Apps & Products #risk tolerance Model the Adversary – who would attack you and why Test Reality – simulate how attacks actually unfold Fix What Matters – prioritized