A formal classification of the resources and expertise available to a threat actor is known as what?

A formal classification of the resources and expertise available to a threat actor is known as what?

• A. Level of sophistication/capability
• B. Access level
• C. Funding potential
• D. Privilege tier

Answer: (A)

Measuring threat actors by their level of sophistication or capability captures both the amount of resources they have and the depth of their expertise. This broad classification indicates how advanced their operations might be, what tools they can use, and how likely they are to carry out complex, targeted campaigns. For example, a highly sophisticated actor may deploy custom malware, exploit zero-days, and run coordinated operations, while a less sophisticated one might rely on readily available tools and simpler phishing. The other ideas focus on narrower aspects: access level relates to privileges within a system, funding potential isolates financial resources, and privilege tier describes internal rights rather than the actor’s overall skill and resource pool.

Measuring threat actors by their level of sophistication or capability captures both the amount of resources they have and the depth of their expertise. This broad classification indicates how advanced their operations might be, what tools they can use, and how likely they are to carry out complex, targeted campaigns. For example, a highly sophisticated actor may deploy custom malware, exploit zero-days, and run coordinated operations, while a less sophisticated one might rely on readily available tools and simpler phishing. The other ideas focus on narrower aspects: access level relates to privileges within a system, funding potential isolates financial resources, and privilege tier describes internal rights rather than the actor’s overall skill and resource pool.