Threat Landscape
What is Threat Landscape?
The current state of threats facing an organization or industry, including active threat actors, attack methods, and emerging attack trends.
Terms that appear alongside threat landscape
Each of these is named in at least one of the same controls as threat landscape. The number is how many controls name both.
- risk assessment 7 shared controls
- nist 7 shared controls
- cybersecurity 7 shared controls
- cyber threat 6 shared controls
- resilience 5 shared controls
- ransomware 5 shared controls
- lessons learned 5 shared controls
- compliance 5 shared controls
Frameworks that govern threat landscape
What the standards actually require on threat landscape
Requirements naming threat landscape across 6 standards, quoted from the control text.
A Generic Threat Landscape (GTL) for the jurisdiction/sector is produced (by the relevant authorities) to inform the threat scenarios used in TIBER-EU tests; entities and providers take it into account when developing targeted threat intelligence.
TIBER-0.1 · Generic Threat Landscape →Entities under Article 16(1) must identify and implement physical security measures designed on the threat landscape, the Article 30 classification and asset risk, protecting premises and where applicable data centres hosting ICT and information assets from un...
dora-rts-on-ict-risk-management-framework-commission-delegated-regulation-eu-2024-1774::32 · Article 32: Physical and environmental security (simplified framework) →A formal process has the independent audit function update its procedures as the threat landscape across the sector evolves.
ffiec-cybersecurity-assessment-tool-cat::D1.RM.Au.A.1 · D1.RM.Au.A.1 Audit (Advanced 1) →Intermediate control principles for audit (required, with baseline, of an AI whose inherent risk is medium). The audit function validates that the incident response programme and resilience are commensurate with risk and complexity, reviews management's cyber...
hkma-cyber-resilience-assessment-framework-c-raf::1.4.I · 1.4 Audit: intermediate level →Information about security threats is to be gathered and examined so that it yields threat intelligence. Purpose: make the organization aware of the threats around it so that fitting mitigations can be chosen.
iso-27002-2022::5.7 · Threat intelligence →The FI should establish policies, standards and procedures to manage technology risk and safeguard information assets, incorporating industry standards and best practice where appropriate, and review and update them regularly against the evolving technology an...
monetary-authority-of-singapore-technology-risk-management-guidelines::3.2 · 3.2 Policies, Standards and Procedures →Questions people ask about threat landscape
What is Threat Landscape?
Why is Threat Landscape important for compliance?
Which compliance frameworks address Threat Landscape?
Where can I learn more about Threat Landscape?
See how Threat Landscape applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.