1. A method comprising: receiving a data item from a remotely located information source, the data item including unstructured information; determining a threat score for the data item by matching information associated with the data item to pre-identified information associated with a numerical value; responsive to the threat score exceeding a predetermined threshold, determining labels for at least one Common Alerting Protocol field associated with a Common Alerting Protocol data structure using at least a portion of the information associated with the data item by: determining a first label for an urgency field within the Common Alerting Protocol data structure based on the threat score and the data item, determining a second label for a severity field within the Common Alerting Protocol data structure based on the threat score and the data item, determining a third label for a category field within the Common Alerting Protocol data structure based on the threat score and the data item, and determining a fourth label for a certainty field within the Common Alerting Protocol data structure based on the threat score and the first data item; creating the Common Alerting Protocol data structure that includes the labels; and transmitting the Common Alerting Protocol data structure for use within a decision system or to cause security personnel to perform an action.