Challenge
A critical infrastructure organisation needed to determine how to prioritise its security and resilience efforts against hybrid threats. The challenge was to move beyond a broad catalogue of potential threats and identify which threat actors, intentions and methods were most relevant to the organisation and its critical functions.
Solution
Bright Bird developed a threat actor-led assessment linking relevant adversaries, their intentions and likely methods to the organisation’s critical functions, dependencies and vulnerabilities.
The assessment translated the threat picture into realistic Risk hypotheses and scenarios, allowing existing capabilities and gaps to be assessed against the threats they were intended to address. This provided a structured basis for identifying where strengthened security and resilience would have the greatest effect.
Result
The organisation gained a threat-based foundation for prioritising its security and resilience efforts against hybrid threats.
Rather than treating all potential threats and vulnerabilities equally, decision-makers could focus resources on the capabilities and measures most relevant to the actors, methods and dependencies assessed to create the greatest exposure.