Back to all 93 controls
    Annex A 5.7
    Organizational

    A.5.7 Threat intelligence

    Collect and act on threat intelligence.

    What good looks like

    Process to gather strategic, tactical and operational threat intel and feed it into risk and detection.

    Evidence an auditor will ask for

    Threat intel sources, weekly briefings, tickets driven by intel.

    Put this control into practice

    Check whether your organisation already meets Annex A 5.7 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.