Back to all 93 controls
Annex A 5.7
Organizational
A.5.7 Threat intelligence
Collect and act on threat intelligence.
What good looks like
Process to gather strategic, tactical and operational threat intel and feed it into risk and detection.
Evidence an auditor will ask for
Threat intel sources, weekly briefings, tickets driven by intel.
Put this control into practice
Check whether your organisation already meets Annex A 5.7 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.
