--- title: MM-ISAC Blog | Guidence description: Guidence | MM-ISAC's blog with industry news, threat intelligence, guidence and more --- [Skip to the main content.](https://mmisac.org/mm-isac-blog/tag/guidence#main-content) [![Mining and Metals Logo without wording](https://mmisac.org/hubfs/Mining%20and%20Metals%20Logo%20without%20wording.svg "Mining and Metals Logo without wording")](https://mmisac.org?hsLang=en) [![Mining and Metals Logo](https://mmisac.org/hs-fs/hubfs/Mining%20and%20Metals%20Logo.jpg?width=14572&height=7199&name=Mining%20and%20Metals%20Logo.jpg "Mining and Metals Logo")](https://mmisac.org?hsLang=en) - [Home](https://mmisac.org) - [About MM-ISAC](https://mmisac.org/about) - [Membership](https://mmisac.org/membership) - [Partnership](https://mmisac.org/partnership) - Programs - [Supply Chain Resilience](https://mmisac.org/supply-chain-resilience) - [Working Groups](https://mmisac.org/working-groups) - [Events](https://mmisac.org/events) - [MM-ISAC Annual Conference](https://mmisac.org/conference_2026) - [MM-ISAC Blog](https://mmisac.org/mm-isac-blog) - [Contact Us](https://mmisac.org/contact-us) - [Member Portal](https://mm-isac.cyware.com/webapp/auth/login/) Search Toggle Menu Search Toggle Menu - [Home](https://mmisac.org) - [About MM-ISAC](https://mmisac.org/about) - [Membership](https://mmisac.org/membership) - [Partnership](https://mmisac.org/partnership) - Programs - [Supply Chain Resilience](https://mmisac.org/supply-chain-resilience) - [Working Groups](https://mmisac.org/working-groups) - [Events](https://mmisac.org/events) - [MM-ISAC Annual Conference](https://mmisac.org/conference_2026) - [MM-ISAC Blog](https://mmisac.org/mm-isac-blog) - [Contact Us](https://mmisac.org/contact-us) - [Member Portal](https://mm-isac.cyware.com/webapp/auth/login/) [Facebook](https://mmisac.org/mm-isac-blog/tag/guidence#0) [Instagram](https://mmisac.org/mm-isac-blog/tag/guidence#0) [Linkedin](https://www.linkedin.com/company/mmisac/) [X](https://mmisac.org/mm-isac-blog/tag/guidence#0) [YouTube](https://mmisac.org/mm-isac-blog/tag/guidence#0) [Medium](https://mmisac.org/mm-isac-blog/tag/guidence#0) # MM-ISAC Blog #### Digging into cyber resilience in mining and metals. Filter by Tag Show All Architecture Awards Budget Critical Minerals Diversity FAIR Guidance Guidence Hermeneutics Incident Response Mental Health Metrics OT Partnerships Phishing Press Release Resiliency Risk Quantification Threat Intelligence Training Women in Security ### Guidence [![](https://mmisac.org/hs-fs/hubfs/Planning%20P.jpg?width=602&height=505&name=Planning%20P.jpg)](https://mmisac.org/mm-isac-blog/effective-incident-response-starts-long-before-the-incident) 3 min read #### [Effective Incident Response Starts Long Before the Incident](https://mmisac.org/mm-isac-blog/effective-incident-response-starts-long-before-the-incident) ![Picture of Rob Labbé](https://mmisac.org/hubfs/AGC_Speakers/ROBL%20WebSpeaker2.svg) [Rob Labbé](https://mmisac.org/mm-isac-blog/author/rob-labbé): Dec 5, 2025, 1:35:29 AM Cyber incident response is often viewed as a technical domain, with practitioners skilled in malware reverse engineering, network and host forensics,... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Incident Response](https://mmisac.org/mm-isac-blog/tag/incident-response) [Resiliency](https://mmisac.org/mm-isac-blog/tag/resiliency) [Training](https://mmisac.org/mm-isac-blog/tag/training) [Read More](https://mmisac.org/mm-isac-blog/effective-incident-response-starts-long-before-the-incident) [![](https://mmisac.org/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20sleek%20modern%20office%20environment%20with%20large%20windows%20allowing%20natural%20light%20to%20flood%20the%20space%20In%20the%20foreground%20a%20diverse%20group%20of-1.png?width=1024&height=1024&name=The%20image%20depicts%20a%20sleek%20modern%20office%20environment%20with%20large%20windows%20allowing%20natural%20light%20to%20flood%20the%20space%20In%20the%20foreground%20a%20diverse%20group%20of-1.png)](https://mmisac.org/mm-isac-blog/moving-to-security-cost-as-a-metric) 7 min read #### [Moving to Security Cost as a Metric](https://mmisac.org/mm-isac-blog/moving-to-security-cost-as-a-metric) ![Picture of Rob Labbé](https://mmisac.org/hubfs/AGC_Speakers/ROBL%20WebSpeaker2.svg) [Rob Labbé](https://mmisac.org/mm-isac-blog/author/rob-labbé): Nov 10, 2025, 9:23:46 PM I’ve talked about security cost as the key metric to report on your security program when working with executives and the board. What we have not... