44% 37% 33% 33% Cryptolocker Cloudbleed Wannacry Teslacrypt

Managing the Program

Data Collected From ThreatConnect: Building a Threat Intelligence Program Survey

Among organizations with threat intelligence programs monitor or interact with threat intelligence 41% data 24 hours a day 76% 67% 63% implemented a ﬁrewall implemented a implemented Among threat intelligence log management organizations platform with threat intelligence programs : 60% 59% 54% implemented intrusion implemented implemented indicator prevention/protection endpoint detection feeds and blocklists and response

Among organizations with threat intelligence programs, the following well-known cyberattacks prompted them to change their current program: 44% 37% 33% 33% CryptoLocker Cloudbleed WannaCry TeslaCrypt

The largest enterprise ﬁrms surveyed indicate programmatic changes due to well-known threats more so than smaller organizations:

Cloudbleed TeslaCrypt 81% of cybersecurity decision makers agree 46% vs. 37% vs. 40% 31% that coordinating data sharing with governments is a priority for their threat intelligence program WannaCry Heartbleed 40% vs. 31% 37% vs. 27% 87% Stuxnet of organizational leaders strongly echo this sentiment 35% vs. 20%

3865 Wilson Blvd. | Suite 550 | Arlington, VA 22203 ThreatConnect.com [email protected] P: 1.800.965.2708 Methodology

FD DT: PPMT total reone 15 MINUTE erall margin o error PT PDT conﬁdence

Data Collected From ThreatConnect: Building a Threat Intelligence Program Survey

About ThreatConnect

Designed by analysts but built for the entire team (security operations, threat intelligence, incident response and security leadership), ThreatConnect’s intelligence-driven security operations platform is the only solution available today with intelligence, automation, analytics, and workflows in a single platform. Centralize your intelligence, establish process consistency, scale operations, and measure your effectiveness in one place. To learn more about our threat intelligence platform (TIP) or security orchestration, automation, and response (SOAR) solutions, visit: www.threatconnect.com.

ThreatConnect.com 3865 Wilson Blvd. | Suite 550 | Arlington, VA 22203 [email protected] P: 1.800.965.2708