External Harms

Adversaries may abuse their access to a victim system and use its resources or capabilities to further their goals by causing harms external to that system.

These harms could affect the organization (e.g. Financial Harm, Reputational Harm), its users (e.g. User Harm), or the general public (e.g. Societal Harm).