Skip to content

Cyber Threat

What is Cyber Threat?

A potential cyber attack that could compromise information systems, data, or services through exploitation of vulnerabilities.

Information Security

Each of these is named in at least one of the same controls as cyber threat. The number is how many controls name both.

What the standards actually require on cyber threat

Requirements naming cyber threat across 6 standards, quoted from the control text.

NIST SP 800-15010 controls

Organize, store, and manage collected cyber threat information to support analysis, correlation, and retrieval.

SP800-150-STORE · Organize and Store Cyber Threat Information →
DORA5 controls

Financial entities may share cyber threat information and intelligence (for example compromise indicators, attacker tactics, techniques and procedures, security alerts and configuration tools) among themselves where the exchange aims to strengthen digital oper...

DORA-Art.45 · Information-sharing arrangements on cyber threat information and intelligence →

The FI should have a process to collect, process and analyse cyber events, threat intelligence and vulnerability information for relevance and impact;

monetary-authority-of-singapore-technology-risk-management-guidelines::12.1 · 12.1 Cyber Threat Intelligence and Information Sharing →

(a) Provide literacy training on the cyber threat environment; and (b) Reflect current cyber threat information in system operations.

NIST800-AT-2(6) · AT-2(6) Literacy Training and Awareness | Cyber Threat Environment →

CSF 2.0 outcome: cyber threat intelligence is received from information sharing forums and sources. Priority High. N1: CTI is threat information aggregated, transformed, analyzed, interpreted or enriched to give the context decisions need, received from automa...

nist-sp-800-61-rev-3::ID.RA-02 · ID.RA-02 Cyber threat intelligence received and used for incident response →

Questions people ask about cyber threat

What is Cyber Threat?
A potential cyber attack that could compromise information systems, data, or services through exploitation of vulnerabilities.
Why is Cyber Threat important for compliance?
Cyber Threat is a key concept in Information Security. Understanding cyber threat helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Cyber Threat?
Cyber Threat appears in the requirement text of NIST SP 800-150, DORA, Monetary Authority of Singapore Technology Risk Management Guidelines, NIST SP 800-53 Rev 5, NIST SP 800-61 Rev. 3. Across these standards we have identified 26 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Cyber Threat?
Explore our compliance framework pages to see how cyber threat applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Cyber Threat applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.