Threat intelligence

frameworkISO/IEC 27001:2022 sectionA.5 Organizational controls csf 2.0DE.AE-07 ID.RA-02 ID.RA-03 ID.RA-05 ID.RA-06 topicsThreat Intelligence frameworks5 2 3

Official text · not licensableTitle: Threat intelligence. The control text is ISO's copyright; see ISO/IEC 27001:2022.

gap from ISO 27001 → gap to ISO 27001 →

Wrong or missing mapping? Report it

Equivalents of A.5.7 in other frameworks
Framework	Requirement	Title	Link	Source / reason
NIST CSF 2.0	DE.AE-07 ID.RA-02 ID.RA-03	Cyber threat intelligence and other contextual information are integrated into the analysis; Cyber threat intelligence is received from information sharing forums and sources…	Crosswalk	Same topic: Threat Intelligence 2 loosely related (not mappings) ID.RA-05 Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization Loosely related Only shares CSF ID.RA-05: related, not a mapping ID.RA-06 Risk responses are chosen, prioritized, planned, tracked, and communicated Loosely related Only shares CSF ID.RA-06: related, not a mapping
CIS v8.1	—	No requirement	No mapping in our data	No mapping in our data (most CIS links are editorial: CIS's published crosswalk covers 49 of 153 safeguards).
SOC 2	CC3.2 CC3.3 CC3.4	Risk identification and analysis; Considering the potential for fraud…	Loosely related	No mapping. Only shares CSF ID.RA-03, ID.RA-05, ID.RA-06: related, not a mapping
PCI DSS	6.3.1	Vulnerabilities identified and risk-ranked	Crosswalk	Same topic: Threat Intelligence 9 loosely related (not mappings) 6.3.3 Security patches installed promptly Loosely related Only shares CSF ID.RA-05, ID.RA-06: related, not a mapping 12.3.1 Targeted risk analysis for flexible-frequency requirements Loosely related Only shares CSF ID.RA-03, ID.RA-05: related, not a mapping 6.4.3 Payment page scripts authorised and integrity-checked Loosely related Only shares CSF DE.AE-07: related, not a mapping 11.3.1 Internal vulnerability scans every three months Loosely related Only shares CSF ID.RA-06: related, not a mapping 11.3.1.1 Lower-ranked vulnerabilities handled by risk analysis Loosely related Only shares CSF ID.RA-05: related, not a mapping 11.3.2 External ASV scans every three months Loosely related Only shares CSF ID.RA-06: related, not a mapping 12.3.4 Hardware and software technologies reviewed annually Loosely related Only shares CSF DE.AE-07: related, not a mapping 12.5.1 Inventory of in-scope system components Loosely related Only shares CSF DE.AE-07: related, not a mapping …and 1 more in the downloads
CMMC	SI.L2-3.14.3	Security Alerts & Advisories	Crosswalk	Same topic: Threat Intelligence 1 loosely related (not mappings) RA.L2-3.11.1 Risk Assessments Loosely related Only shares CSF DE.AE-07, ID.RA-02, ID.RA-03, ID.RA-05: related, not a mapping
800-53	PM-15 PM-16 SI-5 RA-10	Security and Privacy Groups and Associations; Threat Awareness Program…	Crosswalk	Same topic: Threat Intelligence NIST SP 800-53 → ISO 27001 mapping 7 loosely related (not mappings) RA-3 Risk Assessment Loosely related Only shares CSF DE.AE-07, ID.RA-03, ID.RA-05: related, not a mapping RA-7 Risk Response Loosely related Only shares CSF ID.RA-05, ID.RA-06: related, not a mapping PM-9 Risk Management Strategy Loosely related Only shares CSF ID.RA-06: related, not a mapping PM-12 Insider Threat Program Loosely related Only shares CSF ID.RA-03: related, not a mapping PM-18 Privacy Program Plan Loosely related Only shares CSF ID.RA-06: related, not a mapping PM-30 Supply Chain Risk Management Strategy Loosely related Only shares CSF ID.RA-06: related, not a mapping RA-2 Security Categorization Loosely related Only shares CSF ID.RA-05: related, not a mapping
HIPAA	§164.308(a)(1)(ii)(A)§164.308(a)(1)(ii)(B)§164.316(a)§164.308(a)(7)(ii)(E)	Risk Analysis; Risk Management…	Loosely related	No mapping. Only shares CSF DE.AE-07, ID.RA-03, ID.RA-05: related, not a mapping
GDPR	Art.35(1)Art.35(7)	Data protection impact assessment; Data protection impact assessment	Loosely related	No mapping. Only shares CSF ID.RA-03, ID.RA-05, ID.RA-06: related, not a mapping
NIS2	2.1	Risk management framework	Crosswalk	ENISA NIS2 → ISO 27001 mapping 2 loosely related (not mappings) 6.10 Vulnerability handling and disclosure Loosely related Only shares CSF ID.RA-02, ID.RA-05, ID.RA-06: related, not a mapping 4.3 Crisis management Loosely related Only shares CSF DE.AE-07: related, not a mapping
Essential Eight	—	No requirement	No mapping in our data	No mapping in our data (Essential Eight links are editorial only).
DORA	Art.8(2)Art.13(1)Art.45(1)	Identification; Learning and evolving…	Editorial	Same topic: Threat Intelligence (editorial pick) 2 loosely related (not mappings) Art.8(3) Identification Loosely related Only shares CSF ID.RA-03, ID.RA-05, ID.RA-06: related, not a mapping Art.8(7) Identification Loosely related Only shares CSF ID.RA-03, ID.RA-05, ID.RA-06: related, not a mapping
CPS 234	Para 17	Keep capability current as threats and vulnerabilities change	Editorial	Same topic: Threat Intelligence (editorial pick) 1 loosely related (not mappings) Para 21 Timely controls commensurate with risk and asset life-cycle Loosely related Only shares CSF ID.RA-03, ID.RA-05, ID.RA-06: related, not a mapping
Cyber Essentials	—	No requirement	No mapping in our data	No mapping in our data (Cyber Essentials covers five technical controls only).

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.