Fork me on GitHub

CultureAndOrganization -> Design: Creation of simple abuse stories

Risk and Opportunity

Risk: User stories mostly don't consider security implications. Security flaws are discovered too late in the development and deployment process.
Opportunity: Abuse stories are created during the creation of user stories.

Usefulness and Requirements of this Activitiy

Usefullness: High
Required knowledge: Low (one discipline)
Required time: Low
Required resources (systems): Very Low

Additional Information

Dependencies: Conduction of simple threat modeling on technical level, Creation of threat modeling processes and standards
Implementation hints:

OWASP SAMM VERSION 2

ISO27001 2017