The first step of applying the design principles is to enumerate potential disturbances. Prior to consulting the design principles, this step is necessary to provide context to the survivability analysis. Data for the system threat assessment may be derived from a combination of causal methods, historical data, scenario planning, and aggregated expert opinion (e.g., Bayesian treatment, Delphi technique, interactive approach).