Conversation

i now own the threat modelling function at my current organisation because nothing is punished quite as harshly as competence and pre-existing workloads are irrelevant because LLMs can help and argh, so much argh.

i am not ok with that being a reason why i can't have a human learn and grow by mapping penetration test findings to STRIDE and then mapping that to controls and then risks.