Eric Wong

Strengthening Cyber Defence with a Robust Threat Intelligence Policy In today’s evolving cyber threat landscape, organisations must adopt a structured and proactive approach to threat intelligence. A comprehensive Threat Intelligence Policy is essential for early detection, informed decision-making, and maintaining regulatory compliance. Key highlights from a best-practice policy framework include: - Threat Intelligence Types & Sources: Covers strategic, tactical, operational, and technical intelligence from internal platforms like SIEM and EDR, and external sources such as government CERTs, ISACs, commercial feeds, and dark web monitoring. - Roles & Responsibilities: Defines accountability across CISO, InfoSec teams, SOC, risk, and business units to ensure effective collection, analysis, dissemination, and operational use of threat data. - Lifecycle Management: Follows a structured lifecycle from intelligence direction, collection, processing, analysis, dissemination, to feedback, ensuring actionable insights that evolve with emerging risks. - Integration with Security Operations: Embeds threat intelligence in monitoring, incident response, threat hunting, vulnerability management, risk assessments, and stakeholder reporting for a holistic defence posture. - Automation & Tools: Utilizes advanced platforms like TIP, SIEM, and SOAR to automate and enhance intelligence workflows and threat detection. - Compliance & Legal Considerations: Aligns with standards such as ISO 27001:2022 (Control 5.7), SOC 2, GDPR, and sector regulations to manage legal and privacy obligations. - Training & Awareness: Promotes a threat-informed culture through tailored training, simulations, and ongoing evaluation of effectiveness. - Continuous Monitoring & Improvement: Conducts periodic reviews, performance metrics assessments, and incorporates lessons learned to advance the threat intelligence program’s maturity. A well-crafted Threat Intelligence Policy is foundational for any organisation committed to protecting its assets, maintaining trust, and staying ahead in the cyber defence race. Embracing these principles empowers teams to act decisively and collaboratively against cyber threats. The policy is provided by MoS #CyberSecurity #ThreatIntelligence #InfoSec #ISO27001 #SOC2 #GDPR #CyberResilience #GRC

190

18 Comments

Ensign InfoSecurity recently released its 2025 Cyber Threat Landscape report.  includes observations from across ASEAN, East Asia, and the South Pacific.It is one of the best resources for trends in cyber threat activity in the area

38

3 Comments

Our article titled “Perceptions of Digitalisation and Cyber Security: Impacts on Organisational Practices through the NIST Cybersecurity Framework” has been published in the Journal of Decision Systems (Taylor & Francis Group)! In this study, we examined cybersecurity perceptions and organizational practices during the digital transformation process, using the NIST Cybersecurity Framework v2, which was released in 2024, as our foundation. Insights from 124 professionals across various sectors reveal a significant gap between perceived awareness and actual readiness. The cyclical structure of the updated NIST CSF also highlights how it can enhance organizational cybersecurity maturity. As digitalization accelerates with AI and IoT, the need for proactive and adaptive strategies becomes increasingly important. Full article: https://lnkd.in/dRURbJmX Many thanks to my co-authors Assoc. Prof. Burcu Kör and Assoc. Prof. Nazim Taskin for their valuable collaboration. I believe the cyclical nature of the NIST Cybersecurity Framework v2 should be seriously considered as a foundational element for effectively implementing organizational cybersecurity. #Cybersecurity #DigitalTransformation #NISTCSF #Research #JournalPublication

80

3 Comments

Nexus, the Ministry of Defence and the Singapore Business Federation hosted a two-week phishing exercise that was part of a nationwide Total Defence campaign. 17% of over 4,500 employees from 200 businesses clicked on phishing links in emails sent to them, and 5% reported. Senior Lieutenant Colonel Psalm Lew, director of community engagement at Nexus, said: "The results underscore the importance of agencies, businesses, and communities coming together to work on a whole-of-society response to security threats through Total Defence." https://lnkd.in/gZahpw6d

35