Skip to content

Cyber Threat Hunting

What is Cyber Threat Hunting?

A proactive security practice of searching through networks and datasets to detect advanced threats that evade existing automated security solutions.

Information Security

Frameworks that govern cyber threat hunting

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on cyber threat hunting

Requirements naming cyber threat hunting across 2 standards, quoted from the control text.

NIST SP 800-1721 control

Conduct cyber threat hunting activities to search for indicators of compromise in organizational systems and detect, track, and disrupt threats that evade existing controls.

3.11.2e · Threat Hunting →
NIST SP 800-53 Rev 51 control

Requires a cyber threat hunting capability to be established and maintained to search for indicators of compromise and to detect, track and disrupt threats that have evaded existing controls, and requires that capability to be exercised at an organization-defi...

NIST800-RA-10 · Threat hunting →

Questions people ask about cyber threat hunting

What is Cyber Threat Hunting?
A proactive security practice of searching through networks and datasets to detect advanced threats that evade existing automated security solutions.
Why is Cyber Threat Hunting important for compliance?
Cyber Threat Hunting is a key concept in Information Security. Understanding cyber threat hunting helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Cyber Threat Hunting?
Cyber Threat Hunting appears in the requirement text of NIST SP 800-172, NIST SP 800-53 Rev 5. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Cyber Threat Hunting?
Explore our compliance framework pages to see how cyber threat hunting applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Cyber Threat Hunting applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.