blog

Finding the Threats Before the Attacker Does

Listing threats to a system is the easy part. Being confident you have not missed any is the hard part — and there is a discipline for it that beats relying on memory.