Organizations seeking to integrate intelligence into their security and risk strategies are often tasked with navigating a vendor landscape that can seem opaque at best and convoluted at worst. The purpose of intelligence is not to detect the existence of threats, nor is it to collect indicators of compromise (IoCs) or keyword alerts. The most relevant data sources typically exist within the Deep & Dark Web (DDW) not the open web. The true ROI of any intelligence ultimately depends on the extent to which it supports the needs of the organization consuming it.”]
Source: https://www.csoonline.com/article/3241227/how-do-we-measure-the-value-of-intelligence.html