Distinguish an asset, threat, vulnerability, attack vector, risk, control and security incident in a given scenario.

Classify cybersecurity threats as internal or external and as intentional or accidental.

Explain how employee sabotage, theft, unauthorised access and accidental disclosure can harm an organisation.

Identify unsafe staff practices and weak organisational security measures in a workplace scenario.

Distinguish the motives of commercial, government, terrorist and individual threat actors.

Analyse the operational, financial, reputational and intellectual-property impacts of a successful attack.

Judge the severity of a non-monetary loss by considering the value of the affected asset.

Use a reputable cybersecurity advisory source to summarise a current change in the threat landscape.