Exploiting tactical cyber intelligence
A new report from the Intelligence and National Security Alliance examines four keys to a successful cyber intelligence program.
What: A report produced by the nonprofit Intelligence and National Security Alliance that advises organizations on how to set up a tactical cyber intelligence program.
Why: Cyber intelligence blends cyber know-how with intelligence analysis. This white paper homes in on "tactical" cyber intelligence -- the strengths and weaknesses of network defense -- and the tactics, techniques and procedures used by hackers.
According to INSA, if organizations can get tactical cyber intelligence right, it could help them manage risk, make better decisions during a breach and move toward a cybersecurity footing that is predictive rather than reactive.
To get to that point, organizations should focus on four activities: drawing up a clear blueprint of the organization's IT environment and adversaries' capabilities; establishing an intelligence life cycle that produces an operational picture of cyberthreats; sharing and receiving threat information from other organizations; and cultivating multiple data feeds on threats.
Verbatim: "Tactical cyber intelligence is complementary to, but does not replace, an organization's traditional cybersecurity technologies and approaches. Striking a balance between the two, and allowing the former to strengthen the latter, is the best path forward to stay ahead of adversaries targeting your organization or its sector."
Click here to read the white paper.