Building a Cyber Intelligence Program - Part 1

Building Your Cyber Intelligence Program

This online Part 1 course covers the initial aspects of building a proper cyber intelligence program. We begin from nothing supplying guidance proven through program build campaigns across different verticals and four continents.

We designed the course to guide organizations in their cyber and threat intelligence program builds through online lectures, demonstrations, and templates covering the full intelligence lifecycle at a minimum. After years of teaching intelligence courses and delivering intelligence programs to clients, Treadstone 71 now offers this step-by-step course. We take students through the strategic planning process, goals and objectives creation, stakeholder analysis, adversary targeting and threat matrices creation, priority intelligence requirements, collection planning, structured analytic technique usage, analysis, maturity assessments, SOP development, threat intelligence platform selection, analytic writing, and dissemination non-inclusively.

The program includes instructional videos tied to content with periodic direct access to Treadstone 71 for client deliverable reviews. We supply templates and examples that you can use, change, or get ideas from. Artifacts specifically designed for past clients. The peer-review process follows a standard cycle including comments, suggestions, recommendations, and examples of previously finished products. Treadstone71 also offers regular ‘professor’ office hours for Q&A as requested in Office Hour Packs.

The program follows proven methods established over the years while creating intelligence programs. Clients move at a regular pace that corresponds with their internal schedules that Treadstone 71 helps to set up with the client.

We offer the program in different definitive sections giving students time to work artifacts, ideas, and the program with their stakeholders. The program also offers the standard Cyber Intelligence Tradecraft Certification training as an add-on.

A brief overview of the overall program (Part 1 is a segment of the whole program course of study):

Strategic Plan development, acceptance, and dissemination
Mission
Vision
Guiding Principles
Roles and Responsibilities
Goals and Objectives
Roadmap
Cyber Intelligence Capability Maturity Model Assessment
Standard operating procedures
RACI(S)
Process flow diagrams
Associated metrics
Peer Reviews
Intelligence Functions
Communications, Responsibilities, Methods
Practices and Activities
Organizational interfaces
SOC and IR
Other intelligence groups
CISO/CSO and CIO
C-Suite
Department leadership
External groups
Vendors
Cyber Intelligence Lifecycle definition
Stakeholder Analysis
Collection Planning
Production
Structured analytic techniques
Analysis
Analytic Writing
Reporting and Briefing
Dissemination
Intelligence Information Sharing
Enterprise objectives
Communities of Interest
Your internal ISAC
Threat Intelligence Platforms
RFP and Selection process
Maturation
Vendor data feeds
Training and Knowledge Transfer

Clients subscribing to the program create program content undergoing Treadstone 71 review prior to leadership delivery. The intent is to share our vast ability in cyber intelligence strategies to aid organizations in the prompt building of their programs. We see this model as an effective and efficient way to extend our knowledge, share our standards-based program information while setting up an industry model rooted in intelligence community tradecraft. That tradecraft follows the International Association for Intelligence Education Standards for Intelligence Analyst Initial Training, intelligence community directives (ICDs), content from the Sherman Kent School for Intelligence Analysis and Mercyhurst University as well as 30+ years of boots on the ground experience.

What do you have at the end of the program?

As clients carefully follow the training and timelines, executing the deliverables internally, clients will have built a complete cyber threat intelligence program. The program definition, strategy, policies, procedures, process flow diagrams, roles, responsibilities, templates, models, methods, tactics, techniques, reports, dissemination models, briefings, table-top exercises, as well as certified Cyber Intelligence Tradecraft professionals are all core components of what clients achieve.

We offer the standard model that follows the cyber intelligence lifecycle with standard office hours. We also offer added Office Hour Packs beyond the standard. Should you wish to certify staff during the training, we can upgrade you to the Certification module. Lastly, we also offer the most comprehensive add-on, the Strategic Intelligence Analysis upgrade. How do you know which is best for you? We take you through the first reviews and assessments to decide what best suits your culture, needs, and pricing model.

If you wish to learn more, contact us to schedule a review of this extensive and comprehensive assisted training program.

Your Instructor

Treadstone 71

Treadstone 71 is a woman and veteran-owned small business exclusively focused on cyber and threat intelligence consulting, services, and training. We are a pure-play intelligence shop.

Training dates and locations here

Since 2002, Treadstone 71 delivers intelligence training, strategic, operational, and tactical intelligence consulting, and research. We provide a seamless extension of your organization efficiently and effectively moving your organization to cyber intelligence program maturity. Our training, established in 2008, follows intelligence community standards as applied to the ever-changing threat environment delivering forecasts and estimates as intelligence intends. From baseline research to adversary targeted advisories and dossiers, Treadstone 71 products align with your intelligence requirements. We do not follow the create once and deliver many model. We contextually tie our products to your needs. Intelligence is our only business.

