Threats, both internal and external, are identified and documented.

Cyber threat intelligence is received from information sharing forums and sources.