How to Define and Build an Effective Cyber Threat Intelligence Capability

  • 31m
  • Henry Dalziel
  • Elsevier Science and Technology Books, Inc.
  • 2015

How to Define and Build an Effective Cyber Threat Intelligence Capability is a concise review of the concept of Intelligence-Led Security. Protecting a business, including its information and intellectual property, physical infrastructure, employees, and reputation, has become increasingly difficult. Online threats come from all sides: internal leaks and external adversaries; domestic hacktivists and overseas cybercrime syndicates; targeted threats and mass attacks. And these threats run the gamut from targeted to indiscriminate to entirely accidental.

Among thought leaders and advanced organizations, the consensus is now clear. Defensive security measures: antivirus software, firewalls, and other technical controls and post-attack mitigation strategies are no longer sufficient. To adequately protect company assets and ensure business continuity, organizations must be more proactive. Increasingly, this proactive stance is being summarized by the phrase Intelligence-Led Security: the use of data to gain insight into what can happen, who is likely to be involved, how they are likely to attack and, if possible, to predict when attacks are likely to come. In this book, the authors review the current threat-scape and why it requires this new approach, offer a clarifying definition of what Cyber Threat Intelligence is, describe how to communicate its value to business, and lay out concrete steps toward implementing Intelligence-Led Security.

  • Learn how to create a proactive strategy for digital security
  • Use data analysis and threat forecasting to predict and prevent attacks before they start
  • Understand the fundamentals of today's threatscape and how best to organize your defenses

About the Author

Henry Dalziel is a serial education entrepreneur, founder of Concise Ac Ltd, online cybersecurity blogger, and e-book author. He writes for the blog "Concise-Courses.com" and has developed numerous cybersecurity-continuing education courses and books. Concise Ac Ltd develops and distributes continuing education content (books and courses) for cybersecurity professionals seeking skill enhancement and career advancement. The company was recently accepted onto the UK Trade and Investment's (UKTI) Global Entrepreneur Programme (GEP).

In this Book

  • Introduction
  • A Problem Well-Defined is Half-Solved
  • Defining Business Objectives or “Start with Why”
  • Common Objectives of a Threat Intelligence Program
  • Translating Objectives into Needs, or “Why Drives What”
  • How Technology Models Operationalize Threat Data
  • Who—Given Why, What, and How, Now You Can Ask Where to Get it
  • Conclusion and Recap