DSIB // DIRECTORY // CDT // REV 2026.09
CORE ENTERPRISE CAPABILITY
CYBER, DIGITAL & EMERGING TECHNOLOGY INTELLIGENCE
Strategic digital threat oversight, risk modelling and tech-horizon surveillance for investment firms navigating highly volatile and complex security landscapes.
CYBER THREAT STRATEGY. DIGITAL EXPOSURE. TECH VULNERABILITY.
PROTECTIVE AND REGULATED. OUR TECHNICAL INSIGHTS RELY SOLELY ON PERMISSIBLE OPEN SOURCE AND PERMITTED CLIENT DATA. WE PROHIBIT ILLEGAL PENETRATION, OFFENSIVE STRIKES, OR UNAUTHORISED SURVEILLANCE WITHIN ANY OPERATIONAL SCOPE.
01
MANDATE
02
SCOPE
03
MODULES
DSIB’s mandate for Cyber, Digital & Emerging Technology Intelligence is to provide defensive, external-source and advisory intelligence concerning cyber threats, digital exposure and frontier-technology risk.
We convert lawfully accessible technical signals—extracted from dark-web environments and observable threat-actor communications—into decision-ready intelligence for executive boards and institutional leadership across the organisation.
Functioning within precise legal constraints and utilising lawfully accessible external data and client-authorised insights, DSIB avoids internal systems, login details, private messaging or devices, and refrains from offensive cyber operations or law-enforcement activities.
TURNS FRAGMENTED TECHNICAL AND EXTERNAL THREAT SIGNALS INTO EXECUTIVE-LEVEL RISK INTELLIGENCE.
Transforms external cyber-threat activity, malicious infrastructure, digital exposure, vulnerability trends and observable threat-actor behaviour into decision-relevant intelligence and early warning for institutions operating across complex digital environments.
The capability combines lawful public, commercial and client-authorized information with structured threat analysis, exposure monitoring and escalation indicators to help authorized decision-makers identify material cyber developments, prioritize defensive action and maintain executive situational awareness without unauthorized access to systems or data.
Whilst working within authorised legal and technical frameworks, this function prioritises lawfully accessible public data, dark-web monitoring and commercial feeds; it never involves unauthorised intrusion into internal networks, hardware or communications.
INTELLIGENCE CAPABILITIES
01.01 CYBER THREAT LANDSCAPE ASSESSMENT
01.02 THREAT ACTOR AND CAMPAIGN INTELLIGENCE
01.03 MALWARE AND RANSOMWARE TREND INTELLIGENCE
01.04 EXTERNALLY OBSERVABLE ATTACK-INFRASTRUCTURE INTELLIGENCE
01.05 VULNERABILITY AND EXPLOIT-TREND INTELLIGENCE
01.06 SECTOR-SPECIFIC CYBER THREAT INTELLIGENCE
01.07 GEOGRAPHIC AND JURISDICTIONAL CYBER-RISK INTELLIGENCE
01.08 PUBLICLY OBSERVABLE THREAT-ACTOR COMMUNICATIONS INTELLIGENCE
01.09 CYBER EARLY-WARNING INDICATOR DEVELOPMENT
01.10 THREAT ESCALATION AND TRIGGER-POINT MONITORING
01.11 EMERGING CYBER CAMPAIGN AND TACTIC MONITORING
01.12 EXTERNAL DIGITAL-EXPOSURE SIGNAL CORRELATION
01.13 CYBER INCIDENT AND THREAT-TREND MONITORING
01.14 THREAT TRAJECTORY AND SCENARIO ANALYSIS
01.15 BUSINESS AND INSTITUTIONAL IMPACT INTELLIGENCE
01.16 EXECUTIVE AND BOARD-LEVEL CYBER THREAT BRIEFING
DSIB-CDT-01
CYBER THREAT
INTELLIGENCE
AND EARLY WARNING
Evaluates digital vulnerabilities stemming from tech partners, cloud systems, software integrations, outsourcing setups, key vendors and third-party networks where breaches or failures present significant institutional danger.
