In cybersecurity, likelihood of attack can be determined by reviewing an organization’s security controls and measuring security performance against threats identified through cyber threat intelligence. Practices such as poor security hygiene, slow patching cadence, and risky user behavior are all indicators of a greater likelihood of a cybersecurity attack.