The "I" in CTI: "Intelligence" or Just "Information"? Re-applying Risk and Fundamentals Back Into Intelligence

Current trends in the cyber threat intelligence industry expend considerable efforts describing technical threats, but often eschew the discussion of actual risk. The purpose of this presentation is to re-introduce the concept of risk versus a threat-only based intelligence function and discuss the swing back towards intelligence fundamentals after a decade of hyper-focused tactical research and technical innovation. This talk will present a cyber threat actor scoring system developed by Optiv's Global Threat Intelligence Center (gTIC) that articulates real-world risk to aid defenders in prioritizing relevant threats and countermeasures.