1. Technical Proposals advanced

    A team must justify adopting a workflow engine to a sceptical audience who see it as unnecessary complexity. How should the case be made?

    2 min answer temporalcomplexityjustificationevidence
  2. Technical Proposals advanced

    Walk me through how you would write a technical proposal for a significant platform investment so that it gets a decision in one meeting rather than a fourth round of questions.

    3 min answer proposalsdecision makingstakeholdersreversibility
  3. Communicating Threat Models advanced

    A security review hands engineering 47 findings on a five-by-five likelihood-impact matrix: 9 high, 12 medium, 26 low, each with a numeric score and a risk-accepted column that three rows already use. Nine weeks later two findings are fixed. Review this pack. What would you remove, what would you change, and what would you keep even though it looks odd?

    3 min answer threat modelfindingsrisk matrixprioritisation
  4. Communicating Threat Models advanced

    A security team stops scoring findings on a five-by-five likelihood-impact matrix and instead writes each one as a reachable attack path with the single change that closes it. Remediation throughput triples in a quarter. What has the organisation given up, and when does that bill arrive?

    2 min answer threat-modelrisk-registersecurity-communicationaudit
  5. Communicating Threat Models advanced

    How do you run a threat model that results in code changes rather than a report?

    2 min answer threat-modellingactionableprioritisationownership
  6. Written Communication advanced

    In April 2022 an Atlassian maintenance script permanently deleted 883 sites belonging to 775 customers in 23 minutes, because a request passed between two teams did not say which identifiers or which deletion mode were meant. What does this say about written instructions as an engineering interface, and what would you change?

    3 min answer atlassianincidentrunbookambiguity