Skip to content

Threat Management

What is Threat Management?

The ongoing process of identifying, evaluating, and responding to cybersecurity threats facing an organization.

Information Security

What the standards actually require on threat management

Requirements naming threat management across 6 standards, quoted from the control text.

Where the assessment finds the concern unfounded, the team may pass an employee case to HR or other management for normal handling consistent with the policy.

ansi-asis-wvpi-aa-2020-workplace-violence-and-active-assailant::8.4 · 8.4 Actions by the Threat Management Team →
Saudi NCA ECC3 controls

Requirements for cybersecurity incident and threat management are identified, documented and approved.

saudi-nca-ecc::2-13-1 · 2-13-1 Incident and threat management requirements defined →

Processes keep civil aviation's security and cybersecurity threats, how serious they are and what form they take, under continuous review and identify threats against the Operator, its aircraft and facilities;

iata-operational-safety-audit-iosa-standards-manual::SEC 4.1 · SEC 4.1 Threat Management →

Findings from threat management in the THREAT domain are fed into the risk register to revise existing cyber risks and add new ones.

australian-energy-sector-cyber-security-framework-aescsf::RISK-2j · RISK-2j: Threat information updates risks →

Monitoring every online activity with inspection tools such as TLS interception, next-generation firewalls or unified threat management is disproportionate and intrudes on the confidentiality of communications, so less invasive means should be explored first.

article-29-working-party-opinion-2-2017-on-data-processing-at-work-wp249::5.3(a) · 5.3(a) Network and TLS inspection tuned to prevent permanent logging of employee activity →

The entity must manage the personnel security lifecycle, including onboarding, ongoing suitability and insider-threat management, and offboarding (removal of access and return of assets).

DISP-PERS-LIFECYCLE · Onboarding, offboarding and ongoing suitability →

Questions people ask about threat management

What is Threat Management?
The ongoing process of identifying, evaluating, and responding to cybersecurity threats facing an organization.
Why is Threat Management important for compliance?
Threat Management is a key concept in Information Security. Understanding threat management helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Threat Management?
Threat Management appears in the requirement text of ANSI/ASIS WVPI AA-2020 Workplace Violence and Active Assailant, Saudi NCA ECC, IATA Operational Safety Audit (IOSA) Standards Manual, Australian Energy Sector Cyber Security Framework (AESCSF), Article 29 Working Party Opinion 2/2017 on Data Processing at Work (WP249). Across these standards we have identified 20 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Threat Management?
Explore our compliance framework pages to see how threat management applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Threat Management applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.