This document outlines three levels of cyber security threats - low, mid, and high level - and proposes strategies to address each. Low level threats are the most common and can exploit known vulnerabilities, requiring good security hygiene. Mid-level threats are less common but can create unknown vulnerabilities, necessitating investment in security packages and specialized teams. High level threats are rare but unstoppable, so the strategy is to deter them through time-consuming and expensive roadblocks that force threats to target weaker organizations instead.

1. Low Level Threat
(Most Common)
Mid Level
Threat
High Level Threat
(Rare)
Rare and unstoppable, only deterrence is to create time-
consuming and expensive tasks to stop threat
Most Common, Capable of exploiting
vulnerabilities that are already
known within the industry
Less Common, Capable of creating
vulnerabilities that are unknown to industry
(Zero Days)
Psychological Approach to a Human Cyber Security Threat
Create roadblocks
that take time and
cost your opposition
money, force threat
to weaker targets
Create good hygiene.
(patch updates,
training, awareness,
documentation) Create
accountability from the
organization.
Invest in security
packages,
specialized
departments, and
mitigation plans.
Stay current with
trends and up ticks.
J. White 2017
Deterrence Plan