What the threat is said to be

A subject the papers are about. The loosest grouping, and the one to reach for last.

Four accounts of what threatens critical infrastructure — an agency advisory naming an actor already inside the networks, a think-tank survey, a textbook, a measurement study. They are grouped, not merged with the resilience records: these say what the threat is, absorb-or-recover says what to do about it.