Chris Horsley, Prescott Pym - Levelling up your CTI program with the CTI-CMM

Is your Cyber Threat Intelligence (CTI) program making a difference in your organisation? This session introduces the emerging and globally-developed Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) - a structured assessment framework designed to help organisations assess and strategically enhance their threat intelligence operations. Designed for CISOs, analysts, and program managers, you will gain a solid understanding of the CTI-CMM's key domains and maturity levels, and how to use it to shape a clear CTI roadmap. We’ll go beyond theory with applications of the CTI-CMM based on our experience, providing practical insights that you can take home to your organisation. You'll walk away with steps to elevate the value CTI provides in your organisation from the technical to the executive levels. We’ll show you how CTI goes beyond IoCs to inform risk management, link to strategic goals, and inform your stakeholders. We’ll also leave you with a CTI-CMM v1.3 assessment tool that we developed at Cosive.