Threat modeling is one of those things that teams say they should be doing, but many never quite do it. Putting together a formal threat model with input from the whole organization is daunting. Where do you start? Where do you draw the line? In this episode we talk to Gene Gotimer about how to approach threat modeling without losing focus and getting too off track in what-ifs.