Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Intelligence planning practiceAdvanced

Intelligence Collection Management

Intelligence collection management identifies needed information, selects appropriate sources, assigns collection tasks, and tracks whether gaps are being resolved.

What it means

Intelligence collection management identifies needed information, selects appropriate sources, assigns collection tasks, and tracks whether gaps are being resolved.

Why it matters

Collection capacity is limited; disciplined management reduces duplication, source bias, unnecessary cost, and blind spots.

Practical focus

  • Map each collection activity to a requirement
  • Balance internal telemetry with external sources
  • Document collection gaps and assumptions
  • Retire sources that do not produce useful information

Common mistakes

  • Buying more feeds instead of fixing collection design
  • Collecting data without retention and access rules
  • Ignoring legal and privacy constraints
  • Measuring volume instead of decision value

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

GIAC GCTICompTIA CySA+EC-Council CCISOISC2 CISSP

Authoritative sources