# PM-16 — Threat Awareness Program

- **Control ID:** PM-16
- **Family:** [PM](/md/families/PM.md)
- **Baselines:** No content available.
- **Enhancement of:** No content available.

## Description

Implement a threat awareness program that includes a cross-organization information-sharing capability for threat intelligence.

## Discussion

Because of the constantly changing and increasing sophistication of adversaries, especially the advanced persistent threat (APT), it may be more likely that adversaries can successfully breach or compromise organizational systems. One of the best techniques to address this concern is for organizations to share threat information, including threat events (i.e., tactics, techniques, and procedures) that organizations have experienced, mitigations that organizations have found are effective against certain types of threats, and threat intelligence (i.e., indications and warnings about threats). Threat information sharing may be bilateral or multilateral. Bilateral threat sharing includes government-to-commercial and government-to-government cooperatives. Multilateral threat sharing includes organizations taking part in threat-sharing consortia. Threat information may require special agreements and protection, or it may be freely shared.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

- [DE.AE-03](/md/csf/DE.AE-03.md) — Information is correlated from multiple sources
- [DE.AE-06](/md/csf/DE.AE-06.md) — Information on adverse events is provided to authorized staff and tools
- [DE.AE-07](/md/csf/DE.AE-07.md) — Cyber threat intelligence and other contextual information are integrated into the analysis
- [ID.RA-02](/md/csf/ID.RA-02.md) — Cyber threat intelligence is received from information sharing forums and sources
- [ID.RA-03](/md/csf/ID.RA-03.md) — Internal and external threats to the organization are identified and recorded
- [ID.RA-05](/md/csf/ID.RA-05.md) — Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization

## Related controls

- [IR-4](/md/controls/IR-4.md)
- [PM-12](/md/controls/PM-12.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.