Bundles threat intelligenceCTIbundleMISP

Threat Intelligence Starter Kit

All six CTI products — assessment, auto-scoring tool, the build workbook, the feed matrix, eighteen analyst runbooks and the policy pack. 39% off buying separately.

The whole line, and the line is designed as a set.

The six products are cross-referenced by construction. The assessment names the workbook section that fixes each gap; the workbook names the runbooks that operate it; the runbooks name the policy documents that govern it. Bought separately, you assemble that mapping yourself.

Assess — the CTI Program Maturity Assessment (9 domains, 45 statements, two ceiling rules) and its auto-scoring spreadsheet, which applies the ceilings and ranks your gaps for you.

Build — Build Your Own Threat Intelligence Program, ten sections and a 30/60/90 plan, plus the Feed Selection Matrix with 62 sources pre-scored against the workbook's own rubric.

Operate — the CTI Analyst Runbook Library, eighteen one-page procedures that each end in a decision, with an escalation matrix.

Govern — the Threat Intel Policy & Governance Pack, six adoptable documents with DORA, NIS2 and ISO 27001 mappings.

Start with the assessment. It will tell you which of the other five you actually need first.

What's in this bundle

Threat Intelligence 23 pages

CTI Program Maturity Assessment

Nine domains, forty-five statements, and two ceiling rules that stop you scoring yourself a three. The front door to the line — find out where the program actually is before spending anything.

Threat Intelligence 6 tabs

CTI Maturity Assessment — Auto-Scoring

The same forty-five statements as a spreadsheet that applies both ceiling rules and ranks your gaps for you — six tabs, 98 formulas, nothing hardcoded.

Threat Intelligence 21 pages

Build Your Own Threat Intelligence Program

The anchor. Ten sections taking a small team from no capability to a running CTI program in ninety days, on MISP and the open-source CIRCL stack — with an honest ceiling on what a DIY program can ever do.

Threat Intelligence 6 tabs

Feed Selection Matrix

Sixty-two open sources pre-scored on the six criteria that are the same for everyone — you supply the two that are not. Six tabs, 411 formulas, an eight-criterion rubric and a cut line at 18 of 40.

Threat Intelligence 25 pages

CTI Analyst Runbook Library

Eighteen procedures for the things that actually land in an analyst queue. One page each, each ending in a decision rather than a suggestion — with an escalation matrix and an execution log.

Threat Intelligence 18 pages

Threat Intel Policy & Governance Pack

Six adoptable documents covering marking, handling, sharing, retention, membership, and machine access — with DORA Article 45, NIS2 Article 29 and ISO 27001 mappings. The governance a sharing programme is required to have and almost never does.