Targeted cyber attacks are increasing, and the attackers’ methods are evolving to evade or circumnavigate existing countermeasures. To explore a threat-led risk model, the key elements must be examined.