Euroasia Training Euroasia Training
AR

Cybersecurity and Digital Innovation

Cyber Threat Modeling and Risk Evaluation

5 units

Please select a city/session before registration.

About this program

Organizations face continuous threats from a diverse array of cyber attacks. To effectively counter these dangers, cybersecurity professionals must methodically identify, model, and evaluate potential threats before they occur.
This Cyber Threat Modeling and Risk Assessment Training Course equips participants with systematic techniques for analyzing threats, assessing vulnerabilities, and measuring risk. It covers prominent frameworks including STRIDE, DREAD, MITRE ATT&CK, and NIST risk management, with a focus on practical implementation within enterprise environments.
Through interactive workshops, real-world case studies, and simulations, attendees will gain practical experience in creating threat models and performing risk assessments to enhance cyber resilience.

Course benefits

  • Gain knowledge of systematic approaches to cyber threat modeling.
  • Utilize frameworks such as STRIDE, DREAD, and MITRE ATT&CK.
  • Perform risk assessments aligned with NIST and ISO standards.
  • Enhance security measures by predicting attack vectors.
  • Advance governance practices and improve risk reporting at the executive level.

Key outcomes

  • Understand the core principles of cyber threat modeling.
  • Use structured frameworks to detect and classify threats.
  • Carry out enterprise risk assessments following industry best practices.
  • Assess the likelihood and potential impact of cyber threats.
  • Incorporate threat modeling into security strategies and operations.
  • Effectively communicate cyber risks in business and financial terms.
  • Create a forward-looking plan for robust cyber defense.

Who should attend

  • Cybersecurity analysts and engineers.
  • Risk management and governance professionals.
  • SOC managers and security architects.
  • Senior executives accountable for organizational cyber resilience.

Course outline

1

Unit 1: Fundamentals of Threat Modeling and Risk Evaluation

  • Importance of threat modeling within cybersecurity.
  • Fundamental principles of risks, vulnerabilities, and threats.
  • Analysis of case studies highlighting failures and achievements.
  • Summary of various frameworks and methodologies.
2

Unit 2: Threat Modeling Methodologies and Frameworks

  • Examination of STRIDE and DREAD frameworks.
  • Utilization of attack tree techniques.
  • Application of MITRE ATT&CK in mapping adversary tactics.
  • Practical threat modeling workshop.
3

Unit 3: Standards for Cyber Risk Evaluation

  • Overview of the NIST Cybersecurity Framework.
  • ISO/IEC 27005 approaches to risk management.
  • Use of the FAIR model for quantitative risk assessment.
  • Hands-on session for risk evaluation.
4

Unit 4: Measuring and Communicating Cyber Risks

  • Converting risk factors into economic impact.
  • Assessing probability, impact, and setting priorities.
  • Creation of heat maps and performance dashboards.
  • Effective communication of risks to executives and board members.
5

Unit 5: Incorporating Threat Modeling into Organizational Strategy

  • Integrating risk assessment processes within enterprise security.
  • Ongoing monitoring and periodic reassessment.
  • Anticipating future challenges in threat modeling.
  • Developing a strategic plan for proactive defense.