These harms have now also been converted into a Cornucopia deck of cards, to help teams identify negative impacts on the service users, and thus to provide requirements which avoid or minimise such harms. The deck is called “Digital Benefits and Disbenefits Cornucopia” and uses the same game method. (4/4)
The game is now available at copi.owasp.org
Read more at: https://dev.to/owasp/dbd-cornucopia-is-now-available-to-play-online-4f83
#threatmodeling #appsec #security #welfare #benefits #disbenefits #cornucopia #games
Assessments of threats can be seen from different perspectives. Developers may come across privacy impact assessments (PIAs), where threats to users' data and the impact on those users are paramount. PIAs may additionally examine harms to organisations, third parties and wider society. (1/4)
Read more at: https://dev.to/owasp/dbd-cornucopia-is-now-available-to-play-online-4f83
#threatmodeling #appsec #security #welfare #benefits #disbenefits #cornucopia #games
sydseter
Uncle Joe