Top Threats

Discussion Topics Summary 2025-07-03

• CSA General Business
  • CSA IT is transitioning our group to a CSA official Slack channel. 
  • The Non-Human Identity Summit is scheduled for July 15th and 16th
  • The Agentic AI Security Summit is set for August 19th.
• Vic reviewed what's been done on the draft document so far.
  • The Core Threat Modeling Activities, Cloud Threat Modeling, and Creating a Cloud Threat Model have been retained from Rev 1 of the paper. 
  • Sections were added on Threat Modeling Frameworks (Michael Roza) and Modern Threat Modeling Tools (Gustavo Arreaza).
  • The References section has been updated to included more sources and the links are categorized. 
  • Each section has been updated to include subsections that appear in the table of contents.
• The team resolved some comments and suggestions in the document.
• Some of the threat model cards refer to earlier version of CCM.  We will have to update these diagrams when we have access to the latest CCM version, sometime in August.
• Alex Getsin suggested assigning more authors to the document to distribute the writing responsibilities. Check the table in the working for current assignments.
• Several new folks joined the meeting, and Alex met with them on the side to give them an orientation to our group.
• Vic will send out Slack invites to these new members and add them to the list of people who can edit the document.
• The team discussed the schedule for publication, which is listed below.  
• We will be reviewing the working document during July and will resolve comments/corrections at the next two meetings.
• Next meeting July 17

------------------------------
Vic Hargrave
Cybersecurity Analytics Engr.
Everfox
+1-650-430-3356
[email protected]
------------------------------