“Directed assault” doesn’t really mean refined malware and country state danger performers. What it means, is that the assault will be pointed straightforwardly at your association, so your protections ought to be engaged where focused aggressors will hit you hardest.
Identify the corporate assets attackers are most likely to hit
Keep up-to-date with threat actors’ changing motivations, attack techniques and capabilities
Prioritize security investments based on these risks”