April 2, 2015 By Shane Schick 2 min read

Organizations may know they need more knowledge of the IT security risks coming their way, but properly identifying and choosing the right source of information is a huge problem in its own right, according to a recent threat intelligence report.

Published by the U.K. government’s Centre for the Protection of National Infrastructure, with research from MWR InfoSecurity, the threat intelligence report, “Threat Intelligence: Collecting, Analysing, Evaluating,” breaks down the subject into strategic, operational, tactical and technical areas. It also provides a way to distinguish real threat intelligence from basic antivirus software and other products and services that claim to offer such capabilities.

The white paper received a rave review from ZDNet, which described it as an owner’s manual for those responsible for protecting data and mitigating major IT security risks. In particular, areas that delve into the pros and cons of information sharing might have helped some organizations avoid recent high-profile data breaches, ZDNet noted.

One of the report’s authors told Infosecurity Magazine the project stems from a concern that chief information officers (CIOs) and their teams are not getting enough facts before investing in safeguarding their organizations from cybercriminals. In fact, one of the takeaways from the research was that threat intelligence isn’t so much about spending a lot of money, but rather about using available resources as wisely as possible and setting up the right type of team to support the effort.

In some respects, the recommendations in the report reflect the conclusions of a similar project recently produced by the Ponemon Institute and Webroot, a security firm. In a summary published on BetaNews, the Ponemon threat intelligence report shows 80 percent of those who have experienced a data breach in the past two years believe they could have avoided the worst by having a threat intelligence plan in place.

As is often the case, much of the issue is the way data is captured and presented. A story on SiliconANGLE about the Ponemon Institute study noted only 11 percent of respondents described what they found in a threat intelligence report as useful. Therefore, it stands to reason that CIOs must not only think about the strategies and technologies they put in place, but also the type of candidates they should hire. At least one IT security expert in a given organization should be able to make sense of the threat intelligence the organization receives. In the end, this may wind up being the most intelligent thing CIOs can do.

More from

X-Force Threat Intelligence Index 2024 reveals stolen credentials as top risk, with AI attacks on the horizon

4 min read - Every year, IBM X-Force analysts assess the data collected across all our security disciplines to create the IBM X-Force Threat Intelligence Index, our annual report that plots changes in the cyber threat landscape to reveal trends and help clients proactively put security measures in place. Among the many noteworthy findings in the 2024 edition of the X-Force report, three major trends stand out that we’re advising security professionals and CISOs to observe: A sharp increase in abuse of valid accounts…

How I got started: Cyber AI/ML engineer

3 min read - As generative AI goes mainstream, it highlights the increasing demand for AI cybersecurity professionals like Maria Pospelova. Pospelova is currently a senior data scientist, and data science team lead at OpenText Cybersecurity. She also worked at Interest, an AI cybersecurity company acquired by MicroFocus and then by OpenText. She continues as part of that team today.Did you go to college? What did you go to school for?Pospelova: I graduated with a bachelor’s degree in computer science and a master’s degree…

Europe’s Cyber Resilience Act: Redefining open source

3 min read - Amid an increasingly complex threat landscape, we find ourselves at a crossroads where law, technology and community converge. As such, cyber resilience is more crucial than ever. At its heart, cyber resilience means maintaining a robust security posture despite adverse cyber events and being able to anticipate, withstand, recover from and adapt to such incidents. While new data privacy and protection regulations like GDPR, HIPAA and CCPA are being introduced more frequently than ever, did you know that there is new…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today