Describe a typical SEW threat assessment workflow.

• A. Identify assets, map EM environment, characterize threats (threats, capabilities, vulnerabilities), model attack scenarios, evaluate impact, determine mitigations, measure residual risk
• B. Begin with mitigations and then identify assets
• C. Skip threat assessment entirely
• D. Focus only on hardware not on threats

Answer: (A)

In SEW threat assessment, you approach the problem with a clear, end-to-end workflow that starts from what you’re protecting and the surrounding electromagnetic environment and then moves toward reducing risk. Begin by identifying assets so you know what has value and requires protection, and map the EM environment to understand how signals, propagation, and space/ground hardware influence exposure. Next, characterize threats by detailing who could exploit those assets, their capabilities, and the vulnerabilities present. Build and analyze realistic attack scenarios to see how an adversary might operate and what routes they might take. Then evaluate the potential impact on missions or operations to quantify risk, and determine mitigations—design choices, procedures, or controls—that reduce that risk. Finally, measure the residual risk after implementing mitigations to ensure it meets acceptable levels. This sequence matters because you need a solid understanding of what exists and how the environment shapes risk before you select safeguards; jumping straight to mitigations, skipping threat assessment, or focusing only on hardware neglects the balance of threat, vulnerability, and impact that defines meaningful risk management.