A SOC manager wants to automate the ingestion of machine-readable threat intelligence from a trusted ISAC into the organization's SIEM. The intelligence includes structured indicators such as malicious IPs, file hashes, and adversary TTPs, and must be pulled on a scheduled basis over an authenticated channel. Which combination of standards BEST meets this requirement?