>> Hello and welcome to
the last video from
the module, dissemination and feedback.
This video is dedicated
to explain strategic intelligence.
In this lesson, we will focus
>> on strategic intelligence.
>> We will start with definition
>> of strategic intelligence.
>> We need also to understand the strategic decisions,
and we will discover
the benefits of strategic intelligence
and what is the most appropriate audience
for this type of intelligence.
Let's discover the definition of
strategic cyber threat intelligence.
In simple terms, strategic threat intelligence is
a bird's-eye view of an
>> organization's threat landscape.
>> Not concerned with specific actors,
indicators, or attacks,
it instead aims to help
a high-level strategist understand
the border impact of business decisions.
It is the most complex form of intelligence to
generate and is a human resource intensive.
It demands a nuanced understanding
of the cyber threat landscape.
Strategic cyber intelligence it
analyses end information that can
help organizations understand the type
of threat that they are defending against,
the motivation and capability of the threat actor,
and their potential impacts.
This information enable security teams
to plan for the resources
they will need to protect against
and mitigate current and future threats.
The data at this level should be evidence-based.
But it can also include informative projections,
including what the adversaries might
do once your defenses are in place.
A briefing that can be provided to corporate board or
C-suite executives is an example
of strategic cyber intelligence.
Unlike other intelligence categories,
the majority of
strategic threat intelligence sources are open source,
meaning they can be freely accessed by anyone.
Common examples include policy documents
from nation states,
local and national media,
industry and subject specific publications.
Also we can find free content
produced by security organizations,
for example, white papers or research reports.
While the accessibility of
strategic resources can be a tremendous positive,
it can also be a double-edged sword.
As analysts may manually process a huge quantities
of raw data in order to identify valuable insights.
Worst still,
the most valuable insights are often
hidden in foreign language sources,
which forces the analysts to
spend even more time on translations.
Strategic intelligence often comes in the form of
threat briefings tailored to
your industry or organization.
After receiving a threat brief,
you may decide to change
the way that you track cyber threats.
You may even built a case
>> for new cybersecurity fundings.
>> You can also use strategic intelligence to advocate for
stronger coordination and
collaboration with other organizations.
Enhanced strategic cyber threat intelligence
can help you structure
your internal organization and
bolster your incident response capabilities.
It can also help
your organization to understand the degree
required to build defenses
against fast moving adversaries.
In most cases,
good strategic intelligence will
motivate enterprises to rethink processes,
including both non-technical processes
>> such as audit and
>> technical processes such as
configuration management to reduce IT errors.
Strategic cyber intelligence is built upon
a huge body of knowledge and includes expert opinions
and insights that are based on aggregating
both operational and tactical intelligence
from known cyber attacks.
There are many uses for strategic intelligence,
including but not limited to the following.
The first is to inform
your executive leadership about
a high risk threat actors,
relevant risk scenarios,
and threat exposure and the public
facing technology sphere and criminal underground.
Second, to perform
a thorough risk analysis and
review an entire technology supply chain.
Third and finally, to learn which
commercial venture vendors partner companies and
technology products are most likely to
increase or decrease risk
>> to your enterprise environment.
>> This situational intelligence help decision makers
allocate budget to investments
that best protect their enterprise,
align it to strategic business priorities,
and make it long-term calculations regarding how
their organization and sector
might be affected by its environment,
both digital and otherwise.
Since it is used to inform
>> specific high level decisions,
>> strategic cyber threat intelligence
is usually gathered on demand rather than
an ongoing initiative and is
most often presented as report or briefing.
Given that the audience is
primarily C-suites and barred level,
strategic cyber threat intelligence
is almost exclusively non-technical.
Instead it covers factors such as risk scores and
the possible outcomes of a given action
or decision such as entering a foreign market.
Strategic intelligence should be polished and
complete product to be presented to executives.
Strategic cyber threat intelligence
can be critically important to
building support for the resources
that you will need to construct strong defense.
All the deliverables are written in
a language for policymakers and strategists.
This is all for this lesson in which we
focused mainly on strategic intelligence,
starting from the definition of
strategic cyber Intelligence to
see also a strategic decisions and
the benefits of using strategic intelligence to finish
with the appropriate audience
>> of strategic intelligence.
>> Before closing this video,
let's quickly recap the three pillars of dissemination,
which are tactical,
operational, and strategic intelligence.
For the tactical intelligence,
the analysis part include security events and IOCs.
The output of tactical intelligence is data feeds.
These intelligence is meant for short-term.
When it comes to the audience,
tactical intelligence is meant for personnel
directly involved in the defense of organizations,
such as system architects or
administrators and security stuff.
Now, the second pillar is operational intelligence.
For analysis part,
operational intelligence include
malware family behavior and profiles,
threat actors, human behavior, and TTPs.
The output of this form of intelligence will be
mainly reports or lists and transmitters.
This form of intelligence is meant for
midterm and their audience is technical audience,
for example, security operations personnel,
>> or managers.
>> The last form of
intelligence is strategic cyber intelligence
and the analysis will be covering
cyber threats in contexts of business objectives.
The outputs will be
mainly reports, trends, and methodologies.
This form of intelligence is meant for long-term.
When it comes to the audience is
mainly board level and C-suite executives.
We almost finished this course.
Let's quickly have a summary of what we
discovered together during each
of the previous modules and
what's resources helped me to build this course.
See you in the last video.