When you have the right automated processes and AI-powered systems in place, it may seem like there’s no such thing as too much information. However, the key to targeted threat intelligence is to make sure that you’re collecting data from high-quality, relevant sources that will deliver the insights necessary to improve overall cyber security.
This all starts with defining requirements and KPIs up front. Having a documented approach to measurement will make it easier to track progress and prove value to key business stakeholders. A few potential threat intelligence KPIs data include:
Percentage of identified threats directly attributed to intelligence
Instances of project re-prioritization due to threat intelligence
Response times for threats before and after implementing intelligence
Number of alerts generated by threat intelligence services
Efficacy of threat intelligence feeds, including when new data is added and when it expires