It’s tough to know where by to start out to handle all of them. It’s just as hard to know when to prevent. Threat modeling will help. Persona non Grata (PnG) concentrates on the motivations and capabilities of human attackers. It characterizes customers as archetypes that may misuse the process https://www.researchgate.net/publication/365308473_Development_of_Cyber_Attack_Model_for_Private_Network