Critical Read

Exploiting tactical cyber intelligence

Shutterstock image.

What: A report produced by the nonprofit Intelligence and National Security Alliance that advises organizations on how to set up a tactical cyber intelligence program.

Why: Cyber intelligence blends cyber know-how with intelligence analysis. This white paper homes in on "tactical" cyber intelligence -- the strengths and weaknesses of network defense -- and the tactics, techniques and procedures used by hackers.

According to INSA, if organizations can get tactical cyber intelligence right, it could help them manage risk, make better decisions during a breach and move toward a cybersecurity footing that is predictive rather than reactive.

To get to that point, organizations should focus on four activities: drawing up a clear blueprint of the organization's IT environment and adversaries' capabilities; establishing an intelligence life cycle that produces an operational picture of cyberthreats; sharing and receiving threat information from other organizations; and cultivating multiple data feeds on threats.

Verbatim: "Tactical cyber intelligence is complementary to, but does not replace, an organization's traditional cybersecurity technologies and approaches. Striking a balance between the two, and allowing the former to strengthen the latter, is the best path forward to stay ahead of adversaries targeting your organization or its sector."

Click here to read the white paper.

About the Author

Sean Lyngaas is a former FCW staff writer.

Featured

  • Defense
    Ryan D. McCarthy being sworn in as Army Secretary Oct. 10, 2019. (Photo credit: Sgt. Dana Clarke/U.S. Army)

    Army wants to spend nearly $1B on cloud, data by 2025

    Army Secretary Ryan McCarthy said lack of funding or a potential delay in the JEDI cloud bid "strikes to the heart of our concern."

  • Congress
    Rep. Jim Langevin (D-R.I.) at the Hack the Capitol conference Sept. 20, 2018

    Jim Langevin's view from the Hill

    As chairman of of the Intelligence and Emerging Threats and Capabilities subcommittee of the House Armed Services Committe and a member of the House Homeland Security Committee, Rhode Island Democrat Jim Langevin is one of the most influential voices on cybersecurity in Congress.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.