BrumSec has invited Jonny Tyers to speak at their Connect event in May 2026. We're looking forward to joining the Midlands Cyber community — a practitioner-led group that gets into the technical and methodological detail, which makes it a great fit for a session on how threat modelling actually works in practice.
About BrumSec Connect
BrumSec Connect is a regular meetup for security professionals in the Midlands. The audience tends to be engineers, security leads, and developers who want substance over sales pitches. That practitioner focus makes it a particularly good fit for a session on threat modelling, where the value is in the practical mechanics rather than the headline concept.
What the talk will cover
Jonny's talk will focus on what threat modelling looks like in practice for organisations that don't have large security teams. The conceptual case for threat modelling is well understood in security circles — what's less documented is how to run sessions efficiently, get useful outputs from engineering teams who have no security background, and connect findings to decisions rather than documents.
The session will cover the common failure modes: sessions that go too long and lose the room, outputs that are too generic to act on, and findings that get written up and never reviewed. Jonny will walk through the approach Threatplane uses and why specific choices — time-boxing, structured facilitation, risk-ranked outputs — are direct responses to those failure modes.
About BrumSec
BrumSec is part of the Midlands Cyber community, which runs a range of events for cyber security professionals across the region. Their Connect series is designed for practitioners to share knowledge without the vendor noise that dominates many security events.
Jonny founded Threatplane in 2017. With a background in offensive security, he has spent 15+ years helping organisations across defence, financial services, healthcare, and manufacturing understand and manage their technology risks.
Full bio →