<aside> 💡
The objective of this system is to empower professionals to independently educate and inform their intelligence consumers.
</aside>
People are the most important part of threat-informed defense.
Defenders and mostly adversaries.
We're talking about people.
People make decisions, tools don't make decisions.
Understanding this thoroughly is what we're after.
To do this, you need to ask questions and asking the right ones remains challenging.
● Who's asking the right questions?
● Are people asking themselves the right questions?
● What level (in the organization) are they?
● Is the story about risk and threat consistent from board to basement?
If the answer is no, or the answer is something like 'you are the expert, you tell me!', see that as opportunities to explore a threat-informed approach to educate and demonstrate value.
Oh, if you think this is an absurd paragraph because it is so frighteningly simple:
Yes, this is the reality.
Out of all the amazing advances we made in technology, we still rely heavily on our ability as humans to communicate.
This will surely never change.
Threat Informed defense - or decision-making - starts with questions.