Workshop 3 — Strategic scenarios
Workshop 3 builds the high-level attack paths, drawing on the organisation's ecosystem (suppliers, service providers, partners, customers).
Sub-steps of the workshop
| Step | Page | Content |
|---|---|---|
| 3.1 | Stakeholders | Ecosystem mapping and threat radar |
| 3.2 | Strategic scenarios | Attack paths linking risk sources, stakeholders and business values |
| 3.3 | Ecosystem measures | Security measures applicable to ecosystem stakeholders |
Pages 3.1 and 3.2 are detailed respectively in Stakeholders and Strategic scenarios.
Recommended approach
- Map the ecosystem (3.1): each stakeholder is rated for dependency, penetration and cyber maturity — a pairing of high dependency + low maturity flags a supply-chain risk.
- Build the strategic scenarios (3.2) by linking a retained RS/OT pair (Workshop 2) to an attack path — direct or going through a stakeholder.
- Document the ecosystem measures (3.3) applicable to reduce third-party exposure.
High-level view
Strategic scenarios are deliberately kept at a high level — Workshop 4 is where they are translated into detailed technical attack chains on the support assets.
Going further
See Stakeholders and Strategic scenarios.