It’s not easy to know where by to get started on to deal with all of them. It’s just as difficult to know when to halt. Menace modeling may also help. We are interested in developing this hybrid approach and piloting it with organizations during the federal federal government. https://www.researchgate.net/publication/365308473_Development_of_Cyber_Attack_Model_for_Private_Network