OUTPUTS A host driven threat-matrix including the following: Adversaries (threat actors) with capabilities and willingness Impacts of attacks against critical processes, ranked by severity Likelihood of each (based on adversaries) Latest general cyber-security threats Identify existing in/formal security practices that the participants use to address risks. OPERATIONAL SECURITY Data generated in this component is highly sensitive - in addition to standard practices of saving only in encrypted containers and destroying physical copy versions (stickies, etc.) ans using VPNs/Tor to conduct research, also take note of the physical location where you are conducting any exercises to prevent eavesdropping/viewing. PREPARATION Threat Identification works best grounded against mapped out organizational processes or a data/asset map. See the Process Mapping and Data Assessment methods for exercises to generate these. RESOURCES Threat Assessment Activities Guide: "Threat Assessment: Chapter 2.5 p. 38"(Operational Security Management in Violent Environments (Revised Edition)) Example text for introducing threats - Integrated Security Written exercise: Threats assessment - Integrated Security Facilitators Manual (With PDF download of "Threat Introduction Example Text" and "Threat Assessment Written Exercises") - Integrated Security Analyzing Threats: Chapter 3 - Workbook on Security: Practical Steps for Human Rights Defenders at Risk manual: Establishing the threat level of direct attacks (targeting)(Protection Manual for Human Rights Defenders) Threat Modeling Resources (General) Book: "Threat Modeling: Designing for Security" (Adam Shostack) Website: "An Introduction to Threat Modeling" (Surveillance Self-Defense) Page 147 of 240