Starting in June 2012, six government agencies and 20 organizations from industry and academia provided information on their cyber intelligence methodologies, technologies, processes, and training in order to help discover best practices.
SEI researchers benchmarked this baseline data against a cyber intelligence analytic framework consisting of five functions: environment, data gathering, functional analysis, strategic analysis, and stakeholder reporting and feedback.
The Cyber Intelligence Tradecraft Project study has found that organizations use a range of approaches to gather this information. There are "pockets of excellence exist where organizations excel at cyber intelligence by effectively balancing the need to protect network perimeters with the need to look beyond them for strategic insights." However, significant needs remain.
Read the Project summary findings in the CTIP white paper.