TechSoft Solutions actions indicate their maturity level of CTI program described as having an organized team for strategic analysis and established processes to extract threat intelligence. Which level is this?

• A. Level 1: preparing for CTI
• B. Level 3: CTI program in place
• C. Level 4: well-defined CTI program
• D. Level 2: increasing CTI capabilities

Answer: (B)

Assessing CTI maturity hinges on whether there is a formal, functioning program with a dedicated team and repeatable processes for producing threat intelligence. An organized team focused on strategic analysis shows governance, leadership, and committed resources, while established, repeatable processes to extract threat intelligence demonstrate that the work is systematic and reproducible. Together, these elements indicate a CTI program that is in place and actively producing intelligence, rather than just being planned or still in the early stages of development. In contrast, preparing for CTI would lack a formal team and processes, increasing capabilities points to growth but not a full program yet, and a well-defined program would imply broader, documented integration and governance beyond the basic in-place operations.