4 ms·

There is already a pretty large threat intelligence information sharing effort in place through the ISAC system established by DHS: http://www.isaccouncil.org h

There is already a pretty large threat intelligence information sharing effort in place through the ISAC system established by DHS: http://www.isaccouncil.org http://www.isaccouncil.org These have seen widespread adoption by medium and large sized companies, and are doing good work. Or at least the one I participate in is; I can't speak for the other ISACs. They have policies that facilitate information sharing without privacy or liability issues. There are definitely still a very large portion of organizations that are not a member of any ISAC or similar information sharing group, though. I don't know how much CISA may help with that.

jcrawfordor 11y ago
You may find it meaningful that, in my interactions with several people involved in operating ISACs, I have heard nothing but support for CISA. One high-up individual in a well-known ISAC expressed a great deal of frustration and said that opposition to CISA came only from people who had no idea what it was indicators were. I don't think that it's quite that simple, but there's certainly an element of that. Much of the benefit of CISA is specifically in the area of information sharing with the gov't, which has various initiatives like NCCIC that are falling flat in a lot of ways. Of course the ISACs would like to be involved in this. CISA is also seen as a way to get a lot more organizations to contribute to ISACs, as well.