## 4 The Proposed Enhanced Cyber Threat Intelligence Integrated EBIOS Risk Manager
### Strategic Scenarios  
As described in EBIOS, this workshop aims to clearly understand the ecosystem stakeholders and their attributed vulnerabilities. The organization's ecosystem consists of all the stakeholders within the identified scope, first identified, and then, assessed according to the parameters described in EBIOS [53]:  
* Dependency: describes the importance of the stakeholder in the specified scope.
* Penetration: describes the level of access of the stakeholder in the specified scope.
* Cyber maturity: describes the security capacities of the stakeholder in the specified scope.
* Trust: describes the interests and intentions of the stakeholder against the organization's objective in the specified scope.  
These factors contribute to the calculation of exposure, which describes the stakeholder's susceptibility to cyber threats, and cyber reliability, which describes the trust and confidence in the stakeholder's security measures. The exposure, cyber reliability, and overall threat level are calculated based on the following equations:  
\[Exposure=Dependency\times Penetration\]  
\[CyberReliability=CyberMaturity\times Trust\]  
\[\frac{ThreatLevel=Exposure}{CyberReliability}\]  
\begin{table}
\begin{tabular}{c p{284.5 pt}} \hline \hline
**Scale** & **Consequences** \\ \hline G4 Critical & \begin{tabular}{l} Inability of the organization to deliver connectivity services, \\ with possible serious impacts on the safety of assets. The organization \\ will most likely not overcome the situation (its survival is threatened). \\ \end{tabular} \\ \hline G3 Serious & \begin{tabular}{l} High degradation in the performance of the connectivity services, \\ with possible significant impacts on the safety of assets and reputation. \\ The organization will overcome the situation with serious difficulties but \\ with impact on its image (operations in a highly degraded mode). \\ \end{tabular} \\ \hline G2 Significant & \
\begin{tabular}{l} Degradation in the performance of the Internet connectivity services, \\ with no impact on the safety of assets. The organization will overcome \\ the situation despite a few difficulties (operations in degraded mode). \\ \end{tabular} \\ \hline G1 Minor &
\begin{tabular}{l} No impact on operations or the performance of the Internet connectivity services or on the safety of assets. The organization will overcome the situation without too many difficulties (margins will be consumed). \\ \end{tabular} \\ \hline \hline \end{tabular}
\end{table}
Table 2: EBIOS severity scale [21].  
After determining the stakeholders, high-level strategic scenarios are built to describe how a risk origin can reach the target objective through the stakeholders. The strategic scenarios are assessed to determine the risk scenario impact according to Table 2.  
To complement this workshop, we consider strategic and tactical threat intelligence information about the identified risk origins to construct more accurate scenarios. This information reveals how the relevant risk origins might proceed to target the organization through its different stakeholders and suppliers, providing high-level attack paths more reliable than described initially in EBIOS Risk Manager. This allows for a better evaluation of the scenarios' impacts. Additionally, an involved threat intelligence expert should participate in this workshop to contextualize the threat intelligence information.