Overview
What this challenge is about.
Run a STRIDE session on a HealthTech patient portal, build DFDs, rank threats, and author mitigations to earn your verifiable certificate.
The scenario
The HealthTech (Series-B at USD 35M raised, around 240,000 monthly active patients) is being held to a SOC 2 Type II + HIPAA risk assessment by its largest hospital-system customer — a credible threat model is part of the contract renewal.
The Brief
What you'll do, and what you'll demonstrate.
Run a STRIDE threat model on a HealthTech patient-portal redesign and produce a defensible launch-blocking decision list.
Earning criteria — what you'll demonstrate
- Apply STRIDE methodology to a real web-app architecture
- Draw data-flow diagrams with explicit trust boundaries
- Rank threats including regulatory-magnification factors
- Communicate launch-blocking decisions to a product audience
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Software Security
Master · Security
Strong alignment
This challenge maps to Software Security at the Master level. It sharpens the same practical skills your coursework expects — but in a real industry context with actual constraints and deliverables.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Threat Modeling
Apply threat modeling to solve real industry problems and demonstrate production-level capability.
- Stride
Apply stride to solve real industry problems and demonstrate production-level capability.
- Secure Design
Apply secure design to solve real industry problems and demonstrate production-level capability.
- Data Flow Diagrams
Apply data flow diagrams to solve real industry problems and demonstrate production-level capability.
- Hipaa
Apply hipaa to solve real industry problems and demonstrate production-level capability.
- Risk Management
Identify, assess, and mitigate risks across business operations and projects.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles:
Product Manager
Product managers who participate fluently in threat-modeling sessions make better trade-off calls between launch dates and risk reduction.
This challenge sharpens
- risk-management
- hipaa
- secure-design