Cyber Threat Intelligence is information about an existing or emerging risk to a network that can be used to take action to mitigate the risk. Cyber threat intelligence may include context, mechanisms, trend data, or actionable information.
A recent report on cyber threat intelligence by the Ponemon Institute found that 65% of respondents believe improved cyber threat intelligence could prevent or minimize the consequences of a cyber attack. Importantly, 47% of respondents said their organization had already experienced a material security breach that involved an attack that compromised the networks or enterprise systems.
Key findings from the research include:
Cyber Threat intelligence is essential for a strong security posture. Seventy-five percent of respondents, who are familiar and involved in their company’s cyber threat intelligence activities or process, believe gathering and using threat intelligence is essential to a strong security posture.
Potential liability and lack of trust in sources of cyber threat intelligence, keep some organizations from participating. Organizations that only partially participate cite potential liability of sharing (62 percent of respondents) and lack of trust in the sources of intelligence (60 percent of respondents). However, more respondents believe there is a benefit to exchanging cyber threat intelligence.
Organizations rely upon peers and security vendors for cyber threat intelligence. Sixty-five percent of respondents say they engage in informal peer-to-peer exchange of information or through a vendor threat exchange service (45 percent of respondents). IT vendors and peers are also considered to provide the most actionable information. Law enforcement or government officials are not often used as a source for cyber threat intelligence.
Cyber Threat intelligence needs to be timely and easy to prioritize. Sixty-six percent of respondents who are only somewhat or not satisfied with current approaches say it is because the information is not timely and 46 percent complain the information is not categorized according to threat type or attacker.
LEARN MORE ABOUT Cyber Threat Intelligence AND RELATED TECHNOLOGIES
Infoblox is leading the way to next-level DDI with its Secure Cloud-Managed Network Services. Infoblox brings next-level security, reliability, and automation to on-premises, cloud and hybrid networks, setting customers on a path to a single pane of glass for network management. The recognized industry leader, Infoblox has over 8,000 customers, including 350 of the Fortune 500.