Building an Intelligence Team: Overview and Considerations

Building an Intelligence Team: Article 01

Intelligence teams play a critical role in several industries and may take several forms based on the needs of the organization. In the world of cybersecurity, it is widely established that an intelligence analysis capability is a crucial component of a strong security posture.

Despite this reality, it is unfortunate to observe that in many cases many organizations attempt to create a threat intelligence analysis team without a comprehensive plan or an understanding of the needs driving the initiative.

The following video – and the purpose of this series of blog articles – is to provide those with the responsibility of creating and maintaining an intelligence team capability with unique perspectives and insights drawn from real-world situations. These concepts apply equally to all disciplines. They also apply equally to all organizations in corporate, military, and academic environments.

The Threat Intelligence Analysis Team

Video Blog Series

PART 1  |  PART 2  |  PART 3  |  PART 4  |  PART 5  |  PART 6  |  PART 7

This video (part 1 of 7) was recorded on July 15, 2022, while teaching the Certified Threat Intelligence Analysis Manager course to a corporate client. The specific content of the video was taken from Domain 14 of the CTIAM course, “Considerations for Creating an Intelligence Team.”

The remaining videos in this series will be recordings taken from the same domain and are being disseminated to the public with the permission of the client and Phase2 Advantage Cybersecurity.

Although comments have been disabled on this blog for security purposes, we encourage feedback and response on the social media platform in which this blog article was viewed.

Michael I. Kaplan is the founder and CEO of Phase2 Advantage, and currently manages the Content Development and Publishing initiatives of the company. He is also the Chairman of the Cyber Security Advisory Committee at Savannah Technical College. The publishing division of Phase2 Advantage creates cybersecurity textbooks and workbooks listed on Amazon, Ingram's VitalSource platform, and all major booksellers.

Michael's technical areas of specialization are Incident Response, Business Continuity / Disaster Response Planning, Information Security Management, and Digital / Network Forensics.

Feel free to contact Michael at