사이버보안 GRC 16개 항목
Cyber Threat Intelligence Program Assessment
이 체크리스트는 영어로 제공됩니다.
Assesses the maturity of a cyber threat intelligence program across the intelligence lifecycle, from requirements and collection through analysis, dissemination, and operational integration.
NIST 800-53MITRE ATT&CKISO 27001
무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.
Requirements & Direction
- Are Priority Intelligence Requirements (PIRs) documented and approved by stakeholders? *
- Is the organization's threat model and relevant threat actors documented? *
- Are intelligence consumers (SOC, IR, leadership, vulnerability mgmt) identified with defined needs? *
- Are PIRs reviewed and updated on a defined cadence?
Collection & Sources
- Are diverse sources used (commercial feeds, OSINT, ISAC/ISAO, government advisories)? *
- Is the organization a member of a relevant ISAC or information-sharing community?
- Are indicators of compromise ingested into detection and blocking controls? *
- Is source reliability and confidence tracked for collected intelligence?
Analysis & Production
- Is a structured analytic model (e.g., Diamond Model, Cyber Kill Chain) used for analysis? *
- Are adversary TTPs mapped to MITRE ATT&CK and tracked over time? *
- Are finished intelligence products tailored to the needs of each consumer? *
- Is a confidence and estimative-language standard applied to assessments?
Dissemination & Integration
- Is intelligence disseminated through defined channels with appropriate TLP markings? *
- Does threat intelligence inform detection engineering and threat hunting? *
- Is intelligence used to prioritize vulnerability remediation (threat-informed)?
- Is consumer feedback collected to refine future intelligence products?
Cyber Threat Intelligence Program Assessment 체크리스트 전체 다운로드
인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.