Threat intelligence is information gathered by information security teams that is used to identify an organization’s cyber threats and mitigate the impact of any cyber attacks.
Ongoing challenges across the cybersecurity landscape, like costly data breaches and increasing advanced persistent threats (APTs), are highlighting the importance of threat intelligence.
The Threat Intelligence Life Cycle
The threat intelligence life cycle helps security teams find meaningful information from raw data to guide their strategic decision-making.
It involves the following steps:
1. Planning and direction
2. Data collection
3. Analysis
4. Production
5. Dissemination
Types of Threat Intelligence
The type of threat intelligence required depends on: the intended audience, the source of the intelligence, and an organization's requirements.
Threat intelligence can be categorized into three different types:
1. Strategic threat intelligence
2. Tactical threat intelligence
3. Operational threat intelligence