SANS 2025 Cyber Threat Intelligence Survey Findings

The SANS 2025 Cyber Threat Intelligence (CTI) Survey presents a comprehensive analysis of the current state of CTI practices among organizations. This report outlines key findings from 489 responses, indicating a maturation in the CTI field, with more organizations establishing dedicated teams and integrating artificial intelligence into their processes. The survey highlights that 70.2% of respondents attribute the evolution of CTI processes to an increasingly complex digital landscape. Additionally, it notes that 77% of organizations utilize CTI for threat hunting, while 86% adopt the MITRE ATT&CK framework. The report also documents the critical role of communication in CTI, with 80% of respondents using reports to convey intelligence. Furthermore, it discusses the challenges faced by CTI professionals, including limited resources and evolving threats, while emphasizing the importance of adapting CTI processes to meet these challenges. Overall, the findings reflect a growing recognition of the value of CTI in enhancing organizational security.