Assessing the Potential Value of Cyber Threat Intelligence Feeds White Paper
There are two areas of consideration to assess the potential value of a Cyber Threat Intelligence (CTI) feed: relevance and usability. However, most organizations only focus on relevance. While determining if an offering is relevant is important, it is not enough. The organization/customer/consumer also needs to make sure the information is usable and applicable in their environment; that it is actionable and can be used to drive the operational processes and decisions in a timely manner with minimal impact to local resources. This paper provides definitions and operational considerations for assessing the potential value of CTI feeds.