Get 15% off for Cybersecurity Awareness Month. Use code CYBERREADY15. Explore ideas

Threat Modeling Workshop: Elevation of Privilege

Threat modeling is most effective when the whole team contributes. But knowing where to start, what questions to ask and how to identify meaningful threats can be challenging.

In this practical, facilitator-led workshop, your team explores a realistic software architecture, uses the Elevation of Privilege card game to discover potential security threats and learns a structured approach to analysing security risks together.

Book a workshopExplore the workshop kit

  • Why it works

    The Elevation of Privilege game as a threat modeling tool works because it gets the engineers who know the system best, involved in securing it, without getting in their way. It brings security into the design process early, rather than relying on specialists when it's too late to make changes. 

    It makes security something teams tackle together, take ownership of and build into the way they work, rather than something imposed on them.

    Learn more

  • Who should attend

    This workshop is designed for:

    • Software developers and engineers
    • Software and solution architects
    • Application security and DevSecOps professionals
    • Security Champions
    • Software testers and QA engineers
    • Product owners working with technical teams

  • What your team will takeaway

    • Practical experience applying STRIDE to a realistic architecture.
    • Greater confidence identifying and discussing security threats.
    • Examples of documented threat scenarios.
    • A common language for collaborating on software security.
    • A repeatable technique for introducing threat modelling into development activities.

  • Professional Skills Development

    This workshop develops practical competencies in threat identification, security risk analysis and collaborative threat modelling.

    The learning activities are relevant to professional cybersecurity development, including topics found within ISACA's CRISC Risk Assessment domain.

    If you're interested to find out more, get in touch.

    Contact us

Workshop at a glance

  • Duration: Two hours
  • Format: In-person or online
  • Audience: Technical and cross-functional development teams
  • Methodology: STRIDE threat modelling
  • Experience required: No previous threat modelling experience
  • Materials supplied: Elevation of Privilege cards, a sample architecture and a structured learning exercise
  • Facilitation: CyberSec Games or an authorised workshop facilitator

Creator led session with Adam Shostack

We are very excited to collaborate with Adam Shostack, creator of Elevation of Privilege, to deliver selected sessions giving teams the opportunity to learn directly from one of the leading practitioners in threat modeling.

Ask about a session with Adam

How it works?

  • Overview

    • Facilitator: CyberSec Games or Adam Shostack
    • Duration: 90 to 120 minutes
    • In-person or Zoom
    • Group size: Teams of 5 to 7 players
    • Session materials: For both virtual and in-person sessions, each player will receive an EoP deck, a training exercise and a copy of the system architecture diagram.

  • Before the session

    For virtual sessions, random card hands are generated using the online Croupier tool and emailed to players ahead of the session. Players pick out their cards from their deck before we start.

    Scorekeeping: Either someone from CyberSec Games or a nominated team member keeps score. If it’s a client team member, we'll provide a short pre-session briefing.

  • Session details

    The session begins with a short introduction to Elevation of Privilege and the AWS architecture scenario we’ll be using.

    Then we jump into live gameplay: players take turns applying their cards to the scenario, identifying threats, discussing risks, and capturing insights.

    We finish with a group discussion on what we observed and practical ways to introduce EoP into your own teams.

Interested in booking a session for your team?

If you're thinking about bringing this session to your team, drop us a line. We're happy to chat about what you need, talk through possible dates, and help figure out if it's the right fit.

Contact form

Frequently Asked Questions

Who is the workshop suitable for?

The workshop is particularly valuable for software developers, architects, security engineers, DevSecOps teams, Security Champions and anyone involved in designing or securing software systems.

It's also suitable for cross-functional teams that want to develop a shared understanding of software security risks.

How much does the session cost?

Pricing depends on the number of attendees and the delivery format (virtual or in-person). We’ll provide a clear quote once we know your team’s requirements.

Do participants need physical cards for online workshops?

Yes and we will ship the decks to the participants as part of the package. 

How is the workshop delivered online?

We've created a way to experience the session online without losing the tactile, interactive experience of the game.

In a traditional in-person workshop, participants draw cards from a shared deck. Our application Croupier brings this process online by managing randomised card hands for participants.

Each player receives their hand by email with the help of Croupier and picks out the matching cards from their deck ready for the session.

What’s the architecture scenario we’ll be threat modelling?

We’ll use a hotel booking system based on AWS, chosen because it’s a familiar application space for many, with just the right level of complexity for an engaging threat modelling session.

What do I need for the session?

We’ll send each player a physical Elevation of Privilege deck, the system architecture diagram and a training exercise in advance. You’ll need access to Zoom and your deck ready for use.

Is this a training workshop or an actual threat assessment?

It's primarily a professional learning experience.

Participants practise identifying and analysing threats using a representative software architecture. The objective is to develop the skills and confidence needed to undertake threat modelling within their own organisations.

Can participants earn CPE credits?

The workshop develops professional skills in threat modelling, threat identification and security risk analysis.

These subjects align with topics in ISACA's CRISC certification curriculum, particularly Domain 2 - Risk Assessment.

ISACA recognises qualifying third-party educational workshops as potential Continuing Professional Education (CPE) activities. Eligibility depends on the relevance of the learning, actual participation time and the applicable certification requirements.

We're developing supporting learning documentation to help participants evidence their professional development.
Back to top