Which practice is most closely related to threat intelligence?

The practice closely related to threat intelligence is gathering information on potential threats. This is because threat intelligence involves the collection, analysis, and dissemination of information regarding potential or current threats to an organization’s security. It encompasses understanding the tactics, techniques, and procedures used by threat actors, as well as knowing the types of vulnerabilities that may be exploited.

Effective threat intelligence helps organizations anticipate and prepare for potential security incidents by providing context and understanding of emerging threats. By focusing on gathering pertinent information, security teams can assess risks more effectively and make informed decisions about how to protect their assets and respond to incidents.

The other options involve important aspects of security management, such as monitoring system configurations and implementing user training, but they do not directly pertain to the collection and analysis of threat information. Assessing employee performance is related more to human resources rather than security practices. Thus, gathering information on potential threats is the core activity that exists at the heart of threat intelligence.