174 — Doing Threat Intelligence Smartly
From Southern Fried Security Podcast · hosted by Martin Fisher, Joseph Sokoly, Andy Willingham, Steve Ragan, Yvette Johnson, Rick Holland
Audio for this episode is not yet linked on CastingBridges. Listen on the show's site →
Summary
We’ve been nominated for the 2016 Security Blogger Awards! Topic: Threat Intel. Norse Corp disappears shortly after CEO is asked to step down. Digital Shadows announces 14 million series B fund raising. PDF WARNING: Threat Intelligence Maturity Model (Intel programs are hard and take years to get right.) Forrester — Maximizing your investment in cyber threat providers (be careful…
Learning Points (Q&A)
-
This threat intelligence company scours the web to find out what data criminals are looking for and compares this data to your data.
- a) Source Point
- b) Norse Corp
- c) Digital Shadows
- d) McAfee
-
Rick Holland’s Threat Intelligence brief from RSA 2015 related threat intelligence to 3 day _________.
Fill in the blank.
-
Good threat intelligence will change the organization in what way?
- a) how the Security Operations Center (SOC) prioritizes & responds to alerts
- b) how business executives invest in security programs
- c) how fast the Incident Response (IR) team is able to react
- d) All of the above
-
Threat intelligence is a business capability that analyzes internal and external data to provide inputs to the organization that enable it to take action. It’s something you _______, not something you _______. Insert in the correct order: watch / do
Fill in the blank.
-
Automation is usually NOT implemented due to a fear of breaking production systems.
True or False.
Interactive Q&A is shipping on a pilot episode first; the other 9 episodes display Learning Points read-only at v0. Full interactive rollout activates with v0.1.
Provider Status
This Executive Review is published under the v0 fair-use editorial posture, identical to the posture the February 2016 Cybersecurity Podcasts Today: Executive Series issue shipped under. The show's Provider has not yet been onboarded into CastingBridges' Provider compensation flow. When CastingBridges' first institutional partnership activates, this Executive Review will be re-issued under signed Provider consent with structured Provider compensation per the CastingBridges allocation model.