Before finalizing an annual cybersecurity strategy and budget, the CISO of a regional U.S. government entity ran a quantitative assessment using dynamic threat landscape analysis. It uncovered an emerging and growing threat to public administration organizations in the region from foreign state-sponsored actors who were weaponizing emails to steal personally identifiable information (PII).

The CISO had not planned to invest in an improved data loss prevention (DLP) solution but revised their strategy based on the findings. When cyber-attacks later began attempting to steal PII, the new DLP security controls successfully mitigated a breach and data compromise.