The county board asks whether nation-state actors are targeting U.S. local government this year so it can set budget and risk appetite. Which threat-intelligence tier answers that question?
Select an answer to reveal the explanation.
Short Explanation
The board is asking for the weather forecast, not tonight's radar blip. "Are nation-states hunting cities this year?" is strategic intel — intent, trends, risk appetite. A hash list or one C2 IP is a raindrop, not the climate briefing.
Full Explanation
Strategic threat intelligence answers leadership questions about who is targeting a sector over a planning horizon, including nation-state interest in local government. Technical indicators and a single ES threat-list lookup support blocking and matching, not budget-level context. Tactical TTPs describe how an actor operates and belong in detection design, not a board risk-appetite discussion. Civic Defense Analysts should pick the strategic tier for the board and keep hashes and technique notes for the SOC floor.