1.Identify a potential threat (to an organization)
2.Identify the threat's motivation, capabilities and history
3.Choose an organization
4.Identify the organization's assets
5.What tactics might the "chosen threat" use against the organization?
6.Will such tactics be effective? Why or why not?