If you were concentrating more on the Quantitative process, you would be looking at the various historical impacts and manners of attack and working to get a feel for how the attack could come at the company or vulnerable area of the network.

What would be some of the key indicators that would need to be looked for?