Evidence-based knowledge about threats used to inform security decisions and improve defences.
Threat intelligence is evidence-based knowledge about existing or emerging threats—including indicators of compromise, attacker tactics, and vulnerabilities being exploited. It transforms raw data into actionable insights that inform security decisions, prioritise defences, and improve incident response. Threat intelligence sources include commercial feeds, open-source intelligence, industry sharing groups (ISACs), and government sources (NCSC). Effective threat intelligence is timely, relevant to your environment, and integrated into security tools and processes.
Why It Matters
The DSC Perspective:
Threat intelligence helps you defend against current, real-world attacks rather than theoretical risks. It informs which vulnerabilities to prioritise, what indicators to monitor, and how attackers are operating. Even basic threat intelligence improves security decision-making.