Imagine for a moment your team has built a digital service that thousands — or even millions — of people depend on. You’ve spent countless hours to ensure it runs smoothly and allows customers to seamlessly access the information they need. But one day the service unexpectedly shuts down, nobody can log in to their accounts, and help requests and frustrated messages come flooding in. What do you do?
One of the critical aspects of supporting large scale infrastructure is the ability to respond to potentially harmful issues that can arise throughout a project’s lifecycle.
The ATO process can be a taxing, frustrating process that may slow down innovation on federal web applications. But enabling a continuous ATO can bring about a number of key benefits to both the program teams and those who review the ATO application.
Threat modeling at Ad Hoc often starts early in the process of designing a system, and can involve product managers as much as it does any of the engineering staff.