ISO 27001:2022 has established threat intelligence to make supplier security policy mandatory for certified organizations. This document will contain the proof of a company conveying the possible security threats to its partners and suppliers. Gathering information about cyber attacks from both external and internal resources is essential to initiate mitigation practices.