The bottom line: CISOs are underutilizing Cyber Threat Intelligence despite its critical importance for risk prioritization and governance accountability.
A new SANS Institute report documents a disconnect between Threat Intelligence teams and their uptake by executives. CISOs apparently rate the available insights into the threat landscape considerably lower than their significance for governance and risk management would warrant.
The SANS Institute report examines both sides of the Threat Intelligence process for the first time: cybersecurity analysts who gather and process threat information, as well as security leaders who are expected to use it. The analysis reveals a significant knowledge gap between these two groups.
For CISOs, Threat Intelligence is not an abstract academic topic – it is a directly operational input for prioritizing measures, calibrating defense budgets, and communicating with the executive level. When CISOs systematically undervalue this information, it leads to suboptimal investment decisions, delays in addressing known threats, and weaker stakeholder communication in compliance and governance contexts such as NIS2.
The SANS report suggests that the mediation between intelligence production and intelligence consumption is structurally inadequate – both in terms of report format and integration into management decision-making processes.
Source: itwelt.at · Published May 29, 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification via Lumi News Pipeline v1.2.0.