OWASP - Projetos: https://owasp.org/projects

Lista de modelagem de ameaças: https://insights.sei.cmu.edu/blog/threat-modeling-12-available-methods/

Modelo de maturidade em segurança - AWS: https://maturitymodel.security.aws.dev/pt/model/

Padrões de ambientes AWS: https://www.linkedin.com/pulse/developing-multi-account-aws-environment-strategy-gary-stafford

Modelagem de ameaças Microsoft: https://learn.microsoft.com/pt-br/azure/security/develop/threat-modeling-tool

Livro: Secure by Design - Daniel Sawano, Dan Bergh Johnsson, Daniel Deogun