2. The overall assessment of what concrete actionable intelligence can be found about the financial …

(a)

the employee usernames and passwords;

(b)

the look-alike domains which can be mistaken for official domains of the financial entity;

(c)

technical reconnaissance: vulnerable or exploitable software, systems and technologies;

(d)

information posted by employees on the internet, related to the financial entity, which might be used for the purposes of an attack;

(e)

information for sale on the dark web;

(f)

any other relevant information available on the internet or public networks;

(g)

where relevant, physical targeting information, including ways of access to the premises of the financial entity.