What can they actually reach if they get inside?

Modern operations connect information systems, control systems, equipment, people, suppliers, and infrastructure in ways that make cybersecurity inseparable from the operation itself. A vulnerability may be technically significant without materially affecting the business, while another seemingly narrow exposure may provide a path to something critical.

The important question is not only what can be compromised, but what changes if it is.

Understanding that consequence requires tracing the relationships between digital systems and the physical or business processes they influence, including the conditions under which an exposure can affect safety, quality, production, availability, or mission.

This Hard Case follows a cyber exposure through ruwbi's six-step method to determine how it could propagate through the operation and where it could change the outcome.