Threat Intelligence
What is Threat Intelligence?
Evidence-based knowledge about existing or emerging threats, including context, mechanisms, indicators, and actionable advice. Used to inform security decisions.
Related terms
Frameworks that govern threat intelligence
What the standards actually require on threat intelligence
Requirements naming threat intelligence across 6 standards, quoted from the control text.
Protocols govern how information is collected from industry peers and from government.
ffiec-cybersecurity-assessment-tool-cat::D2.TI.Ti.Int.2 · D2.TI.Ti.Int.2 Threat Intelligence and Information (Intermediate 2) →A qualified person or team produces a threat intelligence report summarising key threats, profiles of the highest-scoring actors, realistic scenarios and actor goals;
hkma-cyber-resilience-assessment-framework-c-raf::ICAST.4 · iCAST threat intelligence report →The control team must ensure that at the end of testing the testers and threat intelligence provider securely delete compromised passwords, credentials and keys, securely tell the entity which accounts were compromised and securely collect, store and dispose o...
dora-rts-on-threat-led-penetration-testing-commission-delegated-regulation-eu-2025-1190::7.2 · Article 7(1)(g) to (i): Conduct and restoration duties of testers and threat intelligence providers →Information about security threats is to be gathered and examined so that it yields threat intelligence. Purpose: make the organization aware of the threats around it so that fitting mitigations can be chosen.
iso-27002-2022::5.7 · Threat intelligence →The bank arranges external coordination and information sharing, integrating threat intelligence and security feeds from internal and external sources, and coordinates with industry, cyber response agencies, CERT-In, telecom providers and others as needed.
rbi-cybersecurity-framework-for-banks::185 · Para 185: external coordination and threat intelligence integration →The plan must require that all threat intelligence received is catalogued whatever its source, that the disclosure and modification risk to the catalogue is identified, that the catalogue is classified by that risk, keeps the classification label the source as...
api-1164::ID.RA-2 · ID.RA-2 Threat intelligence catalogued, classified and protected; external forums used at higher profiles →Questions people ask about threat intelligence
What is Threat Intelligence?
Why is Threat Intelligence important for compliance?
What concepts are related to Threat Intelligence?
Which compliance frameworks address Threat Intelligence?
Where can I learn more about Threat Intelligence?
See how Threat Intelligence applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.