Purpose & Outputs
In this exercise, you can consider each of the threats you identified and prioritised in Section II in light of your existing security practices and other capacities relative to them. This will give you a 'baseline' on which you can later build and improve.
Input & Materials
To carry out this exercise, you need to have identified and prioritised threats in Exercise 2.5b. It may be helpful to write out the the capacities you identify so you can review them later.
Format & Steps
Return to the threats identified in Exercise 2.5b. For each of the threats you have identified, there were a series of questions. Here you can relate your existing security practices and capacities to each of these questions as follows:
Whom/What is under threat? Identify here what capacities (if any) are already protecting this person or thing from this threat. Examples of capacities could include:
- in the case of judicial harassment: good legal knowledge
- in the case of computer confiscation: having encrypted hard drives.
Who is behind the threat? Do you already have some kind of tactic for engaging with this actor? Are there any tactics or resources you have leveraged in order to prevent them from acting against you? If so, what? If they have acted against you before, did you respond in some way? If so, how? If you don't have any, that is fine: this will be important to remember when you identify gaps.
How: What information is necessary for them to carry out the attack? Do you have any information protection or counter-surveillance practices in place which might prevent that information from falling into their hands?
Where: What access to you or your property do they need? How do you secure the physical spaces around you (e.g. buildings, vehicles, private property) in order to protect yourself and your property? For example, do you lock your offices and homes? What 'common sense' practices do you have for your personal safety in dangerous environments? All of these are important to note, so that you don't start from zero!
Psychological, emotional and health tactics: Include any well-being practices that are in place to deal with this threat – do you have any practices which help to reduce stress, tiredness etc., and increase centredness and awareness which may help respond to this threat?
Where possible, try to consider these aspects relative to each of the threats you have identified. If you can't think of an answer for one or more of the questions, that is fine: you have just identified a gap to be filled! You will consider gaps in the following exercise, and use them as a way to identify what new resources and practices you need.
Remarks & Tips
Caution! For each of the answers you give, consider whether this practice or capacity is positive. How do you know? There is a slight danger of creating a false sense of security if you falsely credit an existing practice with helping to keep you safe. If you are not sure about something, it would be worth taking the time to think over and talk to your colleagues or trusted friends in order to get a fresh perspective.