Workshop to Teach OWASP TaSM Framework for Prioritizing Cybersecurity Defenses

Summary

A virtual workshop on March 31, 2026, will guide participants through using the OWASP Threat and Safeguard Matrix to prioritize organizational threats, map defenses across the NIST CSF, measure progress, and justify security budgets.

Key points

• The workshop is led by Ross Young, creator of the OWASP Threat and Safeguard Matrix (TaSM).
• Participants will build a matrix linking material organizational threats to safeguards across the five NIST Cybersecurity Framework functions.
• The session covers security metrics, executive communication, and connecting security spending to business risks.
• A workshop exercise applies TaSM to generative AI and LLM risks, including sensitive-data leaks and contaminated AI supply chains.
• Attendees are offered templates, an interactive matrix tool, metrics examples, and a completed AI threat matrix.
• The virtual session is scheduled for March 31, 2026; access is free for Cybersecurity Club members and $20 for non-members.

People