Do you need a certification to tell you how to threat model?
No (with caveats). Here's my review of the courses claiming to teach threat modelling. Caveat 1 - If you have been pentesting for 5+ years and have never "written" a threat model, you dont need to spend money on a certification to tell you how to threat model - you have been mentally threat modelling before each and every pentest you complete. I thought there would be more caveats, but thats my…