The CRA, DORA, DPDP, MAS TRM, and PCI DSS v4.0.1 all want documented, secure-by-design evidence. Under that pressure, teams are clicking “generate” and shipping the artifact upstream. Is AI + Compliance Standards converting Threat Modeling into a checkbox exercise? But a STRIDE table an LLM produced in 12 seconds isn’t a threat model. It’s compliance theater with better formatting.
The real question isn’t whether to use AI. It’s where AI helps you scale, and where it quietly strips out the only thing that made threat modeling valuable: engineers arguing about trust boundaries in a room.
Join us virtually as Himanshu Das (CISO, Black Hat Asia Review Board, Chevening Fellow) and Donavan Cheah (Senior Cybersecurity Consultant) break down:
• What laws and standards like CRA, DORA, DPDP, MAS TRM, and PCI DSS v4.0.1 actually demand from engineering, beyond the audit deck • Where AI generated models break down, and how reviewers can spot them • How to use AI to scale threat modeling without losing the signal
Who this is for:
• CISOs answering to the board on regulatory exposure • Product Security Leads building threat modeling programs that scale across engineering • AppSec Engineers running the reviews and seeing where AI output falls apart • GRC and Compliance Owners signing the SOC 2, PCI ROC, or DORA attestation and carrying the risk if controls don’t hold
🗓 Friday, May 8, 2026. 8:00 to 9:00 PM IST. Virtual. 🔗 Register here - https://luma.com/jsnmcqmy
#tmcbangalore #threatmodeling #threatmodelingconnect