
The sum(t) of a threat is then defined as the sum of the products (probability,
score) for each risk associated with the threat:
Action Evaluation
Action evaluation is the next, and final, step in the development of an active defense
policy. In this step, an organization identifies all of the potential actions it can per-
form to mitigate threats and the risks associated with those actions. At the end of
this step, an organization should have created an active defense action chart, which
will be used to develop the escalation ladder.
After this step, it will be important that the consequences of actions are known.
When considering active defense, it is ...