Cyber Threat Intelligence (CTI) is organized, analyzed, and refined information about potential or current attacks that threaten an organization. It provides context, such as who is attacking, their motivations, their capabilities, and what indicators of compromise (IoCs) to look for, that allows organizations to make faster, more informed security decisions and change their behavior from reactive to proactive in the fight against cyber threats. Effective CTI programs typically follow a lifecycle:
1. Planning and Direction #
Defining the intelligence requirements based on the organization’s assets, risks, and business objectives. What information is needed? Who will use it? What are the priorities?
2. Collection #
Gathering raw data from various sources:
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
