Purpose
A structured assessment of deliberate threats across the organisation’s cyber, physical, personnel, supply-chain and information domains.
Typical activities
Typical activities include adversary identification, intent and capability assessment, opportunity analysis, attack-pathway mapping, critical asset identification, control review and scenario development.
Deliverables
Deliverables include adversary dossiers, prioritised threat scenarios, mapped attack pathways, an executive briefing and investment recommendations.
Engagement
Engagements are offered in three fixed-price tiers and are typically delivered over six to eight weeks. Scope and investment depend on organisational complexity, geographic footprint and threat environment.