Archived Content

In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
PUBLICATION

Assessing the Potential Value of Cyber Threat Intelligence Feeds White Paper

Revision Date

There are two areas of consideration to assess the potential value of a Cyber Threat Intelligence (CTI) feed: relevance and usability. However, most organizations only focus on relevance. While determining if an offering is relevant is important, it is not enough. The organization/customer/consumer also needs to make sure the information is usable and applicable in their environment; that it is actionable and can be used to drive the operational processes and decisions in a timely manner with minimal impact to local resources. This paper provides definitions and operational considerations for assessing the potential value of CTI feeds.