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Metrics](https://mmisac.org/mm-isac-blog/tag/metrics) [Risk Quantification](https://mmisac.org/mm-isac-blog/tag/risk-quantification) [FAIR](https://mmisac.org/mm-isac-blog/tag/fair) [Read More](https://mmisac.org/mm-isac-blog/moving-to-security-cost-as-a-metric) [![](https://mmisac.org/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20features%20a%20dimly%20lit%20room%20filled%20with%20multiple%20computer%20screens%20each%20displaying%20various%20lines%20of%20code%20and%20cybersecurity%20data%20In%20the%20foregrou-1.png?width=1024&height=1024&name=The%20image%20features%20a%20dimly%20lit%20room%20filled%20with%20multiple%20computer%20screens%20each%20displaying%20various%20lines%20of%20code%20and%20cybersecurity%20data%20In%20the%20foregrou-1.png)](https://mmisac.org/mm-isac-blog/a-cautionary-note-on-sensationalism-in-cyber-security-headlines) 1 min read #### [A Cautionary Note on Sensationalism in Cyber Security Headlines](https://mmisac.org/mm-isac-blog/a-cautionary-note-on-sensationalism-in-cyber-security-headlines) ![Picture of Cherie Burgett](https://mmisac.org/hs-fs/hubfs/Partner%20Logos/Professional%20Photos/CherieB-Test.png?width=30&name=CherieB-Test.png) [Cherie Burgett](https://mmisac.org/mm-isac-blog/author/cherie-burgett): Sep 8, 2025, 12:00:00 AM This month’s focus is on the importance of double-checking the work of security researchers and headlines. We live in a fast-paced news cycle and a... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Threat Intelligence](https://mmisac.org/mm-isac-blog/tag/threat-intelligence) [Read More](https://mmisac.org/mm-isac-blog/a-cautionary-note-on-sensationalism-in-cyber-security-headlines) [![](https://mmisac.org/hs-fs/hubfs/1755021026478.png?width=1280&height=720&name=1755021026478.png)](https://mmisac.org/mm-isac-blog/phishing-education-maybe-best-practice-is-not-best-after-all) 2 min read #### [Phishing Education - Maybe 'Best Practice' is not Best After all](https://mmisac.org/mm-isac-blog/phishing-education-maybe-best-practice-is-not-best-after-all) ![Picture of Rob Labbé](https://mmisac.org/hubfs/AGC_Speakers/ROBL%20WebSpeaker2.svg) [Rob Labbé](https://mmisac.org/mm-isac-blog/author/rob-labbé): Aug 12, 2025, 12:00:00 AM As security practitioners and leaders, we must contribute to the professionalization of our field by searching out data and evidence-based solutions... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Resiliency](https://mmisac.org/mm-isac-blog/tag/resiliency) [Phishing](https://mmisac.org/mm-isac-blog/tag/phishing) [Training](https://mmisac.org/mm-isac-blog/tag/training) [Mental Health](https://mmisac.org/mm-isac-blog/tag/mental-health) [Read More](https://mmisac.org/mm-isac-blog/phishing-education-maybe-best-practice-is-not-best-after-all) [![](https://mmisac.org/hubfs/Mining%20and%20Metals%20Logo%20without%20wording.svg)](https://mmisac.org/mm-isac-blog/moral-frameworks-in-cti-and-high-stakes-communications) 2 min read #### [Moral Frameworks in CTI and High-Stakes Communications](https://mmisac.org/mm-isac-blog/moral-frameworks-in-cti-and-high-stakes-communications) ![Picture of Cherie Burgett](https://mmisac.org/hs-fs/hubfs/Partner%20Logos/Professional%20Photos/CherieB-Test.png?width=30&name=CherieB-Test.png) [Cherie Burgett](https://mmisac.org/mm-isac-blog/author/cherie-burgett): Aug 11, 2025, 12:00:00 AM We live in very polarizing times, particularly in the US. We choose our words carefully, tiptoe around topics that might devolve into argumentation... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Hermeneutics](https://mmisac.org/mm-isac-blog/tag/hermeneutics) [Threat Intelligence](https://mmisac.org/mm-isac-blog/tag/threat-intelligence) [Read More](https://mmisac.org/mm-isac-blog/moral-frameworks-in-cti-and-high-stakes-communications) [![](https://mmisac.org/hs-fs/hubfs/1749149623392.png?width=1024&height=576&name=1749149623392.png)](https://mmisac.org/mm-isac-blog/precision-vs-accuracy-when-predicting-security-cost) 3 min read #### [Precision vs Accuracy When Predicting Security Cost](https://mmisac.org/mm-isac-blog/precision-vs-accuracy-when-predicting-security-cost) ![Picture of Rob Labbé](https://mmisac.org/hubfs/AGC_Speakers/ROBL%20WebSpeaker2.svg) [Rob Labbé](https://mmisac.org/mm-isac-blog/author/rob-labbé): Jun 5, 2025, 12:00:00 AM As I talk through the practical application of the security cost framework with our members, we are consistently running into a common stumbling... