Open Source Intelligence
What is Open Source Intelligence?
The collection and analysis of publicly available information from open sources to support security investigations and threat intelligence activities.
Terms that appear alongside open source intelligence
Each of these is named in at least one of the same controls as open source intelligence. The number is how many controls name both.
- threat intelligence 3 shared controls
- mitre 2 shared controls
- cyber threat 2 shared controls
- dark web monitoring 2 shared controls
Frameworks that govern open source intelligence
What the standards actually require on open source intelligence
Requirements naming open source intelligence across 4 standards, quoted from the control text.
FIRST CSIRT Services Framework v2.1 Service Area 4 - Situational Awareness. SCOPE: maintaining + sharing operational + tactical + strategic awareness of the cyber threat landscape relevant to the constituency.
FIRST-CSIRTF-SA4-SituationalAwareness · Service Area 4 - Situational Awareness and Threat Intelligence →Lloyds MS11.7 Threat Detection and Security Monitoring - 24/7/365 Security Operations Centre (SOC) capability internal or via Managed Security Service Provider (MSSP) + Security Information and Event Management (SIEM) covering identity + network + endpoint + c...
LLOYDS-MS11-Threat-Detection-Security-Monitoring-Email-Phishing-Defences-MS11-7-12-SOC-EDR-XDR-SIEM · Lloyds MS11 Threat Detection + Security Monitoring + Email + Phishing + MS11.7-12 →Implement Cyber Resilience per MAS TRM Chapter 11 including Cyber Threat Intelligence + Penetration Testing + Vulnerability Assessment + Cyber Incident Response and Notification.
MAS-TRM-Cyber-Resilience-Chapter-11-Threat-Intelligence-Penetration-Testing-Incident-Response-1-Hour-Notification · MAS TRM Cyber Resilience + Chapter 11 + Threat Intelligence + Penetration Testing + Incident Response + 1-Hour Notification →Open source intelligence collection must enumerate public information about the target organisation, infrastructure, personnel, and technology stack without direct interaction with target assets.
PTES-INT-1 · Passive Intelligence Gathering →Questions people ask about open source intelligence
What is Open Source Intelligence?
Why is Open Source Intelligence important for compliance?
Which compliance frameworks address Open Source Intelligence?
Where can I learn more about Open Source Intelligence?
See how Open Source Intelligence applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.