domains / families / security / managing-intelligence-lifecycle

managing-intelligence-lifecycle

separate

'Manages the end-to-end cyber threat intelligence lifecycle from planning

When to use

• Establishing a formal CTI program and defining its operational model
• Conducting quarterly intelligence requirements reviews with business stakeholders
• Evaluating CTI program maturity against established frameworks (FIRST CTI-SIG maturity model)

When not to use

• Day-to-day IOC triage
• Incident-specific intelligence tasks

Skill page

Source