It’s been eight years since the Cybersecurity Information Sharing Act was signed into law, and today we have a thriving network of public/private threat sharing groups—like the Joint Cyber Defense Counsel (JCDC) and National Artificial Intelligence and Cybersecurity ISAO (NAIC/ISAO), offering platforms where member organizations can both share threat information and gain access to the larger collection.Yet, perception challenges still exist for threat sharing groups. These include both liability and confidentiality concerns, with some organizations wondering if information shared in a group could be traced back to—and used against—the organization that shared the data in the first place.In this episode, host Mitch Mayne talks with Michael Thiessmeier, Co-founder and Executive Director of the NAIC/ISAO, about the history of threat sharing and how the “public good” has benefitted. They also explore the perceived hurdles to entering threat sharing groups and explore whether or not those are legitimate concerns.Things to listen for:[00:05 - 01:41] Introduction[03:23 - 05:54] Notable wins as a result of groups sharing intelligence[06:19 - 07:23] What information to consider sharing in an information-sharing group[11:00 - 14:03] Has trust been restored that the government does the right thing in terms of privacy and surveillance?[20:09 - 21:23] Michaels information products[22:15 - 23:20] Why threat sharing is important

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related