Impact Identification: (30 minutes per process) This exercise has the trainee lead the participants on a brainstorming of hypothetical consequences (impacts) when the threats identified earlier occur. Give participants a pen and three sticky note pads. Explain the topic and the categories. 76 Staff/People - (which includes families, friends, and beneficiaries): temporary or permanent physical injury, temporary or longer-term psychological damage, death, legal costs, cost of medical treatment, loss of morale or trust in management. Organization - loss of or damage to assets, operational inefficiency, loss of program quality or outright suspension; loss of reputation; loss of funding. Program - reduced program quality, temporary suspension of the program, forced termination of the program. Instruct each person to generate DIRECT impacts based upon the exiting threat clustering from Threat Identification. Include only one impact per sticky note. Have one participant quickly describe then place an impact on the board writing along side it the threat that causes it. Invite others to place similar/the same impacts in proximity and quickly describe how it can occurs. Repeat the process until all impacts are included. Have participants add stickies for any secondary/cascading impacts Discuss and rearrange impacts as groupings emerge. Label impact clusters that appear. NOTES: Tell participants to write multiple impacts per color. Look for opportunities to create sub-groups. Limit the time frame for discussion. Take photos of the impact clusters once you have finished enumerating them. Adversary Exploration (Likelyhood): Explain the topic and the categories. 77 "History – a past incidence or pattern of attacks on similar organizations." "Intent – specific threats, a demonstrated intention or mindset to attack." "Capability – the wherewithal to carry out an attack." Brainstorm adversaries who have demonstrated likelihood to impact their work or one of the process'. Pick an adversary and write their name on the board. Write specific instances of adversary history, intent, and capacity announced by the participants. Page 154 of 240