Cyber Threat & Digital Risk Intelligence / Sources
Evidence-based decision support
Original evidence comes before conclusions
What publicly reported incident facts are corroborated and material?
Priority source classes
- regulator breach notice
- issuer 8-K
- vendor incident statement
| Named source | Use case | Limitations |
|---|---|---|
| NIST AI risk management framework | regulator breach notice | Confirm identity, recency, original status and completeness before reliance. |
| Kroll investigations & diligence services | issuer 8-K | Confirm identity, recency, original status and completeness before reliance. |
Verification and negative evidence
- Confirm publication timestamp versus underlying record effective date.
- Do not infer no adverse record from an unsuccessful search; document search spelling and access.
- Use independent original records when a single platform aggregates primary material.
- Store source URL, date read, exact excerpt, jurisdiction and access constraints.
- Test at least one plausible contradictory hypothesis.