SANS 2025 Cyber Threat Intelligence Survey Findings

The SANS 2025 Cyber Threat Intelligence (CTI) Survey presents key findings from a comprehensive analysis of the evolving landscape of cyber threat intelligence. This report highlights the increasing establishment of dedicated CTI teams within organizations, with 52% of respondents indicating they have such teams, marking a 10 percentage point increase since 2018. The survey reveals that 70.2% of participants believe that the complexity of the digital landscape is driving changes in their CTI processes. Additionally, more than one-third of organizations are now integrating artificial intelligence into their CTI workflows. The report emphasizes the importance of communication, with 80% of respondents using reports to convey intelligence. The findings also indicate a shift towards automation in CTI processes, with many organizations moving from manual to automated threat data ingestion and incident response. The survey collected responses from 489 CTI professionals across various industries, providing a demographic snapshot that reflects the diverse roles and organizational sizes involved in cyber threat intelligence.