This standard provides the risk guidelines, principles and controls for designing, implementing, operating and monitoring architectures for cyberthreat intelligence exchange. This document is applicable to all types of organisations (e.g. commercial enterprises, government agencies, non-profit organisations) whose objective is to share intelligence elements in cyberthreat intelligence exchange networks.