ID.RA-02.155

Does your organization actively monitor cyber threat intelligence sources for vulnerabilities related to emerging technologies?

Explanation

Monitoring cyber threat intelligence sources helps organizations stay informed about new vulnerabilities that may affect emerging technologies before implementation or shortly after adoption. This proactive approach allows security teams to apply patches, implement mitigations, or adjust security controls before vulnerabilities can be widely exploited.

Evidence of compliance could include documentation of subscribed threat intelligence feeds (commercial or open-source), meeting minutes from threat intelligence reviews, reports showing emerging technology vulnerability assessments, or screenshots of threat intelligence platforms with annotations showing how emerging technology vulnerabilities are tracked and assessed.

Implementation Example

Monitor sources of cyber threat intelligence for information on the types of vulnerabilities that emerging technologies may have

ID: ID.RA-02.155

Context

Function
ID: IDENTIFY
Category
ID.RA: Risk Assessment
Sub-Category
Cyber threat intelligence is received from information sharing forums and sources

Related questions