Full Cycle: Blending Intelligence Requirements and Custom Dissemination Tools to Drive Operations

Подробнее о видео

Two common inhibitors to corporate CTI teams are their inability to identify the information needs of their customers, plan collection, and disseminate information in a robust, sustainable, and actionable manner. Intelligence by its nature is unpredictable, but a mature intelligence team can manage the unpredictability by understanding its information gaps and proactively collecting information responsive to planned and well-coordinated intelligence requirements. This preparation, structure, and proactive approach to intelligence is the true standard of a mature high-performing intelligence program. It enables intelligence to drive operations and adeptly inform decision makers. The application of intelligence requirements within the private sector is a challenge if one does not follow best practices and lessons learned from experiences in the public and private sectors. This presentation will describe how to develop standing and priority intelligence requirements, how to review those with your customers on a recurring schedule to ensure their accuracy and continued relevance, and how to incorporate these intelligence requirements into production to identify audiences and measure collection strongpoints and gaps. The presentation will also provide guidance on methods to engage customers unfamiliar with intelligence concepts, unaware of collection opportunities, or lacking experience with cyber issues.

Jon Jurado, Principle Associate, Cyber Threat Intelligence, Capital One
Robert McLean, Senior Manager, Cyber Threat Intelligence, Capital One

View upcoming Summits:
Download the presentation slides (SANS account required) at

#CTISummit #cyberthreatintelligence