Optimizing Security Controls: Aligning Threat Intelligence with NIST CSF for Effective Decision-Making

Abstract

In today’s era of increased digital vulnerability, there is an immense need for the implementation of robust security measures. The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) provides security experts and organizations with elaborate guidance on handling their security risks based on several fundamental functions. Lately, integrating cyber threat intelligence (CTI) has become a fundamental subject in information security, evolving with augmented supply chains and sophisticated hackers’ tactics. Nonetheless, threat intelligence is not only critically useful for the detection or identification of threats, but can also be aligned with all phases of cybersecurity processes to have a consequential impact on security risk prediction and mitigation. This review discusses how organizations can optimize their security controls by aligning threat intelligence with NIST CSF.