[__jf__]

Covid lockdowns and WFH had a surprisingly large influence on self-service threat modeling facilitation I did for a client.

Pre-covid we would facilitate workshops interactively around a whiteboard. It turns out that starting with an empty one was essential for successfully thinking about risk.

During lockdowns whiteboarding was difficult so we often discussed the application stack in a virtual meeting using some Powerpoint or Visio diagram provided by the team. Without fail this diagram was huge and included lots of detail. This didn’t help group discussion because basically only the author would understand it enough. After a number of these unsatisfying attempts we started having separate virtual meetings to create high-level diagrams to abstract away initial detail overload. This often resulted in teams discovering their CI/CD pipeline and have a healthy discussion about scope.

[parkerhiggins]

try Miro, miro.com It's been invaluable in remote facilitation across all teams.

[marcind]

try sharetheboard.com -- closest I've seen to true remote whiteboarding. Not only do you get to stick with a real whiteboard, you can turn it into a digital input for the Miros of the world.