Cyber Intelligence-Driven Risk: How to Build and Use Cyber Intelligence for Business Risk Decisions

Cybersecurity information matters most when it can inform a real business decision. In Cyber Intelligence-Driven Risk, Richard O. Moore III lays out a framework for connecting cyber intelligence with the risk conversations and choices made across an organization—not leaving it isolated as technical reporting for security teams.

The book introduces the Cyber Intelligence–Driven Risk (CI-DR) methodology and considers how organizations can build, buy, or outsource the capabilities needed to put it to work. Its emphasis is on the links between people, functions, and business risk, rather than on choosing particular technology vendors.

From intelligence to business risk decisions

Moore draws on military intelligence concepts to explain how cyber information can be organized and used in a commercial setting. The central concern is practical: how can leaders receive useful interpretations of cyber risk and bring them into enterprise and operational risk management?

A framework made up of connected capabilities

Across 12 chapters, the book develops the program from its objectives and business rationale through its components, functions, collection needs, and stakeholders. It gives focused attention to capabilities including security operations, cyber threat intelligence, forensic teams, vulnerability management, and incident response.

That structure makes the book useful for readers considering how these functions relate to one another—not simply how each operates on its own. The chapters also address the role of cyber intelligence in organizational risk decisions and mergers and acquisitions.

Who may find it useful

Cybersecurity professionals and business leaders will find a framework for thinking about how intelligence can support risk decisions. The book may also interest software architects, M&A teams, researchers, academics, and students exploring cybersecurity programs and enterprise risk management.

A business-facing view of cybersecurity

Rather than centering the discussion on specific products, Moore focuses on organizational capabilities and the connections that help turn cyber knowledge into decision support. For readers looking to bring security considerations into broader business risk discussions, this book offers a structured introduction to the CI-DR approach.