Design reviews help teams find and address risk while there is still time to shape the solution. This course shows when a secure design review or formal threat model can help, and how teams can turn identified threats into controls, design patterns, and verification plans. Topics include STRIDE, identity and access, sensitive data, tenant isolation, trust boundaries, and review of AI-assisted code, designs, infrastructure, and automated decisions.

• Understanding the difference between secure implementation and secure design
• Identifying when a secure design review or formal threat model is needed
• Applying practical threat modeling approaches, including STRIDE
• Evaluating identity, access, sensitive data, tenant isolation, and trust boundaries
• Reviewing AI-assisted code, designs, infrastructure, and automated decisions
• Translating threats into controls, secure design patterns, and verification plans