The operational level of a cyber intel program begins with the collaboration of the following:

• IT service subject matter experts
• Security team leads
• Analysts

At this level, leaders should do the following:

1. Support the identification of critical information, systems, or technology
2. Gather and report the threats and vulnerabilities to the enterprise
3. Collect the information required to support the leadership's decision making process to reduce threats and vulnerabilities
4. Enforce policy and procedures that are in line with business objectives