Threats that are relevant to the delivery of the function are addressed, at least in an ad hoc manner
Context and Guidance: The organisation responds to threats identified through the collection and analysis of threat information when they are determined to have the potential to adversely affect the function. Relevant threats are those that have the means, motive, and opportunity to affect the delivery of services. Threat response might involve, for example, implementing mitigating controls or monitoring threat status.
Related Practices • Input From: Implementing THREAT-2c provides input that may be useful for implementing this practice. • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: THREAT-2d, THREAT-2g, THREAT-2j.