Think about software that enables a surgeon in one area to operate online on a patient in a different location. Upon completion of the programme, who wants to continue? What kind of damage are they attempting to cause? What weaknesses would they attempt to use against you? Is it conceivable for these weaknesses to do damage even if there isn't a hostile attacker present?

Imagine if Jim was going to be infected by a virus that was going to be attached to an email and sent to him. Can you talk about this attack in terms of vulnerabilities, threats, and the agents of those threats?

Imagine a software that enables a surgeon to operate remotely on a patient who is in another country using just the internet. Why would anybody want to remain after the lights are out? How potentially damaging do they anticipate it to be? Which of your shortcomings do you believe they would highlight in an effort to cast doubt on you? Is it conceivable for harm to occur when there isn't a violent attacker there to exploit these vulnerabilities?

Think about software that enables a surgeon in one area to operate online on a patient in a different location. Upon completion of the programme, who wants to continue? What kind of damage are they attempting to cause? What weaknesses would they attempt to use against you? Is it conceivable for these weaknesses to do damage even if there isn't a hostile attacker present?