Threat Feed
What is Threat Feed?
A continuous stream of data providing information about current threats, indicators of compromise, and adversary tactics from external intelligence sources.
Frameworks that govern threat feed
What the standards actually require on threat feed
Requirements naming threat feed across 2 standards, quoted from the control text.
A formal threat intelligence program is in place and subscribes to threat feeds from external providers as well as internal sources.
ffiec-cybersecurity-assessment-tool-cat::D2.TI.Ti.Int.1 · D2.TI.Ti.Int.1 Threat Intelligence and Information (Intermediate 1) →Evidence in monitoring data reliably triggers tested alerts, enriched with network knowledge, signatures and indicators of compromise, prioritised by essential function and tuned to adversary techniques (for example MITRE ATT&CK) and threat intelligence, with...
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-ALERT · Generating alerts and identifying incidents →Questions people ask about threat feed
What is Threat Feed?
Why is Threat Feed important for compliance?
Which compliance frameworks address Threat Feed?
Where can I learn more about Threat Feed?
See how Threat Feed applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.