1. A security system, comprising: a computer system; a memory accessible to the computer system; a data store comprising a threat catalog, wherein the threat catalog comprises a plurality of threat vectors associated with vulnerabilities of an organization, wherein each threat vector of the plurality of threat vectors comprises a plurality of fields, wherein the plurality of fields comprises at least an attack type field that identifies a type of security attack, and wherein each field of the plurality of fields is constrained to carry a value of a plurality of values; and an application stored in the memory that, when executed by the computer system, receives a threat report based on threat intelligence, wherein the threat report comprises an identification of one or more threat vectors, wherein the one or more threat vectors comprise at least some of the plurality of fields including the attack type field, and wherein each of the at least some of the plurality of fields is constrained to carry a value of the plurality of values, determines which of the one or more threat vectors identified in the threat report are relevant to the organization by determining a correlation between the one or more threat vectors received in the threat report with the plurality of threat vectors comprising the threat catalog, wherein determining the correlation comprises comparing the values of the at least some of the plurality of fields for the one or more threat vectors received in the threat report to corresponding values of corresponding fields of the plurality of fields for the plurality of threat vectors comprising the threat catalog, and based on the correlation, sends a notification to a stakeholder in the organization under the protection of the security system.