Help with MSc thesis technicality

In My Humble Opinion
1

I am still in the process of choosing a MSc thesis on Computer Security. My project proposal is on Information Warfare and the objectives are:

  1. Identification of potential IW terrorist targets and the methods of attack
  2. Propose a framework of measures toprevent a IW terrorist attack
  3. Propose a contigency plan in case such an attack happens.

The problem now is that I need a method to Evaluate 2 and 3.
But how can I evaluate something theoretical such as a framework and a contigency plan? Any ideas?