The IT Nerd

ThreatConnect, Inc, maker of industry-leading AI and ML-powered threat intelligence operations (TI Ops) and cyber risk quantification solutions, today announced its new Intelligence Requirements capability. This new capability strengthens ThreatConnect’s TI Ops Platform by allowing customers to define, manage, and track their intelligence requirements (IRs), priority intelligence requirements (PIRs), and requests for information (RFIs) more effectively, making it easier to identify relevant intelligence, track the value of their intelligence sources, and take proactive action against the most dangerous threats. 

With limited resources, it’s more critical than ever that cybersecurity teams are deeply aligned with both business priorities and an evolving threat landscape. Too often, threat intelligence is produced ad-hoc and siloed without input from stakeholders leading to ineffectual intel and wasted efforts. IRs and PIRs represent a common language that drives stakeholder input and organizational alignment. A recent ThreatConnect customer survey found that 94% find PIRs highly or moderately helpful in improving cyber threat intelligence teams’ performance. However, 93% reported one or more challenges with communicating and operationalizing PIRs. 

ThreatConnect is tackling the problem of effectively operationalizing these requirements in its next release. With built-in support for defining, implementing, and identifying intelligence related to IRs and PIRs, ThreatConnect empowers security professionals to quickly and easily create optimally defined requirements and use them to identify relevant intelligence within the customer’s own Threat Library and ThreatConnect’s ML and AI-powered Global Intelligence.  

IRs and PIRs are a critical component of ThreatConnect’s Evolved Threat Intelligence Lifecycle planning stage. The planning and direction phase of the threat intelligence cycle is complex, often overlooked, and has a significant downstream impact on the rest of the process. CTI analysts are dealing with substantial data challenges, making it time intensive to process and prioritize what is specifically relevant to the organization. This new product feature helps articulate requirements and form the foundation of the evolved threat lifecycle, no matter the team’s maturity. IRs also save users time by automatically parsing incoming and relevant intelligence related to each requirement.

ThreatConnect’s new IRs feature enhances TI Ops capabilities by:

• Streamlining the implementation, integration, and management of PIRs directly in the platform instead of with documents and spreadsheets.
• Improving threat detection, response times, and risk mitigation actions through matching new intelligence relevant to your requirements.
• Facilitating the efficient production and dissemination of relevant intelligence to stakeholders, empowering them with timely and accurate information to respond quickly and effectively to threats, substantially reducing risks.

Today, cyber threat intelligence company ThreatConnect released the industry’s first threat intelligence (TI) platform explicitly designed for TI Ops. The new release radically increases the effectiveness of threat intelligence analysts and security operations teams by bringing together the power of human analysis,  ML-powered analytics and intelligence, and automation. 

The ThreatConnect Platform enables organizations to achieve alignment between security operations and the critical risks to the business, better security efficiencies, and greater effectiveness, including faster time to mitigate essential vulnerabilities and faster mean time to detect (MTTD) and respond (MTTR) to threats. In a recent survey of ThreatConnect customers, more than 68% of respondents said that the product helped them improve their MTTR by more than 50%.

In the same study, 95% of respondents noted that ThreatConnect enabled them to get more value from their existing security tools, such as SIEM, XDR, and SOAR. Customers can now go beyond just managing threat intel to operationalizing it and fusing it across every part of your security program, from threat investigation to incident response to vulnerability management with ThreatConnect’s ML-Powered Global Intelligence and Analytics with CAL™ v3.0, Native Reporting Engine, and Built-in Enrichment.

For more information, there’s a blog post that you can read a this link: ThreatConnect 7.0: The Industry’s First Threat Intelligence Operations (TI Ops) Platform.