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Metrics](https://mmisac.org/mm-isac-blog/tag/metrics) [Risk Quantification](https://mmisac.org/mm-isac-blog/tag/risk-quantification) [Budget](https://mmisac.org/mm-isac-blog/tag/budget) [FAIR](https://mmisac.org/mm-isac-blog/tag/fair) [Read More](https://mmisac.org/mm-isac-blog/precision-vs-accuracy-when-predicting-security-cost) [![](https://mmisac.org/hubfs/Mining%20and%20Metals%20Logo%20without%20wording.svg)](https://mmisac.org/mm-isac-blog/guide-to-traffic-light-protocol-tlp) 4 min read #### [Guide to Traffic Light Protocol (TLP)](https://mmisac.org/mm-isac-blog/guide-to-traffic-light-protocol-tlp) ![Picture of Cherie Burgett](https://mmisac.org/hs-fs/hubfs/Partner%20Logos/Professional%20Photos/CherieB-Test.png?width=30&name=CherieB-Test.png) [Cherie Burgett](https://mmisac.org/mm-isac-blog/author/cherie-burgett): Apr 15, 2025, 12:00:00 AM Key Points: TLP is a Sharing Protocol. Companies that do not share threat information are at a disadvantage. Overclassification stifles sharing... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Threat Intelligence](https://mmisac.org/mm-isac-blog/tag/threat-intelligence) [Read More](https://mmisac.org/mm-isac-blog/guide-to-traffic-light-protocol-tlp) [![](https://mmisac.org/hs-fs/hubfs/1741482178116.png?width=1280&height=720&name=1741482178116.png)](https://mmisac.org/mm-isac-blog/building-a-phishing-program) 3 min read #### [Building a Phishing Program](https://mmisac.org/mm-isac-blog/building-a-phishing-program) ![Picture of Rob Labbé](https://mmisac.org/hubfs/AGC_Speakers/ROBL%20WebSpeaker2.svg) [Rob Labbé](https://mmisac.org/mm-isac-blog/author/rob-labbé): Mar 8, 2025, 12:00:00 AM Phishing is a significant compromise vector for all companies in all industries. At theMining and Metals ISAC annual conference in November, we... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Incident Response](https://mmisac.org/mm-isac-blog/tag/incident-response) [Phishing](https://mmisac.org/mm-isac-blog/tag/phishing) [Read More](https://mmisac.org/mm-isac-blog/building-a-phishing-program) [![](https://mmisac.org/hs-fs/hubfs/1736880046430.png?width=1280&height=720&name=1736880046430.png)](https://mmisac.org/mm-isac-blog/digging-into-security-cost) 4 min read #### [Digging Into Security Cost](https://mmisac.org/mm-isac-blog/digging-into-security-cost) ![Picture of Rob Labbé](https://mmisac.org/hubfs/AGC_Speakers/ROBL%20WebSpeaker2.svg) [Rob Labbé](https://mmisac.org/mm-isac-blog/author/rob-labbé): Jan 14, 2025, 12:00:00 AM After my last post on using Security Cost as a metric and the basis for a core security team/CISO objective, a few Mining and Metals ISAC members... [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Metrics](https://mmisac.org/mm-isac-blog/tag/metrics) [Read More](https://mmisac.org/mm-isac-blog/digging-into-security-cost) [![](https://mmisac.org/hs-fs/hubfs/1736539370968.png?width=1280&height=720&name=1736539370968.png)](https://mmisac.org/mm-isac-blog/the-hermeneutics-of-cyber-threat-intelligence-part-3) 3 min read #### [The Hermeneutics of Cyber Threat Intelligence Part 3: Planning and Curation](https://mmisac.org/mm-isac-blog/the-hermeneutics-of-cyber-threat-intelligence-part-3) ![Picture of Cherie Burgett](https://mmisac.org/hs-fs/hubfs/Partner%20Logos/Professional%20Photos/CherieB-Test.png?width=30&name=CherieB-Test.png) [Cherie Burgett](https://mmisac.org/mm-isac-blog/author/cherie-burgett): Jan 10, 2025, 12:00:00 AM What does a Greek god, a German philosopher, and a Museum Curator have to teach us about Cyber Threat Intelligence? [Guidence](https://mmisac.org/mm-isac-blog/tag/guidence) [Hermeneutics](https://mmisac.org/mm-isac-blog/tag/hermeneutics) [Threat Intelligence](https://mmisac.org/mm-isac-blog/tag/threat-intelligence) [Read More](https://mmisac.org/mm-isac-blog/the-hermeneutics-of-cyber-threat-intelligence-part-3) [1](https://mmisac.org/mm-isac-blog/tag/guidence/page/1) [2](https://mmisac.org/mm-isac-blog/tag/guidence/page/2) [Next](https://mmisac.org/mm-isac-blog/tag/guidence/page/2) [![Mining and Metals Logo without wording](https://mmisac.org/hubfs/Mining%20and%20Metals%20Logo%20without%20wording.svg)](https://www.mmisac.org?hsLang=en) - Privacy Policy © 2026 Global Mining and Metals Information Sharing and Analysis Centre Linkedin YouTube Return to top