CREST Registered Threat Intelligence Analyst (CRTIA)
About This Course
The CREST Registered Threat Intelligence Analyst (CRTIA) course is an intensive three-day programme designed to develop high-readiness capabilities in intelligence gathering and threat analysis. Directly aligned with the CREST CRTIA technical syllabus, this course trains security analysts in the tradecraft required to direct, gather, analyze, contextualize, and distribute intelligence that counters sophisticated cyber adversaries.
The curriculum focuses extensively on cybersecurity, behavioural analysis and predictive screening, and research and information synthesis across its domains:
• Core Foundations & Threat Actor Profiling: Deploying behavioural analysis to deconstruct motivations, intent, and adversary attack lifecycles.
• Direction & Requirements Scoping: Converting stakeholder requirements into prioritized intelligence-gathering strategies.
• Information Gathering and Analysis: Collecting and analysing technical data from various sources (DNS, WHOIS, leaked credentials) to obtain insights for security activities.
• Structured Analytical Methods: Utilizing the Diamond Model and Analysis of Competing Hypotheses (ACH) to integrate findings into recommendations and guide decision-making.
• Intelligence Dissemination & Sharing Initiatives: Formatting finished intelligence reports and machine-readable feeds (TLP, ISACs).
• Professional Standards & Compliance: Operating within statutory guidelines, surveillance boundaries, and professional codes of conduct.
• Technical Threat Analysis: Inspecting adversary communication channels and intrusion vectors to mitigate security threats.
Through guided case studies, structured labs, and knowledge assessments, learners gain practical proficiency in delivering intelligence that drives proactive threat hunting and intelligence-led adversary simulations.
What You'll Learn
• Conduct Research and Information Synthesis: Identify, source, and interpret information from various sources to gain deep understanding of specific threats, identify patterns, uncover insights, integrate findings into recommendations, and guide decision-making.
• Apply Behavioural Analysis and Predictive Screening: Mitigate security threats by deploying behavioural analysis and predictive screening techniques to map adversary TTPs, reconstruct attack lifecycles, and project future behaviors.
• Enhance Cybersecurity Posture: Develop awareness of cybersecurity threats and apply intelligence to protect against risks and vulnerabilities while responding to adversary campaigns.
• Package and Disseminate Intelligence: Produce clear strategic, tactical, and operational-level intelligence reports adhering to the Traffic Light Protocol (TLP).
• Support Regulator-Mandated Intelligence Schemes: Align deliverables and threat scenario modeling with mandated regulatory frameworks (e.g., CBEST, TIBER-EU, STAR-FS).
• Uphold Professional Compliance: Apply the CREST Code of Conduct, intellectual property rights, and computer misuse laws throughout all intelligence operations.
Entry Requirements
At least 2 years of working experience in cybersecurity, intelligence analysis, security operations, incident response, vulnerability management, risk management, or related technology functions
Foundational understanding of cyber threats, attack methodologies and cybersecurity concepts
Familiarity with research, information gathering, analysis or reporting activities
Ability to analyse information from multiple sources and communicate key findings effectively
Working proficiency in Microsoft Office applications (Word, Excel, PowerPoint)
Ability to speak, listen, read and write English at a proficiency level equivalent to the Employability Skills Workforce Skills Qualification (ES WSQ) Workplace Literacy (WPL) Level 6