Resilient Security Requires Mature Cyber Threat Intelligence Capabilities

By Trellix Advanced Research Center · August 5, 2023

Threat intelligence and the ability to add context to each technology environment to global threats has never been more important to the role of the CISO, or to the board they report to.

We recently had the opportunity to support an important industry effort to advance threat intelligence, led by our partners at Intel 471. Trellix, along with 25+ cyber leaders, launched a new maturity model for cyber threat intelligence (CTI). The initial version of the Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) is a first-of-its kind and universally applicable resource to support organizations in getting maximum benefits from their CTI strategy.

Organizations need guidance to mature their cyber threat intelligence capabilities

CISOs and their SecOps teams require threat intelligence to anticipate threats, identify and prepare for the most relevant threats, align programs and budget against the most likely threats and actors, and finally, to move from a reactive to proactive posture – all mission critical for limiting risk.

At Trellix, we support many organizations with our products and services, from governments to small and medium businesses, each operating at their own Intelligence maturity level and often struggling to grow in maturity. The CTI-CMM is designed to provide a level of guidance to organizations on how to best grow, measure and align their threat intelligence program with organizational priorities. The model establishes shared values and principles across the industry to empower organizations to take a holistic approach to cyber threat intelligence with stakeholders in mind.

Industry collaboration benefits all

The all-volunteer team behind the CTI-CMM is comprised of professionals representing a wide range of sectors, geographic regions, backgrounds and experiences, including leaders from Intel 471, IBM, Kroger, Venation, Mandiant, IntL8, Regfast, Trellix, Autodesk, Centre for Cybersecurity Belgium (CCB), Northwave Cyber Security, Workday, Marsh McLennan, Signify, Tidal Cyber, DeepSeas, BP, Gojek, SAND and many more.

At Trellix, we are committed to collaborating with vendors and across the public and private sectors. Not only does this best serve our customers, but it is the right thing to do, and an important pillar in driving a transparent and collaborative culture around cybersecurity. We believe in the importance of industry collaboration in enhancing CTI capabilities and setting standards that benefit the entire community.

By bringing together industry leaders to create the CTI-CMM, all organizations now have access to a free and, more importantly, effective blueprint to build and execute and mature their CTI program for their specific organization, please visit: https://cti-cmm.org/