Top Threats

Discussion Topics Summary 2025-07-17

• CSA General Business
  • The Agentic AI Security Summit is set for August 19th.
  • The AI controls matrix publication was released after an extended peer review process, emphasizing its importance and relevance to AI controls.
  • The transition from the current Tope Threats Slack to CSA sponsored Slack is ongoing.
• Vic reviewed what's been done on the document since the last meeting:
  • Michael Morgenstern added cloud security platforms that include threat modeling functionality have been added to the list of tools
  • Michael Roza moved the tools and platform tables to the Modern Threat Modeling Tools section.
  • Vic updated the threat modeling card diagrams. 
  • Satish updating the cloud threat modeling example with more information regarding how it aligns with STRIDE and added more details to the cards.
• Vic and Satish will meet separately to revise the threat card graphics.  We will post the meeting in Slack for others who want to attend.
• Per Gustavo's suggestion, we will add disclaimers to the Modern Threat Modeling Tools section, indicating that we are not making recommendations or advocating for one tool over another. 
• We will do likewise for the Threat Modeling Frameworks section.
• In both situations, we will add text directing readers to explore the document's References section to get more information about tools and platforms. 
• The internal review period is scheduled to conclude on July 31.  We can push the schedule out, if necessary.
• Next meeting July 31

Top Threats Working Group Call

------------------------------
Vic Hargrave
Cybersecurity Analytics Engr.
Everfox
+1-650-430-3356
[email protected]
------------------------------