Limiting the blast radius¶

Impact is where the attacker makes their presence felt. Once access is won, prevention ends and containment begins.

But impact means more than destruction. It is less about what was broken and more about what was lost. These pages group those losses into families: from familiar extortion to subtler, non-destructive crises where the infrastructure is left standing but becomes entirely untrustworthy.