This function merges lawful open-source and client-authorised data with supplier profiling, systems mapping, external risk tracking and concentration audits to pinpoint critical third-party links, emerging supply-chain hazards and systemic fragility without unauthorised entry into external environments.
DSIB functions as an authorised external technical-intelligence unit, prioritising externally observable and client-supplied configuration markers, and does not access internal networks, credentials or live production environments.
INTELLIGENCE CAPABILITIES
02.01 THIRD-PARTY CYBER-RISK BASELINE ASSESSMENT
02.02 SUPPLIER AND TECHNOLOGY-ECOSYSTEM MAPPING
02.03 CRITICAL VENDOR AND SERVICE-PROVIDER DEPENDENCY ANALYSIS
02.04 EXTERNAL THIRD-PARTY DIGITAL-EXPOSURE INTELLIGENCE
02.05 SOFTWARE AND TECHNOLOGY SUPPLY-CHAIN RISK INTELLIGENCE
02.06 CLOUD AND SAAS DEPENDENCY-RISK INTELLIGENCE
02.07 THIRD-PARTY CONCENTRATION AND SINGLE-POINT-OF-FAILURE ANALYSIS
02.08 SUPPLIER CYBER-INCIDENT AND BREACH-HISTORY INTELLIGENCE
02.09 FOURTH-PARTY AND SUBCONTRACTOR DEPENDENCY INTELLIGENCE
02.10 THIRD-PARTY EXTERNAL ATTACK-SURFACE RISK INTELLIGENCE
02.11 SUPPLIER SECURITY-POSTURE AND EXPOSURE INDICATOR ANALYSIS
02.12 CRITICAL SOFTWARE AND PLATFORM-DEPENDENCY INTELLIGENCE
02.13 SUPPLY-CHAIN DISRUPTION AND CYBER-INCIDENT MONITORING
02.14 THIRD-PARTY RISK ESCALATION AND MATERIAL-CHANGE MONITORING
02.15 SUPPLY-CHAIN CYBER SCENARIO AND IMPACT ANALYSIS
02.16 EXECUTIVE THIRD-PARTY AND SUPPLY-CHAIN CYBER-RISK BRIEFING
DSIB-CDT-02
THIRD-PARTY
AND SUPPLY-CHAIN
CYBER RISK
Detects external digital exposure, impersonation tactics, fraudulent online personas, domain misuse, credential leaks and other indicators posing security, reputational, operational or executive risk to an organisation or authorised principal. This capability integrates lawful public, commercial and client-authorised data with footprint research, infrastructure analysis, identity-verification and constant monitoring to separate legitimate presence from hostile deception and enable proportionate legal, defensive and executive response.
Functioning as a proactive technical advisory service, this unit prioritises publicly observable and client-authorised external data, avoiding access to internal accounts, credentials, or devices.
INTELLIGENCE CAPABILITIES
03.01 EXTERNAL DIGITAL-EXPOSURE BASELINE ASSESSMENT
03.02 DOMAIN AND BRAND-IMPERSONATION INTELLIGENCE
03.03 PHISHING AND FRAUDULENT-DOMAIN EXPOSURE INTELLIGENCE
03.04 EXECUTIVE AND ORGANISATIONAL IMPERSONATION MONITORING
03.05 PUBLICLY EXPOSED CREDENTIAL-RISK INDICATOR INTELLIGENCE
03.06 SOCIAL-MEDIA AND DIGITAL-PRESENCE EXPOSURE ANALYSIS
03.07 FAKE ACCOUNT AND DECEPTIVE-PROFILE INTELLIGENCE
03.08 EXTERNALLY OBSERVABLE ASSET AND PRESENCE MAPPING
03.09 BRAND-ABUSE AND DIGITAL-MISUSE TREND INTELLIGENCE
03.10 DIGITAL-IDENTITY AND REPUTATIONAL-EXPOSURE MONITORING
03.11 DOMAIN REGISTRATION AND LOOKALIKE-INFRASTRUCTURE ANALYSIS
03.12 PUBLICLY OBSERVABLE THREAT-COMMUNICATIONS INTELLIGENCE
03.13 IMPERSONATION CAMPAIGN AND ACTOR-PATTERN ANALYSIS
03.14 DIGITAL-EXPOSURE ESCALATION AND MATERIAL-CHANGE MONITORING
03.15 EXECUTIVE DIGITAL-EXPOSURE SCENARIO AND IMPACT ANALYSIS
03.16 EXECUTIVE AND BOARD-LEVEL DIGITAL-EXPOSURE BRIEFING
DSIB-CDT-03
DIGITAL EXPOSURE
AND IMPERSONATION
INTELLIGENCE
Evaluates how cloud frameworks, data residency, tech providers, transnational links, regulatory mandates, and infrastructure density impact institutional oversight, durability, and risk exposure across varied digital terrains.
