Session 1.6d Tutorial: Implementing Threat Modelling to Inform Security Risk Assessment: Interactive Walkthrough of a Space Support System
Tracks
ㅤ
| Tuesday, November 17, 2026 |
| 1:30 PM - 2:30 PM |
| Nicholls Theatre |
Presentation Outline
Threat modelling is a well-established concept, yet its practical application to support security risk assessment is not widely embedded across the Australian cyber engineering community. For this talk, I will run through an interactive threat assessment of a representative system, showcasing how threat modelling can be effectively used to identify, analyse and document security risks within complex systems such as a Space Support System.
The session will introduce commonly used threat modelling frameworks and techniques, including the use of references such as MITRE ATT&CK, SPARTA and the CAPEC framework. Attendees will gain insight into how modelling outputs can be documented and integrated into a Security Risk Management Plan (SRMP). I will also cover off on the various modelling techniques commonly used for this activity, and the tooling and technologies available that will simplify the effort required.
The presentation will conclude with guidance on how threat modelling artefacts can support system authorisation and informed security decision making within engineering and operational environments.
Speaker
Mr Henry Lau
Lead Security Architect
Saab Australia
ㅤ
Biography
Henry is an experienced Cyber Security Consultant with over a decade of experience designing secure and resilient system for the Defence and Government sectors. His work spans across multiple facets of disciplines ranging from security engineering and GRC to emanations security, with the aim to bridge the gap between securing complex systems and meeting business objectives. He is a current IRAP assessor with certifications in CISSP, CISM, CRISC, SABSA and ISO270001 LA. He also holds a Chartered recognition with Engineers Australia in the area of IEEE and Cyber Engineering.
