| Threat Classification |
| |
| Nature | Physical | Destroy, weakening, and intervening in physical structure, mechanical, components, etc. |
| Cyber | Manipulate, shut down or limit access to a crucial system, information, or data | |
| Origin | Insider | Actors who linked to the organization, often as employees or suppliers with the ability to gain full or acquire knowledge |
| External | Actors who can only gain access utilizing violent acts or espionage | |
| Context | Isolated | Action launched to the same sector, operator, or geographical location |
| Multiple targets | Action launched in a manner of campaigns or serial attacks | |