The EA must also provide a strategy that will enable the agency to support its current state and also act as the roadmap for transition to its targetenvironment.
Exploits against information systems are particularly attractive to organized crime and state actors because of the richness of the targetenvironment, the ease of exploitation, low cost of attack development, reasonably strong anonymity and difficulties in attribution, and the practical shortfalls of international legal frameworks and law enforcement regimes.