ANNEX III
Content of the targeted threat intelligence report (Article 10(5))
The targeted threat intelligence report shall contain information on all of the following:
|
1. |
The overall scope of the intelligence research including at least the following:
|
|
2. |
The overall assessment of what concrete actionable intelligence can be found about the financial entity, including:
|
|
3. |
Threat intelligence analysis considering the general threat landscape and the particular situation of the financial entity, including, at least:
|
|
4. |
Threat profiles of the malicious actors (specific individual/group or generic class) that may target the financial entity, including the systems of the financial entity that malicious actors are most likely to compromise or target, the possible motivation, intent and rationale for the potential targeting and the possible modus operandi of the attackers. |
|
5. |
Threat scenarios: at least three end-to-end threat scenarios for the threat profiles identified in accordance with point 4 who exhibit the highest threat severity scores. The threat scenarios shall describe the end-to-end attack path and shall include, at least:
|
|
6. |
Where relevant, a description of the non-threat-led scenario referred to in Article 10(4). |