# Threat Model Thursday: Talking, Dialogue and Review

DevFeed: [Threat Model Thursday: Talking, Dialogue and Review](<https://devfeed.tech/articles/threat-model-thursday-talking-dialogue-and-review-37084.md>)

Original publisher: [Read original article](<https://shostack.org/blog/tmt-talking-dialogue-and-review/>)

Author: Adam

Published: 2018-04-12T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>)

Tags: [design](<https://devfeed.tech/tags/design.md>), [developers](<https://devfeed.tech/tags/developers.md>), [discussion](<https://devfeed.tech/tags/discussion.md>), [operations](<https://devfeed.tech/tags/operations.md>), [reviews](<https://devfeed.tech/tags/reviews.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

The article contrasts collaborative, whiteboard-driven threat-modeling dialogue with late-stage threat-model reviews. It argues that dialogue helps teams explore tradeoffs with developers and operations, while reviews often validate completed work or revisit decisions in a judgmental way.

## Source excerpt

As we head into RSA, I want to hold the technical TM Thursday post, and talk about how we talk to others in our organizations about particular threat models, and how we frame those conversations.