2.5.2. Section 2: Threat Summary. No change from a regular ICD to the threat summary of the IS-ICD; however, the Sponsor should strongly consider the cyber threats posed to an IS solution.

For reference or comparison, below is what the JCIDS Manual says for the ICD 2021 itself:

2.5.3.4. Provide a description of all threat capabilities, threat tactics, and adversary doctrine, if available, in the expected operational environment and the nature of current and anticipated threats which are a factor in setting the capability and initial objective values. Include any CBRN, space, cyber, or kinetic threats and/or threats to a future system's use of the electromagnetic spectrum if the operational context requires operation in such environments.

2.5.3.4.1. Ensure judgments or extrapolations regarding adversarial capabilities are appropriate, logical, complete, and consistent with threat products from the DIE.

2.5.3.4.2. Consider threats to follow-on research, development, testing and evaluation (RDT&E), production, and operation and maintenance (O&M) resulting from technology transfer, espionage, and other adversarial collection efforts.

2.5.3.4.3. Consider threats that are likely to evolve or change to ensure flexibility in requirements.

2.5.3.4.4. Threats are factors that an adversary can control and direct, or will be able to direct, and do not include environmental or natural factors such as weather or terrain, mechanical component failure, or program issues related to budgeting, restructuring or cancellation.