Against today's mutating threat landscape and sophisticated cybercriminals, security and risk (S&R) professionals are outgunned and outmatched. The traditional strategy of waiting for an alert and then responding to a compromise is futile against 21st century threat actors. Delayed responses when cybercriminals have already begun exfiltrating intellectual property aren't acceptable. Something must change, and S&R professionals must proactively defend their networks and data. In this report, we draw from the principles of military intelligence and guide S&R pros through a five-step process to build and leverage threat intelligence capabilities.