Problem Statement
Which step comes first in the threat intelligence lifecycle?
Explanation
The threat intelligence lifecycle begins with Planning and Direction — deciding what information is needed and how it will be used.
This phase sets clear goals for collection, analysis, and sharing activities.