Where do defenders begin their journey? Dragos shares his insights on the best practices for benchmarking and setting yourself up for success. This presentation focuses on the threat baseline approach, which involves identifying the threat scenarios most relevant to your industry based on your environment, exposure, and the known threats that target your sector. It's essential to establish alignment from the operations floor to the boardroom regarding the scenarios that matter most to your organisation.  From there, you can build everything around these key scenarios: your incident response plans, controls, resource allocation, and risk reporting. It’s important to prioritise coverage and controls, iterating over time as you move from implementation to operationalisation and optimisation.