2020: Virginia, USA: 29-TEN team members conducted a four day threat, vulnerability and risk assessment for a state university. The result of the assessment was focused on evaluating existing personnel, physical and technical security measures and the upgrades and training programs which could be installed and initiated to mitigate risks to the organization’s student scholars, faculty, campus, information and reputation. The assessment culminated in a 61-page document outlining the findings and recommendations to mitigate current and future risks. The highlight of the debriefing on 20 April, was the fact that the target hardening recommendations made by the team on day 2 of the assessment, had already been approved, budgeted and designed by the date of the debrief 45 days later.