The SANS 2021 Cyber Threat Intelligence (CTI) Survey is now available and, not surprising given the events of last year, the theme of “resilience” comes through loud and clear. In the face of added cybersecurity challenges brought on by the global pandemic, cybersecurity practitioners report that their organizations have continued to grow and mature their CTI capabilities in the following ways:
- Automate. To reduce the amount of time they spend on repetitive collection and processing tasks to focus on higher-level analytic activities, analysts are leveraging more automated CTI tools and processes. This is particularly beneficial as analysts are increasing the number and variety of external threat data sources they are using to support detection and investigation.
- Adopt. Organizations of all sizes and across all industries are adopting CTI programs, reflecting broad-based recognition of the benefits that investments in CTI programs provide. From tactical to strategic decision making, CTI is demonstrating its value as organizations battle increasingly menacing threat actors seeking to cause disruptions and profit during this global crisis.
