Domain 2 — Threats, Vulnerabilities & Mitigations

Highly funded and skilled, often conducting long-term Advanced Persistent Threat (APT) campaigns for espionage or sabotage.

Ideological, political, or social causes rather than financial gain.

A current or former employee, contractor, or partner who misuses authorized access to harm the organization.

Hardware, software, or services used within an organization without IT department approval or oversight.

A low-skill attacker who uses prebuilt tools and scripts without deep technical understanding.

A threat (attack) vector is the path or method used to gain access; the attack surface is the sum of all points where an attacker could try to enter.