Emphasize how for information security knowing the enemy means identifying, examining, and understanding the threats that most directly affect our organization and the security of our organization’s information assets.
Discuss how we can use our understanding of these aspects to create a list of threats prioritized by importance to the organization.