Where do you get statistics and probabilities on threats? It seems organizations always ask for hard facts on threat statistics, but the research doesn’t appear to be very mature. Creating a good threat library and making a best guest effort seems to be common practice among others in the security industry. There are a few good sources for this information that exist such as:
- CERTs Ecrime Surveys
- The National Counter Terrorism Center
- FEMA
- Workshare Reports
And then you have all kinds of different sites that can help you build a threat library but are lacking statistics such as:
- Georgia Institute of Technology
http://www.oit.gatech.edu/information_security/architecture/threat.html
Some of these sources were used to start the ISM’s list, but my involvement has slipped, however time and time again there is a need for this information. If anyone has other good resources let me know and I will add them to the links page and see about getting some of this information into the ISM community threat library.
InfoSecAlways.com 
How about your historical record of incidents and the associated threats? While it may be skewed because of your inherent biases, it does prove fantastic for responding to the threats that effect YOU specifically.
It was dark when I woke. This is a ray of suhnisne.
That is a great example, except many organizations have poor tracking mechanisms, which result in a lack of data. Therefore, without this data a initial list needs to be created.
Pretty! This was a really wonderful post. Many thanks
for supplying these details.
Hello there, I found your site by means of Google whilst looking for a related matter, your
web site got here up, it appears to be like good. I have bookmarked it in my google bookmarks.
Hello there, simply changed into aware of your weblog via Google, and located that it’s really informative.
I am gonna watch out for brussels. I will be grateful when you
proceed this in future. Lots of other folks will likely be benefited from your writing.
Cheers!