Threat-Modelling User-to-User Harm in Applications
A technically secure application can still be unsafe for the people using it. CIOs responsible for applications with meaningful user interaction should require a User-Harm Threat Model before launch and whenever interaction functionality materially changes.