study all possible attacks category publish books and articles about the subject discovering vulnerabilities evaluating the risks fixing vulnerabilities invent, design and deploy countermeasures set up contingency plan in order to be ready to respond