Workshop 4 — Operational scenarios
Workshop 4 translates strategic scenarios into technical attack chains on the support assets, and computes the risk level of each scenario.
Sub-steps of the workshop
| Step | Page | Content |
|---|---|---|
| 4.1 | Operational scenarios | Building the attack chains (technical actions) and rating |
| 4.2 | Likelihood assessment | Summary of the likelihood of all operational scenarios |
| 4.3 | Scenario generator | Assistance generating scenarios (optional) |
Pages 4.1 and 4.2 are detailed respectively in Operational scenarios and Likelihood assessment.
Recommended approach
- For each retained strategic scenario (Workshop 3), build one or more operational scenarios (4.1): a sequence of the attacker's technical actions on the support assets, with a likelihood rating.
- Review the likelihood summary (4.2) to view and adjust the rating across all scenarios.
- Use the scenario generator (4.3) if needed to speed up drafting.
Consistency with Workshop 3
An operational scenario must remain linked to a strategic path from Workshop 3 — this is what guarantees full traceability from risk source → path → technical action → risk.