Evidence AssistantBank compliance

Assurance

Overview
Controls
15
Evidence
Policy check
Change impact
4

Regulator

Exam readiness
BSP self-assessment
Evidence packs
Regulations

Intelligence

Ask
AI register

Platform

Connectors
Trust and audit

Northgate Union BankFictional bank · synthetic data

Powered by Mesh API

Overview
Controls
ID-04

Local only · nothing leaves the bank

Search

Jump to a page or a control

Identify · Managed tier · Security Operations

ID-04Threat intelligence is received and shared

The bank receives threat intelligence, acts on matches, and shares indicators with peers.

Ask about it Open in pack

Status

Partial evidence

1 item is past the freshness limit.

Exposure

Medium

1 evidence items from 1 sources

CCSA · Identify

Below Foundational

Not blocking this domain's next tier.

Evidence chain

Every item is read-only, dated, hashed and re-runnable. This is what an examiner can test.

CrowdStrike

ev-id04-1

Four intelligence feeds active; indicators shared with the sector group

CrowdStrike Falcon · telemetry · collected 38 days ago (Sep 7, 2026 · 17:02 UTC) · limit 30 days

SupportsStale

Query: GET /intel/combined/indicators/v1?filter=last_updated:>'now-30d'
Identity: api-client assurance-ro (OAuth2, READ scopes)
Collector: falcon-collector 3.1.0
Window: 720 h
Records: 37
SHA-256: 055ebae704b0f1e001fc8ea6cbf697917387a8914dbae7340d22d711696f953d

Maps to

One control, collected once, counted in 3 frameworks.

BSPCirc. 982
Threat intelligence and information sharing
NIST CSFID.RA-02
Threat intelligence received
ISO 27001A.5.7
Threat intelligence

Pack narratives

BSPNot drafted NIST CSFNot drafted ISO 27001Not drafted

Requirement text is our paraphrase. Each bank loads its own licensed PCI DSS and ISO text.