Compliance checklists inhibit thinking, and make it hard for security to influence across the organization. Threat models can help. Join this session to learn a simple approach to threat modeling, and how backing up from the control to the threat helps us understand and meet goals. Security can move from being the department of "no" to a helpful collaborator through threat modeling.