How to evaluate security problems

Our security team provides support to other lines of business and can be contacted about any security-related issue. Recently, the product and development teams asked about SMS OTP which was a great chance to show how we approach these requests. The hint is threat modeling, which I plan to cover in a dedicated blog post one day. Table of Contents Table of Contents The Problem Threat modeling…