Small Business Security Solutions

Cyber Intelligence Framework™

CCI’s Cyber Intelligence Framework is a collection of industry knowledge that is intended to provide organizations of any size with a guide to establishing a functioning cyber intelligence capability within a traditional “Cyber Security Stack.”

Last Updated: September 2022

 

Version 1.1

Framework Overview

We recognize that numerous frameworks exist today that assist with varying degrees of implementing portions of a cybersecurity portfolio. However, there are no industry-backed open-source frameworks defining how cyber intelligence should work within a standard cybersecurity portfolio. CCI’s Cyber Intelligence Framework aims to fill this gap by pulling together industry expertise and portions of existing cybersecurity frameworks to establish a “go-to” resource for the Cyber Intelligence community. This framework aims to capture community-accepted standards and best practices that enable organizations to develop a cyber intelligence program that provides stakeholders with the necessary decision-making information they need at the tactical, operational, and strategic levels.

Currently, the CCI Cyber Intelligence Framework is intended to be a starting point for the cyber intelligence community to come together and establish a commonly understood model of how we should practice cyber intelligence. Ultimately, CCI aims to provide everything a security practitioner would need to build their program - everything from business requirements to reports that should be produced and more.

Formal documentation supporting the framework is scheduled to be published in early 2023.


The Cyber Intelligence Framework is an community endorsed methodology outlining how an effective cyber intelligence program operates.
Creative Commons License
Cyber Intelligence Framework™ by Center for Cyber Intelligence is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License
 

Change Log - Prior Version 1.0

  • Introduced Support for Security Orchestration, Automation, and Response

  • Added Details to identify the relationship between a SIEM and the Cyber Intelligence Factory.

  • Updated External Information Source Descriptions



Cyber Intelligence Framework™ Contributors

Chris Cooley | CCI Co-Founder

Phil Langlois | CCI Co-Founder


Please provide your feedback on the Cyber Intelligence Framework using the form below. Thank you in advance for your support!


* While consuming or contributing to CCI projects is free, we do rely 100% on volunteer efforts.

Please consider making a donation today to support our mission.