Understanding the threat actor, and specifically their associated capabilities and attributes, is a critical success factor in developing appropriate cybersecurity countermeasures. Instrumentation and Control (I&C) systems are desirable targets because their compromise or ‘maloperation’ can result in kinetic and highly undesirable consequences. By learning how the threat actor develops and executes attacks, combined with how they develop the techniques, tactics and procedures to execute a cyber campaign, defenders can make better informed decisions as to how their critical operational technology can be protected. This course is designed to introduce the student to the modern threat actor (using cyber methods to target and attack critical nuclear systems) and empower the student to ‘think like an attacker’ to help create effective risk reduction strategies. The course will introduce the student to how attackers can be categorized based on their attributes (techniques, tactics, procedures), how an adversary uses cyber in developing their attack plan, how use cases and ‘kill chains’ can be used by the defender to model how a threat actor will attack and how the defender can use intelligence to proactively develop and deploy countermeasures to mitigate the cyber risk.