Scoping the scenario space for multi-sector cybersecurity analysis

The paper presents results from the Horizon 2020 ECHO project, supporting the identification and development of cyberattack scenarios. It explores the scenario space along four dimensions: (1) critical infrastructures and essential services, critically dependent on the ICT infrastructure; (2) types of malicious actors and their capabilities; (3) exploited vulnerabilities; and (4) short-versus longer term horizon. The exploration serves to span comprehensively the scenario space. The authors present a partial list of selected scenarios, storylines, and use cases, that are used in follow-up research to define key components of the capability requirements: technology roadmaps, cyber skills framework, information exchange and certification requirements. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2021.