The stakeholders of a web application often do not have specific knowledge regarding particular vulnerabilities. Yet they frequently bear the responsibility of managing the risks. Security professional can educate stakeholders through misuse cases. This presentation will cover the creation and presentation of misuse cases to help stakeholders better understand and ultimately manage the risks associated with various web application vulnerabilities.