From the course: CompTIA Cybersecurity Analyst+ (CySA+) (CS0-003) Cert Prep: 1 Security Operations
Unlock the full course today
Join today to access over 23,400 courses taught by industry experts.
Intelligence sharing
From the course: CompTIA Cybersecurity Analyst+ (CySA+) (CS0-003) Cert Prep: 1 Security Operations
Intelligence sharing
- [Instructor] You just learned about some of the technology used to share threat intelligence information between systems in your organization. These included TAXII, STIX, and CybOX. These technologies really shine when you're able to use them to share information with your peers, in other groups within your organization, and at other organizations. Take a moment to think about the different business functions that would benefit from threat intelligence information within your own organization. You may have a variety of supported functions where threat intelligence sharing would add value, such as incident response teams who are tasked with actively responding to security incidents, vulnerability management teams who must identify potential weaknesses that could lead to future incidents, risk management teams who must understand the big picture of cybersecurity risk, security engineering teams who must design controls to…