312-39V2: Certified SOC Analyst v2

A security operations center team at a large financial institution is implementing a threat-intelligence strategy to proactively defend against cyber threats. To make the initiative successful, the team must systematically allocate resources to collect relevant intelligence.

The CISO has stressed that merely collecting data is insufficient; the team must assign specific personnel, tools, and time to gather intelligence aligned with the organization’s most urgent security concerns, such as fraud detection, phishing campaigns, and nation-state threats targeting financial transactions.

As part of this structured approach, the team must identify who is responsible for intelligence collection, which sources will be monitored, and how often data will be collected. This step ensures appropriate resources are applied to the most relevant intelligence activities. What is this process called?