Threat intelligence control

The video tutorial discusses the 11 new controls introduced in ISO 27001:2022, focusing on threat intelligence. It explains how threat intelligence helps organizations identify, analyze, and respond to information threats. The process involves gathering, analyzing, sharing, and responding to threat intelligence to mitigate risks and initiate incident response plans.

Which of the following is NOT one of the new controls introduced in ISO 27001:2022?

• Data masking

• Threat intelligence

• Network segmentation

• Secure coding

What is the primary purpose of threat intelligence in an organization?

• To improve data storage efficiency

• To enhance physical security

• To manage employee performance

• To identify, analyze, and respond to information threats

Which activity is NOT part of threat intelligence control?

• Gathering threat intelligence

• Analyzing threat intelligence

• Implementing marketing strategies

• Sharing threat intelligence

What does analyzing threats involve in the context of threat intelligence?

• Evaluating the relevance and reliability of collected intelligence

• Creating new software applications

• Training new employees

• Designing network infrastructure

Who are the potential stakeholders with whom threat intelligence might be shared?

• External auditors only

• Marketing and sales teams

• Employees, partners, and law enforcement agencies

• Only the IT department