This function integrates lawful open-source, market, and client-authorised data with provider mapping, regional analysis, dependency scouting, and external vigils to pinpoint significant cloud, data-sovereignty, and digital-robustness risks without performing any unauthorised entry into client or vendor environments.
Functioning as a technical horizon-scanning tool, this unit deals with client-supplied architectural details, externally observable configuration markers and provider links, without accessing live production datasets or internalised system networks.
INTELLIGENCE CAPABILITIES
04.01 DATA-SOVEREIGNTY AND JURISDICTIONAL-RISK ASSESSMENT
04.02 CLOUD SERVICE-PROVIDER DEPENDENCY INTELLIGENCE
04.03 DATA-RESIDENCY AND CROSS-BORDER EXPOSURE ANALYSIS
04.04 CLOUD CONCENTRATION AND SINGLE-POINT-OF-FAILURE INTELLIGENCE
04.05 THIRD-PARTY CLOUD AND PLATFORM-DEPENDENCY MAPPING
04.06 REGULATORY AND POLICY-ENVIRONMENT INTELLIGENCE FOR DATA HOSTING
04.07 EXTERNALLY OBSERVABLE CLOUD-CONFIGURATION RISK INDICATORS
04.08 CRITICAL DATA-SERVICE AND INFRASTRUCTURE DEPENDENCY ANALYSIS
04.09 CLOUD OUTAGE AND SERVICE-DISRUPTION INTELLIGENCE
04.10 DATA-SERVICE CONTINUITY AND RESILIENCE RISK INTELLIGENCE
04.11 JURISDICTIONAL CHANGE AND DATA-GOVERNANCE MONITORING
04.12 CLOUD SUPPLIER MATERIAL-CHANGE AND INCIDENT MONITORING
04.13 CROSS-BORDER DATA-RISK SCENARIO AND IMPACT ANALYSIS
04.14 CLOUD AND DATA-SOVEREIGNTY EARLY-WARNING INDICATOR DEVELOPMENT
04.15 EXECUTIVE CLOUD-DEPENDENCY AND DATA-RISK INTELLIGENCE
04.16 BOARD-LEVEL DATA-SOVEREIGNTY AND CLOUD-RISK BRIEFING
DSIB-CDT-04
DATA SOVEREIGNTY
AND CLOUD-RISK
INTELLIGENCE
Evaluates artificial intelligence, superior computing, automation and other novel technologies through the integrated lens of strategic reliance, supplier exposure, governance, security, adoption risk and swiftly progressing technological potential.
The service unites lawful public, commercial and client-authorised insight with sector landscape analysis, provider and ownership research, dependency mapping and risk oversight to assist organisations in understanding material prospects, vulnerabilities, concentration risks and external dependencies without unauthorised access to systems, models or proprietary data.
DSIB maps the collision of frontier technology and geopolitical reality, providing authorised leadership with the technical decision support required to navigate future digital environments before they become operational threats.
