Attributes of Actions

Question 1

Internal/External

Answer 1

Whether the threat actor operates from within the target
organisation or externally.

Question 2

Resources/Funding

Answer 2

The level of financial and technological resources available to the threat actor.

Question 3

Level of Sophistication/Capability

Answer 3

The technical expertise and sophistication of the threat actor’s tactics, techniques, and procedures (TTPs).