What is Intelligence?
There are many definitions of Intelligence ranging from ‘research’ to a fourteen page definition produced for an American Intelligence organization. The Cyber Intelligence Defence Center (CIDC) defines Intelligence as:
‘foreknowledge of an adversary’
One of the services the Cyber Intelligence Defence Center offers is teaching organizations what Intelligence is, including how it has evolved, and how it can be used effectively. Samples of our material can be found on the CSCSS website.
What about / what is 'Threat Intelligence?'
Many cyber-security companies market ‘threat intelligence’. The term ‘threat intelligence’ is misleading. Sun Tzu defined Intelligence as ‘foreknowledge of an adversary’, meaning that Intelligence, by its very definition and intent, is supposed to be focused on the threat (the adversary). That is what CIDC and CSCSS use as the definition of Intelligence. This definition is based on the historical roots of Intelligence, how the use and meaning of Intelligence has evolved, how Intelligence is defined by governments, and how our team was trained.
Who are we?
Cyber Intelligence Defence Center, or CIDC, is part of the Defence Intelligence Group, a component of the Center for Strategic Cyberspace and Security Science (CSCSS). David Swan Consulting ‘mans’ CIDC, providing the Intelligence personnel and computer expertise behind CIDC. The David Swan Consulting team is a group of Intelligence professionals whose credentials were earned during government employment, conducting analysis and producing Intelligence products.
How are we different
Intelligence is a partnership between the Intelligence team and the client. It is a partnership because information flows both ways. The better the direction CIDC receives from the client, the more refined CIDC’s work and reporting becomes. When a client’s security information is added to CIDC’s database, CIDC can produce more detailed threat assessments and improve forecasting.
We are different in a few other ways as well.
- CIDC is part of CSCSS, an international cyber-security organization. CIDC provides situational awareness (what is happening now) as well as detailed analysis and forecasts of what cyber-attacks you should expect to see. CIDC does not sell any other cyber-security products.
- Part of our customer focus is the delivery of Intelligence products in PLAIN LANGUAGE. CIDC does not use marketing speak, Intelligence dialect or ask you to learn a new vocabulary.
- CIDC personnel have extensive Intelligence training, based on internationally recognized standards. Our personnel have worked in operational environments.
- CIDC is dependent upon your organization’s input. Your computer network and daily operational experience is part of the cyber-security environment. The more CDIC can learn about your cyber-events and attackers, the better the Intelligence CIDC can generate. CIDC does this because we know that the more information that can be integrated from disparate sources, the more effective CIDC Intelligence products become.
When you share information with CIDC, it is checked to ensure any identifying information is removed. If CIDC can’t ensure your organization’s security, the information is not shared. This is an example of our training and standards.
Who are our products for?
If you are:
| CEO
CFO (C-Suite) Senior Executive Member of a Board of Directors
|
CIDC products are tools for strategic planning. |
| CIO
CISO Middle Manager |
CIDC products provide situational awareness of key topics and events. CIDC also warn of trends that may affect your network operations.
|
| Security Operations Center
Security Professional |
CIDC Cyber-Security Daily provides an overview of the global cyber-security environment including current attacks, technical information on malware, vulnerabilities and patches. |
What do your intelligence products cost?
That depends on what your organization needs. You select the products and services appropriate for your organization, and pay the rates for those. There are discounts for organizations using multiple products as well as rates for clients wanting direct access to CIDC analysts.
Where does your information come from?
CIDC sources are provided by our staff, by members of CSCSS, by other contributors (both inside and outside of CSCSS), and by sponsors. The information itself originates from a mixture of open and proprietary sources. CIDC also conducts speciality research and intelligence products for CIDC clients.
What is your relationship with governments?
CIDC has no relationship either formally or informally with any government. CIDC is aware that CIDC products are widely circulated and are used by more than one government agency.
Do you have any 'Threat Intelligence' products?
Yes – and No. ‘Threat Intelligence’ is not a term we use. Threat Intelligence is a standard term in the computer security industry but it is NOT a standard term in the Intelligence profession where our team learned their skills. We conduct analysis of cyber events and aggressors, just like the Threat Intelligence providers. We also work at forecasting the patterns and activitites of those aggressors, which is NOT the same. So yes we provide the same informaiton and more.