Risk intelligence for people who answer to boards
A client once asked me a question. I gave a long, careful, well-qualified answer. The political one.
He cut me off: "So that's a no then?"
He had to brief his board the next morning. He didn't need my nuance. He needed the call.
That exchange is the reason this exists.
Who this is for
The State of the Threat is a weekly brief for the executive who has to answer to the board. The one asking, What am I missing?
Most risk intelligence is written for the technical people. That's fine. The technical people need it. But somewhere between the threat feed and the CFO, the translation breaks down. Boards don't speak CVSS or OFAC or Incoterms. They speak risk, revenue, and reputation.
Every week, I connect the dots on the forces outside your control. Wars, state actors, regulatory shifts, supply chain cascades, energy markets, undersea cables. Then I tell you what they mean for the business you're protecting.
What it isn't
Not a technical brief. Not a deep dive. Not a CVE dump.
Plenty of places cover IOCs well. This isn't one of them. If you need to walk into a board meeting knowing what matters, stay here.
What to do with it
Subscribe. Never walk into Monday not knowing what you don't know.
Forward it to the board member, CFO, or colleague who needs to see the same picture you do.
Follow or engage on LinkedIn (opens in new tab). More about the author and his published work: David Tortora →
One intelligence shop. Three perspectives.
State of the Threat identifies the risk. State of the Attack shows the mechanism. State of the Defense shows why defenses fail.
Same intelligence pipeline. Same source list. Same author. Different audience, different depth, different question answered. The threat brief tells you what's coming. The attack analysis shows you what it looks like when it arrives. The defense case study shows you why the controls that should have been there weren't.