Protecting your organisation from cyber attacks can be an onerous task. Ever wondered about the steps an attacker takes to profile and target your organisation. I will talk about the stats, what they say about cyber-attacks, and the motives behind them. I will outline the three stages of an attack from profiling through to execution. I will then talk through some recent case studies, outlining where they went wrong and what we have learned from their misfortunes.