Secure Software Architecture & Threat Modeling: Design, Defend, and Deploy Resilient Systems (SF)
About This Course
This comprehensive 5-day course enables developers, architects, and security professionals to embed security into the core of software systems through structured architecture design and proactive threat modeling. Participants will explore industry-standard frameworks such as STRIDE, PASTA, and Attack Trees, applying them through real-world labs and collaborative exercises.
Focusing on the early stages of the software development life cycle (SDLC), this course promotes a shift-left approach—empowering teams to identify and mitigate architectural risks before they escalate. Learners will design secure architectures, simulate attack paths, and apply threat models within modern CI/CD environments, equipping them to protect cloud-native, microservices-based, and API-driven applications.
What You'll Learn
LO2 Direct the SDLC design of new security systems and architectures using key components of security system blueprint
LO3 Define overarching security system blueprint with evaluation guidelines such as STRIDES and DFDs for system architecture security
LO4 Lead review of system architecture against security requirement during development project stages from the results of a range of system security tests
LO5 Investigate potential security threats using a range of security tests and articulate the implications on IT systems from the test results
LO6 Develop a control plan for the security system architecture based on organizational guidelines and security system integration principles
LO7 Recommend modifications to security control designs to boost the protection of organization architecture using principles of security system integration
Entry Requirements
Professional Qualification and Other Diploma
Candidates who do not meet the above requirements will be assessed on case by case basis.