CERT-SEI

Cyber Intelligence Tradecraft Project

The issue

Starting in June 2012, six government agencies and 20 organizations from industry and academia provided information on their cyber intelligence methodologies, technologies, processes, and training in order to help discover best practices.

Our approach

SEI researchers benchmarked this baseline data against a cyber intelligence analytic framework consisting of five functions: environment, data gathering, functional analysis, strategic analysis, and stakeholder reporting and feedback.

The results

The Cyber Intelligence Tradecraft Project study has found that organizations use a range of approaches to gather this information. There are "pockets of excellence exist where organizations excel at cyber intelligence by effectively balancing the need to protect network perimeters with the need to look beyond them for strategic insights." However, significant needs remain.

Learn more

Read the Project summary findings in the CTIP white paper.