Cost-aware Security defaults: threat modeling during normal delivery work when an incident has exposed the current gap
Operational guidance for teams applying threat modeling during normal delivery work when an incident has exposed the current gap to Security in production.