The intelligence cycle
By industry
By use case
Learn
Verify
Standing up and maturing a cyber threat intelligence function.
A cyber threat intelligence capability is a standing function that answers an organisation's stated questions about external threats, continuously and to a predictable rhythm. Building one is mostly a matter of people, clarity and routine rather than tooling, and it works as a programme that runs indefinitely, not a project that finishes.
A CTI maturity model describes the progression of an intelligence function across five levels, from ad hoc and reactive through to optimised and adaptive. …