INTELLIGENCE CAPABILITIES
05.01 ARTIFICIAL-INTELLIGENCE THREAT AND OPPORTUNITY LANDSCAPE ASSESSMENT
05.02 AI MODEL, PLATFORM AND PROVIDER ECOSYSTEM INTELLIGENCE
05.03 GENERATIVE-AI RISK AND EXPOSURE INTELLIGENCE
05.04 AI SUPPLY-CHAIN AND TECHNOLOGY-DEPENDENCY ANALYSIS
05.05 EMERGING-TECHNOLOGY HORIZON-SCANNING AND FORESIGHT
05.06 AI GOVERNANCE, REGULATORY AND POLICY-ENVIRONMENT INTELLIGENCE
05.07 MODEL CONCENTRATION AND PROVIDER-DEPENDENCY RISK INTELLIGENCE
05.08 AI-ENABLED THREAT-ACTOR AND MISUSE-TREND INTELLIGENCE
05.09 DEEPFAKE AND SYNTHETIC-MEDIA RISK INTELLIGENCE
05.10 AI-DRIVEN IMPERSONATION AND DECEPTION-TREND INTELLIGENCE
05.11 EMERGING COMPUTE AND INFRASTRUCTURE-DEPENDENCY INTELLIGENCE
05.12 FRONTIER-TECHNOLOGY MARKET AND COMPETITOR INTELLIGENCE
05.13 AI INCIDENT, FAILURE-MODE AND SAFETY-TREND INTELLIGENCE
05.14 EMERGING-TECHNOLOGY EARLY-WARNING INDICATOR DEVELOPMENT
05.15 AI AND FRONTIER-TECHNOLOGY SCENARIO AND IMPACT ANALYSIS
05.16 EXECUTIVE AND BOARD-LEVEL AI AND EMERGING-TECHNOLOGY BRIEFING
DSIB-CDT-05
AI AND
EMERGING-TECHNOLOGY
INTELLIGENCE
Delivers decision-support intelligence through ransomware events, significant cyber disruption, destructive assaults and further high-consequence digital crises where technical incidents require translation into operational, executive and institutional risk.
The capability integrates lawful public, commercial and client-authorised information with threat-actor analysis, incident-context monitoring, third-party dependency assessment and crisis intelligence to aid situational awareness, escalation decisions, continuity priorities and executive coordination without conducting unauthorised access, intrusion or offensive cyber operations.
Functioning as a bespoke technical-evaluation unit, this module prioritises outside signals, client-authorised data and strategic intelligence, and does not perform arbitration, hostile activities or law-enforcement programmes.
INTELLIGENCE CAPABILITIES
06.01 CYBER CRISIS SITUATION ASSESSMENT
06.02 RANSOMWARE THREAT-ACTOR AND CAMPAIGN INTELLIGENCE
06.03 RANSOMWARE ECOSYSTEM AND AFFILIATE-NETWORK INTELLIGENCE
06.04 EXTORTION AND DATA-LEAK ENVIRONMENT INTELLIGENCE
06.05 INCIDENT-SPECIFIC THREAT ACTOR AND INTENT ASSESSMENT
06.06 EXTERNAL COMPROMISE AND EXPOSURE INDICATOR INTELLIGENCE
06.07 CYBER CRISIS STAKEHOLDER AND DEPENDENCY MAPPING
06.08 CYBER INCIDENT SCENARIO AND ESCALATION ANALYSIS
06.09 CRISIS INDICATOR AND ESCALATION MONITORING
06.10 BUSINESS AND OPERATIONAL IMPACT INTELLIGENCE
06.11 INCIDENT AND RESPONSE CHRONOLOGY RESEARCH
06.12 POST-INCIDENT REVIEW AND LESSONS-LEARNED INTELLIGENCE
06.13 RANSOMWARE TREND AND TACTIC MONITORING
06.14 CRITICAL-SERVICE AND THIRD-PARTY IMPACT INTELLIGENCE
06.15 CYBER CRISIS DECISION-IMPACT AND RESPONSE-OPTION ANALYSIS
06.16 EXECUTIVE AND BOARD-LEVEL CYBER CRISIS BRIEFING
DSIB-CDT-06
CYBER CRISIS
AND RANSOMWARE
INTELLIGENCE
Analyses technical hazards within blockchain frameworks, crypto-assets, decentralised-finance networks and relevant infrastructure impacting institutional and sovereign exposure.
Operating as an authorised technical horizon-scanning capability, this module focuses on publicly observable blockchain and protocol-level indicators, and does not conduct unauthorised access, on-chain manipulation or transaction execution.