We use intuition, structured techniques, and years of experience.
We supply intelligence based on clearly defined requirements.
We do not assign five people to do a job only one with experience.
We do not bid base bones only to change order you to overspending.

We do not promise what we cannot deliver. We have walked in your shoes. We understand your pressures.

We are known for our ability to:

Anticipate key target or threat activities that are likely to prompt a leadership decision.
Aid in coordinating, validating, and managing collection requirements, plans, and activities.
Monitor and report changes in threat dispositions, activities, tactics, capabilities, objectives as related to designated cyber operations warning problem sets.
Produce timely, fused, all-source cyber operations intelligence and indications and warnings intelligence products (e.g., threat assessments, briefings, intelligence studies, country studies).
Provide intelligence analysis and support to designated exercises, planning activities, and time-sensitive operations.
Develop or recommend analytic approaches or solutions to problems and situations for which information is incomplete or no precedent exists.
Recognize and mitigate deception in reporting and analysis.
Assess intelligence, recommend targets to support operational objectives.
Assess target vulnerabilities and capabilities to determine a course of action.
Assist in the development of priority information requirements.
Enable synchronization of intelligence support plans across the supply chain.
...and Review and understand organizational leadership objectives and planning guidance non-inclusively.

Course Curriculum

Building a Cyber Intelligence Program - Part 1

Available in days

days after you enroll

Frequently Asked Questions

When does the course start and finish?

The course starts upon enrollment. This short course should take no more than a week at the longest.

How long do I have access to the course?

12 months with access to over 100 artifacts, the primary consultant, lectures, methods, process flows, procedures, matrices, policies, and plans. All are from our library built from nearly 15 years of cyber intelligence program builds. We have built them in insurance companies, banks, financial services firms, cybersecurity companies, hospitals, and more. This is what is available when taking all short courses associated with the full program.

Part 1 is now open for enrollment.

Get started now!

Building a Cyber Intelligence Program - Part 1 Coupon Discount

The intelligence function provides integrated and efficient solutions that supports organizational providing timely, reliable, and cost-effective threat intelligence to protect the brand, information, and information systems.

Building a cyber intelligence program involves several key steps, from initial documentation and training to full-scale implementation. Here's a more detailed description of the process:

Document Review: The first step is to understand the current state of your cyber environment and security posture. This involves reviewing all existing policies, procedures, and standards related to cybersecurity. You also need to assess the effectiveness of the current cybersecurity strategy, tools, and practices in place. The review process should also include an examination of past cybersecurity incidents and responses.

Cyber Intelligence Training: Training is a critical part of any intelligence program. This involves educating your team about the cyber threat landscape, types of threats, threat actors, and potential vulnerabilities. This training should also cover how to use threat intelligence tools and platforms, understanding indicators of compromise (IoCs), and how to analyze and interpret collected data. It's also important to train personnel in secure practices to minimize the risk of internal security breaches. This training should be continual, with regular updates as the cyber threat landscape evolves.

Internal Intelligence Program Development: Developing your cyber intelligence program from paper to people means taking the information you've gathered and the training you've undergone to construct a robust, actionable program. This often involves setting up a dedicated cyber intelligence team, establishing roles and responsibilities, and defining processes and procedures. You'll also need to select and implement the appropriate tools and platforms to support your intelligence activities. The intelligence program should also define a process for regularly updating and refining the intelligence strategy based on feedback and changes in the cyber threat landscape.

Coaching: This step is about providing ongoing support and guidance to your cyber intelligence team. Coaching can include everything from regular check-ins and performance reviews to providing additional training and professional development opportunities. The goal of coaching is to continuously improve the skills and knowledge of your team and to ensure they are up-to-date with the latest threat intelligence techniques and best practices.

Implementation: The final stage is to fully implement your cyber intelligence program. This means putting all your plans into action, running your intelligence gathering and analysis activities, and integrating the intelligence into your broader cybersecurity practices. Implementation also includes monitoring and evaluating the effectiveness of the program, refining your processes and tactics based on feedback, and ensuring the intelligence is being used to inform decision-making and enhance cyber defenses.

Remember, building a cyber intelligence program is not a one-time project but a continuous process of adaptation and improvement. It requires a commitment to staying abreast of the evolving threat landscape and continually refining your practices to keep your organization secure.

There is much more but, these are some of the starting points.

$299

Building a Cyber Intelligence Program - Part 1

This is the part 1 instruction lays out the roadmap for a mature cyber intelligence program

Your Instructor

We are known for our ability to:

Course Curriculum

Frequently Asked Questions

Get started now!

Building a Cyber Intelligence Program - Part 1 Coupon Discount