[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-5-7":3},{"item":4,"lessons":16,"controls":34,"related":56},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-5-7","Annex A 5.7","ISO\u002FIEC 27001:2022 Annex A 5.7: Threat intelligence",4,"International Organization for Standardization (ISO) and IEC","**What it asks for.** This control expects information relating to information security threats to be collected and analysed to produce threat intelligence. It was new in the 2022 edition.\n\n**In practice.** Good practice means defining what threat information is relevant to the organisation, collecting it from suitable sources such as vendors, national CSIRTs and sector groups, and analysing it to inform decisions. Intelligence is used in risk assessment, detection and vulnerability prioritisation. Auditors look for defined sources, records of analysis and examples of actions taken based on intelligence.\n\n**Common gaps.** Typical gaps are subscribing to feeds without analysis, intelligence not shared with the teams that can act on it and no link to risk management. Intelligence sources are also seldom reviewed for relevance and quality.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22,26,30],{"slug":19,"title":20,"published_at":21},"ai-accelerated-attacks-outpace-traditional-defenses","AI-Accelerated Attacks Outpace Traditional Defenses","2026-10-13T12:21:32.737+00:00",{"slug":23,"title":24,"published_at":25},"state-sponsored-cyber-threats-are-now-an-everyday-business-risk","State-Sponsored Cyber Threats Are Now an Everyday Business Risk","2026-09-09T16:21:21.985+00:00",{"slug":27,"title":28,"published_at":29},"ransomware-nation-states-hacktivists-converge-on-uk-and-ireland","Ransomware, Nation-States & Hacktivists Converge on UK and Ireland","2026-07-22T10:20:18.899+00:00",{"slug":31,"title":32,"published_at":33},"coordinated-fake-review-campaign-weaponizes-ai-data-consumption-against-brand-reputation","Coordinated Fake Review Campaign Weaponizes AI Data Consumption Against Brand Reputation","2026-06-19T14:20:38.044+00:00",[35,40,44,48,52],{"slug":36,"name":37,"problem":38,"stories":39},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",1,{"slug":41,"name":42,"problem":43,"stories":39},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":45,"name":46,"problem":47,"stories":39},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":49,"name":50,"problem":51,"stories":39},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":53,"name":54,"problem":55,"stories":39},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",[57,62,67,72,77,82,86,90],{"family":58,"item":59,"code":60,"title":61,"together":9},"cis","17","Control 17","Incident Response Management",{"family":63,"item":64,"code":65,"title":66,"together":9},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",{"family":63,"item":68,"code":69,"title":70,"together":71},"rs-rp","RS.RP-1","Response Planning (CSF 1.1)",3,{"family":73,"item":74,"code":75,"title":76,"together":71},"nist-sp","800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management",{"family":58,"item":78,"code":79,"title":80,"together":81},"14","Control 14","Security Awareness and Skills Training",2,{"family":58,"item":83,"code":84,"title":85,"together":81},"7","Control 7","Continuous Vulnerability Management",{"family":58,"item":87,"code":88,"title":89,"together":81},"13","Control 13","Network Monitoring and Defense",{"family":91,"item":92,"code":93,"title":93,"together":81},"itil","overview","ITIL"]