INTELLIGENCE CAPABILITIES
07.01 DECENTRALISED ECOSYSTEM THREAT LANDSCAPE ASSESSMENT
07.02 ON-CHAIN AND PROTOCOL-LEVEL RISK INTELLIGENCE
07.03 CRYPTO-ASSET AND TOKEN-ECONOMICS RISK INTELLIGENCE
07.04 MARKET, LIQUIDITY AND VOLATILITY-RISK INTELLIGENCE
07.05 DIGITAL-ASSET ECOSYSTEM AND COUNTERPARTY INTELLIGENCE
07.06 PROTOCOL GOVERNANCE AND CONTROL-CONCENTRATION INTELLIGENCE
07.07 SMART-CONTRACT AND PROTOCOL-DEPENDENCY RISK INTELLIGENCE
07.08 PUBLIC BLOCKCHAIN EXPOSURE AND NETWORK-RISK INTELLIGENCE
07.09 STAKING AND PROTOCOL CONCENTRATION RISK
07.10 CROSS-CHAIN AND BRIDGE-DEPENDENCY RISK INTELLIGENCE
07.11 PROTOCOL INCIDENT AND FAILURE-MODE INTELLIGENCE
07.12 REGULATORY AND POLICY-ENVIRONMENT INTELLIGENCE FOR CRYPTO-ASSETS
07.13 DIGITAL-ASSET FRAUD AND SCAM-TREND INTELLIGENCE
07.14 CRYPTO-ECOSYSTEM EARLY-WARNING INDICATOR DEVELOPMENT
07.15 DECENTRALISED-FINANCE RISK SCENARIO AND IMPACT ANALYSIS
07.16 EXECUTIVE AND BOARD-LEVEL CRYPTO-ASSET RISK BRIEFING
DSIB-CDT-07
CRYPTO-ASSET
AND DECENTRALISED
THREAT INTELLIGENCE
Establishes a consistent cyber-intelligence operating model that synchronises surveillance, analytical needs, formal assessment, notification, quality assurance and executive reporting into a robust institutional cycle designed for the client’s bespoke risk profile.
This function enables the architectural design and evolution of cyber-intelligence programmes through governance, process workflows, rigorous standards, reporting tiers, early-warning systems and sustainable analyst backing while maintaining the client’s legal, technical and operational obligations.
Functioning as an authorised advisory unit, this module prioritises intelligence operating-model design and governance without managing live security operations centres or active incident-response programmes for clients.
INTELLIGENCE CAPABILITIES
08.01 CYBER INTELLIGENCE OPERATING-MODEL DESIGN
08.02 PRIORITY INTELLIGENCE REQUIREMENTS FRAMEWORK DEVELOPMENT
08.03 CYBER INTELLIGENCE GOVERNANCE AND REPORTING DESIGN
08.04 ASSESSMENT CADENCE AND METHODOLOGY DESIGN
08.05 CYBER INTELLIGENCE COLLECTION-REQUIREMENT FRAMEWORK DESIGN
08.06 CYBER THREAT-PRIORITISATION AND ESCALATION-MODEL DESIGN
08.07 CYBER INTELLIGENCE QUALITY-ASSURANCE FRAMEWORK DEVELOPMENT
08.08 CYBER INTELLIGENCE STAKEHOLDER AND DECISION-SUPPORT MAPPING
08.09 CYBER INTELLIGENCE WORKFLOW AND PROCESS DESIGN
08.10 ANALYTIC TRADECRAFT AND ASSESSMENT-STANDARD DEVELOPMENT
08.11 CYBER INTELLIGENCE INDICATOR AND WARNING-FRAMEWORK DESIGN
08.12 EXECUTIVE CYBER-INTELLIGENCE REPORTING FRAMEWORK DEVELOPMENT
08.13 CYBER INTELLIGENCE TEAM ROLE AND RESPONSIBILITY DESIGN
08.14 CYBER INTELLIGENCE MATURITY AND CAPABILITY-GAP ASSESSMENT
08.15 CYBER INTELLIGENCE TRAINING AND ANALYST-DEVELOPMENT SUPPORT
08.16 CYBER INTELLIGENCE CENTRE IMPLEMENTATION ROADMAP DEVELOPMENT
DSIB-CDT-08