Cybersecurity & Information Environment Defense

Create cyber governance: roles, reporting, risk acceptance, incident response, and training cadence.

Build threat model (assets, threats, controls, residual risk); no exploit instructions; include audit appendix.

Define maturity stages and prioritized controls; include governance and measurement.

Draft IR playbook: detection, containment, comms, legal gates, recovery, AAR; no offensive content.

Create comms ladder: internal, host authorities, partners, public; include attribution rules and legal gates.

Develop resilience plan: backups, segmentation, training, decision gates; no negotiation tactics for criminals.

Create vendor security requirements, audit rights, and monitoring; include procurement gates.

Produce high-level zero trust blueprint: identity, device, network, data; include phased plan.

Build training module: travel hygiene, meeting protocols, data minimization, incident reporting.

Create monitoring plan for false narratives; verification workflow; truthful response options; no manipulation.

Create factual prebunk messages and transparency practices; avoid propaganda; include “do not say.”

Assess sovereignty risks in data flows and platforms; cite RS; propose governance and clauses.

Design tabletop: injects, decisions, evaluation; focus governance and comms; no exploit detail.

Define defensive KPIs (patch latency, backup integrity, training coverage) and governance for review.

Identify gaps and prioritized mitigations; require evidence for claims; label unknowns.

Draft security requirements: logging, access control, data minimization, audit, IR integration.

Create protocol to avoid false attribution; verification steps; safe public wording.

Define lawful information-sharing during incidents, classification handling, and comms synchronization.

Produce PIA template with data inventory, lawful basis, minimization, retention, and audit steps.

Provide practical minimization rules and privacy-by-design governance, without implementation exploit details.

Develop insider risk governance: training, access controls, reporting, wellbeing safeguards; no suspicion-based targeting.

Define logging policy: what, why, retention, access, audit, and incident use.

Produce governance: key ownership, rotation, access, incident handling; avoid operational exploitation.

Draft talking points and cooperation asks (CERT/CIRT, training); include data sovereignty safeguards.

Design response plan for deepfakes: verification, comms ladder, partner sync; truthful and cautious.

Rank security investments by risk reduction and feasibility; include “minimum viable security” set.

Create OT governance: segmentation, access, monitoring, incident response coordination.

Define rules for third-party access: approvals, least privilege, logging, audits, termination.

Generate guardrails: what to say, what not to say, how to avoid escalation and legal exposure.

Identify actions robust across threat scenarios; list actions requiring counsel clearance.