Cyber Threat Intelligence
What is Cyber Threat Intelligence?
Evidence-based knowledge about existing or emerging cyber threats that can be used to inform decisions regarding the organisation's response to those threats. CTI includes indicators of compromise, threat actor profiles, and attack patterns.
Terms that appear alongside cyber threat intelligence
Each of these is named in at least one of the same controls as cyber threat intelligence. The number is how many controls name both.
- cyber threat 16 shared controls
- threat intelligence 16 shared controls
- cybersecurity 6 shared controls
- incident response 5 shared controls
- information sharing 4 shared controls
- vulnerability 3 shared controls
- resilience 3 shared controls
- cyber incident 3 shared controls
Frameworks that govern cyber threat intelligence
What the standards actually require on cyber threat intelligence
Requirements naming cyber threat intelligence across 6 standards, quoted from the control text.
Cyber threat intelligence is received from information sharing forums and sources
NIST-CSF-ID.RA-02 · Cyber threat intelligence is received from information sharing forums and sources →CSF 2.0 outcome: cyber threat intelligence is received from information sharing forums and sources. Priority High. N1: CTI is threat information aggregated, transformed, analyzed, interpreted or enriched to give the context decisions need, received from automa...
nist-sp-800-61-rev-3::ID.RA-02 · ID.RA-02 Cyber threat intelligence received and used for incident response →The FI should have a process to collect, process and analyse cyber events, threat intelligence and vulnerability information for relevance and impact;
monetary-authority-of-singapore-technology-risk-management-guidelines::12.1 · 12.1 Cyber Threat Intelligence and Information Sharing →Participate in NATO cyber threat intelligence sharing via Malware Information Sharing Platform (MISP) instances operated by NCIRC + Cyber Threat Assessment Cell (CTAC) at SHAPE + bilateral channels with NATO Cooperative Cyber Defence Centre of Excellence (CCDC...
NATO-NCIRC-4 · Cyber Threat Intelligence Sharing and Coordinated Vulnerability Disclosure →Cyber threat intelligence is received from information sharing forums and sources. IDENTIFY (ID) Function, Risk Assessment (ID.RA) Category. Outcome in the Framework Core of Version 1.1; carried into CSF 2.0 as ID.RA-02.
nist-cybersecurity-framework-1-1::ID.RA-2 · ID.RA-2: Cyber threat intelligence is received from information sharing forums and sources →Requirement 0216 (Part Four: Technology, section 15.6 Cyber Security Programs; applies to All entities; dated 01 July 2025; retained from Release 2025): Connect to the Australian Signals Directorate's Cyber Threat Intelligence Sharing platform.
protective-security-policy-framework-pspf-release-2026::0216 · 0216 Connect to ASD's Cyber Threat Intelligence Sharing platform →Questions people ask about cyber threat intelligence
What is Cyber Threat Intelligence?
Why is Cyber Threat Intelligence important for compliance?
Which compliance frameworks address Cyber Threat Intelligence?
Where can I learn more about Cyber Threat Intelligence?
See how Cyber Threat Intelligence applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.