This session discusses the quantitative approach to how performance monitoring and capacity management relates to cyber attacks. The discussion focuses around the two elements of risk, probability and impact, and how these affect us as capacity increases.