Up to this point, we've introduced how we can integrate a threat intelligence capability into improving our organization's security. Threat intelligence is externally focused. However, I wanted to take a moment in this chapter to lay a foundation to improve the internal communication capability.
In this chapter, we will undertake the following:
- Discuss some core security service basics
- Talk about security operation center capabilities
- See how we can integrate services and improve their communication
- Discuss a Capability Maturity Model for information security that enables cyber intelligence
- Collaboration + Capability = Active Defense