"https:\/\/golfdaleconsulting.com\/#website","url":"https:\/\/golfdaleconsulting.com\/","name":"Golfdale Consulting","description":"Trusted Advisors to Growth Focused Business Leaders","publisher":{"@id":"https:\/\/golfdaleconsulting.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/golfdaleconsulting.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/golfdaleconsulting.com\/#organization","name":"Golfdale Consulting","url":"https:\/\/golfdaleconsulting.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/golfdaleconsulting.com\/#\/schema\/logo\/image\/","url":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2020\/06\/golfdale_new_logo.png","contentUrl":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2020\/06\/golfdale_new_logo.png","width":161,"height":40,"caption":"Golfdale Consulting"},"image":{"@id":"https:\/\/golfdaleconsulting.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Golfdale_","https:\/\/www.linkedin.com\/company\/golfdale-consulting\/"]},{"@type":"Person","@id":"https:\/\/golfdaleconsulting.com\/#\/schema\/person\/edd822fcf520808c1b29683e40167a4a","name":"Gary Edwards, PhD","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/golfdaleconsulting.com\/#\/schema\/person\/image\/","url":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2020\/06\/gary_profile_sm.jpg","contentUrl":"https:\/\/golfdaleconsulting.com\/wp-content\/uploads\/2020\/06\/gary_profile_sm.jpg","caption":"Gary Edwards, PhD"},"url":"https:\/\/golfdaleconsulting.com\/author\/gary_edwards\/"}]}},"_links":{"self":[{"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/posts\/1621"}],"collection":[{"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/comments?post=1621"}],"version-history":[{"count":1,"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/posts\/1621\/revisions"}],"predecessor-version":[{"id":1624,"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/posts\/1621\/revisions\/1624"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/media\/1633"}],"wp:attachment":[{"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/media?parent=1621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/categories?post=1621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/golfdaleconsulting.com\/wp-json\/wp\/v2\/tags?post=1621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}