From a strategic perspective, which statement best describes the role of threat intelligence in an organization?

• A. It should be isolated from business operations.
• B. It should focus solely on technical indicators.
• C. It should align with business operations.
• D. It should ignore governance considerations.

Answer: (C)

Threat intelligence is most valuable when it directly informs and aligns with how the business operates. From a strategic view, intelligence should connect with organizational priorities, risk appetite, and resource constraints, so security efforts support the goals of the business rather than operating in a vacuum. When threat intel is tied to business operations, it helps decide where to invest, which assets to protect, and how to address evolving threats in a way that reflects real-world impact on the company.

If intelligence is isolated from business operations, its findings may be interesting but inconsequential for decision makers, making it hard to justify budget or action. Focusing only on technical indicators ignores the broader risk context, governance needs, and regulatory or supply-chain considerations that drive strategic choices. Ignoring governance considerations weakens accountability and complicates compliance and risk management.

So the best description is that threat intelligence should align with business operations, ensuring security efforts support the organization’s objectives and governance framework.