An ISAC strategic report says municipal finance systems are a rising target this year. What is the best use of that report inside the city's Enterprise Security program?
Select an answer to reveal the explanation.
Short Explanation
A strategic report is a compass, not a fire alarm and not a bag of hashes. Use it to brief leadership and pick which ATT&CK tactics deserve coverage in ES. Do not auto-close notables or pretend the PDF is a threat-list feed.
Full Explanation
Strategic intelligence informs coverage priorities and leadership context. Inside Enterprise Security, that means deciding which ATT&CK tactics civic detections must cover for municipal finance — not auto-closing notables, not ingesting a PDF as hashes, and not treating the report as a correlation search. Technical lookups still need real indicators. Defense Analysts apply the strategic tier at the program layer, then let operational and technical intel drive hunts and threat lists.