Information Sharing
Information sharing is paramount in cyber security. The unfortunate truth is that the bad guys are persistent, so their success is inevitable. Sharing information about attacks and compromises with others helps to reduce the impact of successes and prevents future success by the same attackers and others using the same techniques. Bad actor’s techniques can be categorized and effectively communicated with a framework like Mitre Att&ck, while the communication channels themselves consist of organizations sharing information with each other in ISACs and ISAOs.
An ISAC is an Information Sharing and Analysis Center. ISACs are generally industry specific or fill a specific Niche. As a government employee in Arizona, I am a part of ACTRA, which is a threat response center based in Arizona and might be considered an ISAC for Ariziona even if they don’t officially call themselves that. An ISAO, or Information Sharing and Analysis Organization, is similar but tends to be broader in its mission.
Here is a list of various ISACs and ISAOs I found and a link to each website. If you find any mistakes or you notice information is outdated, please let me know in the comments.
| Organization | Sector | Description |
|---|---|---|
| Auto-ISAC | Automotive | Facilitates sharing of cybersecurity intelligence and best practices among automotive manufacturers and suppliers to enhance vehicle security. |
| A-ISAC | Aviation | Enables the aviation sector to share cyber threat information and coordinate responses to protect global air transport operations. |
| CalCISO | Cybersecurity – Regional | Regional group focused on cybersecurity collaboration and information sharing in California. |
| CyberHouston | Cybersecurity – Regional | Promotes cybersecurity awareness, collaboration, and information sharing in the Houston region. |
| CyberTexas Foundation | Cybersecurity – Regional | Supports cybersecurity workforce development, education, and information sharing in Texas. |
| CyberWyoming | Cybersecurity – Regional | Nonprofit advancing cybersecurity education and information sharing in Wyoming. |
| CyberHawaii | Cybersecurity – Regional | Collaborative network for cybersecurity education and threat sharing in Hawaii. |
| CyberUSA | Cybersecurity – National | National network connecting regional cybersecurity organizations for information sharing and best practices. |
| ACTRA | Cybersecurity – Threat Response | Enables organizations to collaborate on cyber threat analysis and coordinated incident response. |
| CIAS-ISAO | Cybersecurity – Education & Research | Focuses on cybersecurity education, research, and information sharing for academic and research communities. |
| Columbus Collaboratory | Cybersecurity – Collaborative | Collaborative platform for member companies to share cybersecurity knowledge and solutions. |
| Cyber Resilience Institute | Cybersecurity – Collaborative | Promotes resilience by sharing threat intelligence and best practices among diverse organizations. |
| Cybersecurity Collaborative | Cybersecurity – Collaborative | Enables cybersecurity leaders to share intelligence and collaborate on defense strategies. |
| Cyber Threat Alliance | Cybersecurity – Collaborative | Global alliance of cybersecurity providers sharing threat intelligence to improve defenses for all members. |
| CI-ISAC | Critical Infrastructure | Shares cyber threat information to protect critical infrastructure sectors from cyberattacks. |
| Communications ISAC | Communications | Centralized hub for sharing cybersecurity threats and best practices in the communications sector. |
| EASE | Energy Analytics | Supports energy sector organizations in sharing analytics and information to improve cybersecurity. |
| E-ISAC | Electricity | Facilitates the exchange of cyber and physical security information for the electricity industry. |
| EMR-ISAC | Emergency Services | Provided cybersecurity and threat information sharing for emergency services organizations. |
| FS-ISAC | Financial Services | Global platform for financial institutions to share cyber threat intelligence and coordinate responses to protect financial infrastructure. |
| Health-ISAC | Healthcare | Enables healthcare organizations to share information on cyber and physical threats to protect health sector infrastructure. |
| IT-ISAC | Information Technology | Community of IT companies collaborating to share cyber threat intelligence and best practices. |
| CompTIA ISAO | Information Technology | Forum for IT professionals to share cybersecurity information and resources. |
| ME-ISAC | Media & Entertainment | Shares cyber threat intelligence to protect media and entertainment companies from cyber risks. |
| MM-ISAC | Manufacturing | Facilitates secure sharing of cybersecurity information for manufacturing sector organizations. |
| MTS-ISAC | Maritime | Supports maritime sector organizations in sharing information on cyber threats and vulnerabilities. |
| MS-ISAC | Government – State & Local | Central resource for state, local, tribal, and territorial governments to share cybersecurity information and best practices. |
| ND-ISAC | Defense Industrial Base | Shares threat intelligence to protect defense industrial base companies from cyberattacks. |
| NGO-ISAC | Non-Governmental Organizations | Facilitates information sharing and collaboration on cybersecurity risks for NGOs. |
| ONG-ISAC | Oil & Gas | Enables oil and gas sector organizations to share cyber threat intelligence and coordinate defense. |
| PT-ISAC | Pharmaceuticals | Shares cyber and physical security threat information for the pharmaceutical industry. |
| RE-ISAC | Retail & Hospitality | Provides cyber threat intelligence and best practices for the retail and hospitality sectors. |
| RH-ISAC | Retail & Hospitality | Enables retail and hospitality organizations to share cybersecurity threats and mitigation strategies. |
| REN-ISAC | Education & Research | Supports higher education and research institutions in sharing cybersecurity intelligence and resources. |
| S-ISAC | Space | Focuses on sharing cyber threat intelligence for organizations in the space industry. |
| SC-ISAC | Supply Chain | Facilitates cybersecurity information sharing for organizations involved in supply chain operations. |
| SEAL-ISAC | Security, Engineering & Logistics | Shares security and cyber threat information for engineering and logistics sectors. |
| ST-ISAC | Transportation | Supports transportation sector organizations in sharing cybersecurity threats and best practices. |
| Water-ISAC | Water Infrastructure | Central hub for water sector organizations to share cyber and physical threat intelligence. |