TBH I haven’t seen #PST properly implemented, but I think @DinisCruz is having a go.
Hey @DinisCruz have you done a @wardleymaps for implementing a full #AppSec program? Or seen one that worked well? In particular looking for info on @swardley's #PST model applied for this.
@_tony_richards @VirtualTal how about you?
-
-
-
Yes we are doing full PST at
@GlasswallGlobal , I don't think we have a meeting these days without the mention of Pioneers, Settlers or Town Planners :) - Još 3 druga odgovora
Novi razgovor -
-
-
thanks
@secfigo twitching on expert *cough*
@sec_tigger I haven't done it specifically for Appsec, but how I've approached it generically before was follow a SABSA-like structure for the map itself (as attached) as it provides a good logical breakup from biz objectives 1/npic.twitter.com/ygBYCjyhjU
-
which I then connect to logical services (things the security/ops team provide) and the actual mechanisms and components used. I've planned for ages to integrate this blog post with Wardley mapping but have too much WIP :) https://zinatullin.com/2017/02/14/using-sabsa-for-application-security/ … with that approach integrated 2/3
- Još 7 drugih odgovora
Novi razgovor -
-
-
Have you seen the maps I shared in my presentation about Wardley Maps in SlideShare?
-
I thought so, but I don't remember seeing anything there specifically for an appsec programme, or even related to anything appsec? Did I miss it or remember wrong?
Kraj razgovora
Novi razgovor -
-
-
@madplatt is an expert in wardley mapping and has helped many of his client's in wardley mapping. -
I endorse
@madplatt as well! - Još 1 odgovor
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.