Abstract: Methods and apparatus for developing cyber defense processes and a cadre of expertise are disclosed. The methods and apparatus improve the ability of an enterprise to defend against cyber attacks by (i) identifying risks and critical operations; (ii) determining the associated situational awareness and identifying threats by adversaries; (iii) organizing for defense from cyber attack; (iv) assessing the ability of the enterprise to respond; (v) improving the enterprise by learning from the assessment; and (vi) delivering improved cyber defense processes and cadre of expertise.