 We recommend organizations prioritize actions in the following four areas:  There is no way to know for certain what shape an attack may take, but taking these steps will help provide broad protection against what we expect to come.