Explore a conference talk that draws parallels between architecture risk assessments and the work of general physicians. Learn about the challenges and best practices in conducting security architecture evaluations, including dealing with assumptions, gathering information from various sources, and handling misinformation. Discover insights on improving outcomes, standardizing processes, and the future of security architecture, including the concept of a security architecture residency program. Gain valuable lessons from the medical field that can be applied to enhance the effectiveness of risk assessments in the realm of information security.
Turn Your Head And Cough - Why Architecture Risk Assessments Are Like Being A General Physician