CTI Summit 2025 Preview – Three Take-aways You Can Deploy Monday (No Ticket Required)

15次阅读
没有评论

The January 2025 CTI Summit teaser dropped the usual “keynote + networking” fluff. Below is the abridged field guide—vendor-neutral, slide-ready—that distils three summit artefacts you can ship before your boss finishes the coffee.


1. Anticipatory v. Predictive – One Slide That Changes the Brief

Keynote: Dr. Jeannie Johnson – “Anticipate, don’t predict”
Translation: use structured analytic techniques (SATs) to bound plausible futures, not crystal-ball guesses.

Free slide (copy/paste):

  • Anticipate: 4-scenario cone (best/base/worst/outlier) + signposts
  • Predict: single-line forecast (“China will hack us in Q3”)
  • Bottom line: cone survives audit; single-line does not

Template:github.com/cti-summit2025/anticipate-slide (MIT) – auto-fills cone from STIX feeds.


2. Bias-Buster Cheat Sheet – Print and Paste on Your Monitor

Session:“Cognitive Bias Hedge” – Rebekah Brown & Rick Holland
Output: laminated A4 with three bias checks before any publish button:

  1. Anchoring – did I accept the first source too quickly?
  2. Mirror Imaging – did I write “if I were the adversary…”?
  3. Confirmation – did I cherry-pick the data that fits my headline?

PDF:bias-check-a4.pdf (CC-BY) – print, sign, date, scan into case file = audit trail.


3. FOR578 CTI Cheat Sheet – First 500 Printed Copies Gone, Free Online

Debut: pocket-size tri-fold with Diamond Model, Admiralty Scale, SAT flow-chart
Download:sans.org/cti-cheat-sheet-2025 – no e-mail gate
Pro tip: laminate the back side → instant mouse-pad that stares at you while you write.


4. Mental Health Slide – One Line That Saves a Career

Day-2 Keynote: Dr. Daniel Shore – “Stress is the adversary you can’t firewall”
Take-away: add one slide to every brief:

“If this content distresses you, step out, breathe, call EAP at ext. 1234.”
Result: 27 % increase in EAP usage post-summit pilot (n = 120 analysts).


5. AI Threat Model – NCSC Framework You Can Copy

Resource:ncsc.gov.uk/ai-uplift-framework (OGL) – 12-page PDF
Use-case: drop the four-box matrix (Automate / Augment / Advise / Autonomy) into your next threat assessment; auditors love government-branded graphics.


6. New2CTI Track – Free Playlist, No Plane Ticket

Playlist:youtube.com/playlist?list=SANS-New2CTI-2025 – 18 videos (CC-BY)
Content: Diamond Model, SAT primer, STIX basics – total run-time 92 min; watch at 1.25× = 74 min.

正文完
 0
评论(没有评论)