
Cyber Intelligence teams can provide analysis for M&A, and trusted third-party due diligence, resulting in cost savings, reduction of risk, and strategic return on investments (ROI). Organizations typically view Cyber Intelligence as a tactical activity, and one which does not provide strategic cost value to the enterprise. Cyber security tools and solutions are expensive, and their results can be difficult to strategically quantify within the context of risk management. So how can Cyber Intelligence teams leverage these same tools and processes to show a strategic ROI? And how is this tied into tactical intelligence and network defense? Inclusion of intelligence analysis during the due diligence stage of both M&A and third-party onboarding can reduce future risk, affect pricing, and even create opportunities for organizations. M&A reports utilize passive OSINT via tools like Maltego, Spiderfoot, Recon-ng, and closed source intelligence from vendors to enumerate four main themes: -Known or unknown cyber events at the target organization -Network layout and cyber hygiene -Future integration concerns -Advanced brand and reputation issues Once targets go through the M&A, Joint Venture, or trusted third-party onboarding process, their domains, names, or brands should be put into your intelligence platform for alerting, with an automated process to funnel any incident information to your SOC and IR team. As well, occasional collection and analysis on legacy Joint Ventures and other third-parties should be conducted as part of routine auditing.
About the Speakers
Bethany May has worked at Cargill on the Cyber Intelligence Team for four years, previously as the Strategic Analyst and most recently as the team’s manager.
Oralia Rodriguez joined the Cyber Intelligence Team at Cargill in early 2021. She is an Air Force veteran with 10+ years of experience in defense and homeland security intelligence analysis for various agencies within the intelligence community.
View upcoming Summits:
Download the presentation slides (SANS account required) at
#CTISummit