Event Series

it-sa Expo&Congress 2026 — Intelligence-Driven Cyber Threat Modeling, From Cyber Threat Intelligence to Real-World Defense

A free four-part webinar and workshop series taking participants from Cyber Threat Intelligence foundations to applied Cyber Threat Modeling, culminating onsite at it-sa Expo&Congress 2026 in Nuremberg.

Dates
September – October 2026
Location
Online & Onsite at it-sa Expo&Congress 2026 Nuremberg, Germany
Sessions
6
About this series

This free-of-charge four-part webinar and workshop series delivers a structured journey from foundational knowledge to applied Cyber Threat Modeling (CTM), combining remote learning with instructor-led practical hands-on, onsite engagement around the it-sa Expo&Congress 2026 event in Nuremberg, Germany. The entire series is offered in both German and English, ensuring accessibility for a broad professional audience.

The first two sessions, delivered remotely ahead of the event, form the webinar component and focus exclusively on knowledge transfer for the cyber defence community. Participants will build a solid understanding of Cyber Threat Intelligence (CTI) and its distinction from CTM, guided by leading practices from CREST and TIBER-EU. The sessions further explore definitions, methodologies, and established frameworks for developing Cyber Threat Models, including STRIDE, MITRE ATT&CK, MITRE CAPEC, and standards such as STIX. Practical relevance, current challenges, and the role of AI/NLP in advancing CTM capabilities are critically examined.

The third and fourth sessions transition into interactive, onsite workshops at the event, expanding the discussion into business value while maintaining technical depth. Regulatory drivers such as DORA and expectations from BaFin are connected to real-world CTM use cases, threat modeling production approaches, and value creation. Participants will also explore open-source initiatives and SOC maturity frameworks.

Building on this foundation, the workshop showcases the IdoubleS CTM platform, including its AI-driven approach, value proposition, joint partner activities and early adopter client validation results—bridging theory, implementation, and measurable business impact.

The agenda, including dates and venue details, is outlined below. Use the registration form at the bottom of this page to sign up for this free webinar/workshop series. Participants will also benefit from a complementary publication accompanying the series: a free-of-charge book (ISBN 978-3-941723-44-3), with a limited number of hard copies available. Early registration is recommended to reserve a copy upon its release around the event timeframe.

The IdoubleS team looks forward to welcoming you in person at our booth in Hall 7, Booth #7-714 during the it-sa Expo&Congress 2026 Event.

Sessions6 sessions
  • WebinarEnglishTechnical

    23 September 2026, 12:30–14:30 CEST

    Online

    Session 01 · Webinar

    • What is Cyber Threat Intelligence and how it differs from Cyber Threat Models?

    • What is the definition of a Cyber Threat Model?

    • What approaches do exist to produce a Cyber Threat Model?

  • WebinarGermanTechnical

    23 September 2026, 15:30–17:30 CEST

    Online

    Session 01 · Webinar

    • What is Cyber Threat Intelligence and how it differs from Cyber Threat Models?

    • What is the definition of a Cyber Threat Model?

    • What approaches do exist to produce a Cyber Threat Model?

  • WebinarEnglishTechnical

    21 October 2026, 12:30–14:30 CEST

    Online

    Session 02 · Webinar

    • Which common Cyber Threat Model concepts, methodologies and frameworks do exist and what is their practical relevance today?

  • WebinarGermanTechnical

    21 October 2026, 15:30–17:30 CEST

    Online

    Session 02 · Webinar

    • Which common Cyber Threat Model concepts, methodologies and frameworks do exist and what is their practical relevance today?

  • Onsite WorkshopGermanTechnicalBusiness

    27 October 2026, 09:30–11:30 und 14:00–16:30 CEST

    it-sa Expo&Congress 2026 Nuremberg, Germany

    it-sa Expo&Congress logo

    Session 03 · Onsite Workshop

    • What are the business drivers for Cyber Threat Modeling?

    • What is the format of a Cyber Threat Model and how is it produced today?

    • Open Source Initiative

    • What is the purpose of a Cyber Threat Model and what value does it provide?

    • IdoubleS/Crowdstrike Joint Value Proposition

    • Early adopter customer success story, jointly with partners

    • What are the challenges of producing a Cyber Threat Model today and how can it be improved by leveraging AI?

    • Leverage IdoubleS CTM platform for automated modeling with help of AI

    • Showcase IdoubleS CTM platform validation approach and results, jointly with Integration Partner and Early Adopter Reference Customer

  • Onsite WorkshopEnglishTechnicalBusiness

    28 October 2026, 09:30–11:30 and 14:00–16:30 CEST

    it-sa Expo&Congress 2026 Nuremberg, Germany

    it-sa Expo&Congress logo

    Session 04 · Onsite Workshop

    • What are the business drivers for Cyber Threat Modeling?

    • What is the format of a Cyber Threat Model and how is it produced today?

    • Open Source Initiative

    • What is the purpose of a Cyber Threat Model and what value does it provide?

    • IdoubleS/Crowdstrike Joint Value Proposition

    • Early adopter customer success story, jointly with partners

    • What are the challenges of producing a Cyber Threat Model today and how can it be improved by leveraging AI?

    • Leverage IdoubleS CTM platform for automated modeling with help of AI

    • Showcase IdoubleS CTM platform validation approach and results, jointly with Integration Partner and Early Adopter Reference Customer

Register

Select sessions *

Webinars (Online)

Workshops (Onsite at it-sa Expo&Congress)