Which threat intelligence type provides day-to-day operational support to assess security incidents and guide executives in making strategic business decisions?

Which threat intelligence type provides day-to-day operational support to assess security incidents and guide executives in making strategic business decisions?

• A. Tactical Threat Intelligence
• B. Strategic Threat Intelligence
• C. Cyber Threat Intelligence (CTI)
• D. Risk Review

Answer: (A)

Tactical threat intelligence is the level focused on immediate, actionable information that security teams use to detect, analyze, and respond to incidents on a daily basis. It translates threat data into concrete guidance—such as indicators of compromise (IP addresses, hashes, domains), and precise attacker techniques and patterns—that SOC analysts can apply right away in monitoring, alerting, and containment actions. This makes it the best fit for day-to-day operations, while still providing useful context that can be summarized for executives to inform near-term business decisions. Strategic threat intelligence deals with long-term trends and business impact, not the hands-on incident response pace. CTI is a broad term for threat information, and a Risk Review is a process, not a defined intelligence type.

Tactical threat intelligence is the level focused on immediate, actionable information that security teams use to detect, analyze, and respond to incidents on a daily basis. It translates threat data into concrete guidance—such as indicators of compromise (IP addresses, hashes, domains), and precise attacker techniques and patterns—that SOC analysts can apply right away in monitoring, alerting, and containment actions. This makes it the best fit for day-to-day operations, while still providing useful context that can be summarized for executives to inform near-term business decisions. Strategic threat intelligence deals with long-term trends and business impact, not the hands-on incident response pace. CTI is a broad term for threat information, and a Risk Review is a process, not a defined intelligence type.