thr-01-threatintelligenceprogram.md

SCF - THR-01 - Threat Intelligence Program

Mechanisms exist to implement a threat intelligence program that includes a cross-organization information-sharing capability that can influence the development of the system and security architectures, selection of security solutions, monitoring, threat hunting, response and recovery activities.

Mapped framework controls

GDPR

• Art 32.1
• Art 32.2

ISO 27002

• A.5.7

SOC 2

• CC3.3

Control questions

Does the organization implement a threat intelligence program that includes a cross-organization information-sharing capability that can influence the development of the system and security architectures, selection of security solutions, monitoring, threat hunting, response and recovery activities?