Quick Threat Modelling [Session 2 of 4]

Half-Day Interactive (Classroom) Training - OWASP New Zealand Day 2026

Course Details

Dates: Tuesday, 1 September 2026

Time: 1:45 to 5:30 p.m. (NZST)

Instructor: David Jennings, Fluid Security

Course Fee: NZ $225.00 (plus GST and ticketing fees)

Registration Site: https://events.humanitix.com/owaspnz2026-training

NOTE: This is Session 2 of a four-session, two-day training course. While the four modules are intended to be completed in sequence, more experienced practitioners may choose to enrol in one or more individual sessions.

Course Description

Most people who have ever experienced a threat model, remember a painstaking long workshop that results in so much work to do, it becomes overwhelming. This leads to no-one ever wanting to do a threat model again and loses its value if no actions can actually be committed to or implemented.

Participants learn how to quickly defi ne scope, identify critical assets, enumerate realistic threat scenarios, and assess impact - all within a strict timebox, with the focus on speed, clarity, and decision-making - without becoming an academic exercise in finding every possible threat or solving for cosmic radiation.

The lightweight, repeatable threat-modelling approach taught is ideal for development teams, security teams, architects, product owners, technical leaders, and anyone involved in system design or change. The methodology is usable by mixed-discipline teams and scalable across the organisation, drawing on well-known established concepts but distils them into a format that works in real-world environments.

The training session will cover:

A threat modelling methodology you can use immediately and complete in 15 minutes
A shared vocabulary for discussing threats with non-technical stakeholders
The ability to surface meaningful security risks and mitigations early
How to avoid analysis paralysis and prioritise decision-making
Confidence to run quick threat-modelling sessions independently or within teams
Suitable for all levels - no prior threat-modelling experience is required

This session is the second in our four-module course. By this point, participants have felt what it is like to be in an incident and learned skills of how to respond. This session teaches them how to triage quickly with threat models of what would be critical to an organisation and gets them ready for the following sessions.

Visit https://fluidsecurity.co.nz/training/irtraining/ for more details.

Your Instructor

David Jennings (DJ, a.k.a. Moss) remains optimistic that he can make organisations great again (read: more secure), even though he’s seen his fair share of horror stories over his career. With risks being blindly accepted and added to ever-expanding registers, it wasn’t long before he was in the ambulance at the bottom of the cliff. Let his dulcet tones soothe you as you come for a ride and learn how to be useful instead of just making nee-naw sounds when the worst occurs.