In our first session, we’re heading back to where it all begins: the whiteboard - where engineers sketch out their systems. This is where the foundations are laid, and the perfect time to ask: What could go wrong?

This is the essence of threat modelling. Spotting weaknesses while the design is still on the whiteboard.

Our workshop will use the Elevation of Privilege card game, created by security expert Adam Shostack, to make threat modelling engaging and fun. In this game, developers compete (or collaborate) to uncover common security flaws in their application designs. It’s a structured yet creative process that breaks down hierarchies, sparks conversation, and fosters genuine collaboration that no automated tool can match.

You’ll take part in a live virtual game, working in a small team on a shared system architecture diagram. Together, you’ll learn how to:

• Identify vulnerabilities early in the design phase
• Explore attack categories through a six-part framework
• Experience how serious security work can also be fun

It’s an approach you can take back to your own engineering teams, helping to build a culture and mindset where security is part of the design from day one, and it's fun!