Information Sharing
What is Information Sharing?
The exchange of cybersecurity threat intelligence, vulnerability data, and incident information between organizations to improve collective defense capabilities.
Terms that appear alongside information sharing
Each of these is named in at least one of the same controls as information sharing. The number is how many controls name both.
- cybersecurity 25 shared controls
- incident response 20 shared controls
- nist 17 shared controls
- threat intelligence 14 shared controls
- compliance 13 shared controls
- cyber threat 13 shared controls
- incident reporting 12 shared controls
- lessons learned 11 shared controls
Frameworks that govern information sharing
What the standards actually require on information sharing
Requirements naming information sharing across 6 standards, quoted from the control text.
Contact details for law enforcement and the regulators are kept and refreshed regularly.
ffiec-cybersecurity-assessment-tool-cat::D2.IS.Is.B.2 · D2.IS.Is.B.2 Information Sharing (Baseline 2) →Define information sharing goals and objectives that support the organization's overall mission and cybersecurity strategy.
SP800-150-GOALS · Define Information Sharing Goals and Objectives →The organisation enables authorized users to check whether a sharing partner's access authorizations match the information's access and use restrictions in defined sharing situations, and uses automated or manual means to help users make sharing and collaborat...
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::AC-21 · AC-21 Information sharing →A community needs a common interest or other relationship that defines the scope of the sensitive information shared, such as one market sector with membership limited to that sector, a geographical location or common ownership, and it needs trust between memb...
iso-iec-27010-2015::4.2 · Information sharing communities →CSF 2.0 outcome: requirements to address cybersecurity risks in supply chains are established, prioritized and integrated into contracts and other agreements with suppliers and relevant third parties. Priority Medium.
nist-sp-800-61-rev-3::GV.SC-05 · GV.SC-05 Supplier requirements include incident disclosure and information sharing →Implement information search and retrieval services that enforce [Assignment: organization-defined information sharing restrictions].
NIST800-AC-21(2) · AC-21(2) Information Sharing | Information Search and Retrieval →Questions people ask about information sharing
What is Information Sharing?
Why is Information Sharing important for compliance?
Which compliance frameworks address Information Sharing?
Where can I learn more about Information Sharing?
See how Information Sharing applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.