The Evolution of Information Sharing in Cybersecurity

Information sharing used to be about trusted exchanges with those who had data to trade. Today, that information comes from the multi-billion-dollar threat intelligence industry and the experts who hunt threat actors and cyber criminals. On this episode of Advancing Cyber, Cyber Threat Alliance President and CEO Michael Daniel and Professor and cyber threat intelligence expert Sergio Caltagirone explore how threat intelligence has matured into one of the fastest growing segments of our industry with customer expectations for timely and actionable data. They unpack how that reality contrasts with the post-9/11 paradigm of information sharing and the insatiable demand for information from government, critical infrastructure, and organizations around the world.

Cristin, Michael, and Sergio wrestle with the reality that not every critical infrastructure owner or operator may need the same level of threat intelligence or priority treatment, particularly in times of crisis. The actual exchange of information, or giving information to those who can action it, requires a much smaller community of responders. Cristin, Michael, and Sergio also debate what a new executive order for information sharing and threat intelligence should include – regulation, threat intelligence marketplaces, tactical and strategic scoping requirements, clear articulations of legal and privacy obligations, and other important priorities - highlighting that information sharing is still a hard problem to solve, but there are options and solutions that can help.