ID.RA-02.155
Does your organization actively monitor cyber threat intelligence sources for vulnerabilities related to emerging technologies?
Explanation
Monitoring cyber threat intelligence sources helps organizations stay informed about new vulnerabilities that may affect emerging technologies before implementation or shortly after adoption. This proactive approach allows security teams to apply patches, implement mitigations, or adjust security controls before vulnerabilities can be widely exploited. Evidence of compliance could include documentation of subscribed threat intelligence feeds (commercial or open-source), meeting minutes from threat intelligence reviews, reports showing emerging technology vulnerability assessments, or screenshots of threat intelligence platforms with annotations showing how emerging technology vulnerabilities are tracked and assessed.
Implementation Example
Monitor sources of cyber threat intelligence for information on the types of vulnerabilities that emerging technologies may have
ID: ID.RA-02.155
Context
- Function
- ID: IDENTIFY
- Category
- ID.RA: Risk Assessment
- Sub-Category
- Cyber threat intelligence is received from information sharing forums and sources

