Information Sharing
What is Information Sharing?
The exchange of cybersecurity threat intelligence, vulnerability data, and incident information between organizations to improve collective defense capabilities.
Terms that appear alongside information sharing
Each of these is named in at least one of the same controls as information sharing. The number is how many controls name both.
- cybersecurity 25 shared controls
- incident response 20 shared controls
- nist 17 shared controls
- threat intelligence 14 shared controls
- compliance 13 shared controls
- cyber threat 13 shared controls
- incident reporting 12 shared controls
- lessons learned 11 shared controls
Frameworks that govern information sharing
What the standards actually require on information sharing
Requirements naming information sharing across 6 standards, quoted from the control text.
Define information sharing goals and objectives that support the organization's overall mission and cybersecurity strategy.
SP800-150-GOALS · Define Information Sharing Goals and Objectives →Policies governing the formation and operation of information sharing communities
27010-5.2 · Information sharing community policies →Coordinate with external parties and handle privacy and breach incidents per NIST SP 800-61 Rev 2 Chapter 4 (Coordination and Information Sharing).
NISTSP61-7 · Coordination, Information Sharing, Privacy and Breach Response →Institutions shall respond to FinCEN 314(a) requests by searching records for matches to subjects of money laundering or terrorism investigations.
BSA-AML-19 · Information Sharing 314(a) →Operate supply chain risk management + information sharing + risk management strategy maintenance per NIST SP 800-39 (foundational reference) and the implementing publications NIST SP 800-161 (Supply Chain Risk Management Practices) + NIST SP 800-150 (Cyber Th...
NISTSP39-8 · Supply Chain Risk Management, Information Sharing, and Risk Management Strategy Maintenance →Enable authorized users to determine whether access authorizations match sharing restrictions.
AC-21 · Information Sharing →Questions people ask about information sharing
What is Information Sharing?
Why is Information Sharing important for compliance?
Which compliance frameworks address Information Sharing?
Where can I learn more about Information Sharing?
See how Information Sharing applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.