This talk will provide an overview of the work carried out by Scott and his colleagues in the U.S. Cyber Consequences Unit, during the period when they have been leaders in anticipating new types of cyber attacks and quantifying their consequences. In addition to outlining what practical frameworks, concepts, and models are now available, it will identify further research that is urgently needed.