Cyber Threat Landscape — Prelims Strategy

Prelims Strategy

Practise distinguishing a threat from a vulnerability and from an outcome. A deceptive actor is not the same object as a weak control, and neither is identical to the resulting financial loss. In a scenario, identify which part of that causal chain the question describes.

Treat incident statistics as defined observations. Check the reporting institution, period and unit before comparing figures. An increase can reflect more harmful activity, better detection, changed reporting or a combination; the total alone does not identify the cause or the number of unique victims.

Learn the statutory agency pairing and the concept of critical information infrastructure. Popularity, website traffic or government ownership alone does not replace the debilitating-impact criterion in the relevant definition.

Finally, distinguish prevention, detection, response and recovery. A backup is principally useful for restoration; it does not by itself prevent deceptive messages. A reporting process supports detection and coordination but is not proof that every reported event became a prosecutable criminal case.