Up to this point, we've introduced how we can integrate a threat intelligence capability into improving our organization's security. Threat intelligence is externally focused. However, I wanted to take a moment in this chapter to lay a foundation to improve the internal communication capability.

In this chapter, we will undertake the following:

• Discuss some core security service basics
• Talk about security operation center capabilities
• See how we can integrate services and improve their communication
• Discuss a Capability Maturity Model for information security that enables cyber intelligence
• Collaboration + Capability = Active Defense