Hello and welcome to another lesson
from the first module,
Data-Collection, this lesson
is about the second type
of external data collection
sources, which is community
data sources.
Let me start this video by
defining our objectives
in this lesson, we will discover
together the different types
of community data sources.
And why would you join
any of these communities?
So the idea behind
creating intelligence sharing
communities was to make
best practices and cyber
threat information more accessible
to companies, so
organizations are no
longer alone in this hostile
environment.
Basically, the role of
these communities is to respond
to cyber threats, vulnerabilities
and incidents by providing
a centralized organization
to monitor, disseminate
information and help
mitigate cybersecurity
as trunk's a
strong secondary objective
is to keep this information
confidential and away
from malicious people.
The first type of these
communities are information
sharing and analysis centers,
or Isaacs.
These communities were first
established in the US
in nineteen ninety eight.
They were created in order to
address US critical
infrastructures vulnerabilities
and they facilitated
the sharing of actionable
cybersecurity intelligence
among trusted organizations,
within an industry
and also between sectors.
And Izak or Information Sharing
and Analysis Center is
an industry specific
organizations that
gathers and share information
on cyber threats to critical
infrastructure, as
are trusted entities
established by
secure or
key or critical
infrastructure, key resource
owners and operators
in order to provide comprehensive
sector analysis, which
is shared with within
the same sector, with
other sectors and even
with the government.
So I also facilitate
the sharing of data between
public and private sector
groups.
Many eyes are well resourced,
they come with membership fees
and have infrastructure
and full fledged security
operation centers for monitoring
threats on a global scale.
So join in and Izak
comes at costs.
It requires either
financial or human resources
from your organization.
This means there must be a strong
motivation to join an existing
group or to potentially
lead a new one.
The National Council of Isaacs
currently lists 21
member Isaacs, including
those for financial, automative,
energy, communication sector,
etc..
Now let's see the different types
of Isaacs.
Basically, there are three
common types of Isaacs.
The first type is sector
based.
These Isaac's focus
on organizations within
the same sector and are
mostly facilitated by
the sector itself
or by the government.
The second type is country
based.
These Isaac's focused
more on cooperation and
collaboration within
a specific country, and
they are often governed
by a DECIRTE or
computer security incident response
team.
The third type is international.
This is Connect
Key Persons for computer
security from organizations
all over the globe.
Now let's see.
Somebody wants to join.
And there
are several services provided
by Isaacs, including
risk mitigation, rapid
response in the case of
an emergency
through the ability to
contact and coordinate with
members,
also analyzes on
relevant threats, vulnerabilities
and incidents
as also offer trainings
and curated reporting.
Members in Isaac's
benefit have
different benefits.
It can vary across
the ASX and it can include
access to 24 by
seven security operations,
briefings, white
papers, threat calls,
webinars, etc..
In this slide, I add
a few examples of
available assets like
automative, Izak, Aviation,
Izak, Communication, Izak,
Itzak, Multi-State,
Izak, and you can
find the full list of
these IDEX on
the official website of National
Council of Isaacs.
Now let's move to the second type
of community data sources,
which is information sharing
and analysis organizations,
or ISAO.
These are the result of
White House directive to
promote voluntary
cyber threat information sharing
within industry sectors.
In February 2015,
the President Obama signed an
executive order
directing the US Department
of Homeland Security, or DHS,
to encourage development of
ISIS for private
companies, nonprofits,
government departments and
state, regional and
local agencies.
Let's see what is NATO?
And ISIL is a group created
together analyze and disseminate
cyber threat information.
And like Isaacs,
the ISOs are
not directly tied to critical
infrastructure sector.
Instead, I
offer a more flexible
approach to self organize
information sharing activities
among communities of
interest, such as
small businesses across sectors,
legal, accounting and consulting
firms that support cross-sector
clients.
The ISO Standards Organization
currently lists more than 70
groups that
that it describes
as being engaged in some
level of information sharing
activity.
This list includes both
both sector specific
ASX and the newer
resource.
It might be based on
faith, geography
or roles such as
corporate directors.
Officers,
I should also mention that
Annisa could be a single company
facilitating sharing among
their customers or partners
when it comes to
the main goal of
creating.
The idea behind
creating these ideas
was to promote and allow
any group of companies or
organizations or entities
to work together in
order to share information
or to share threat information.
And according to the
director of Cyber Joint
Program Management Office,
the DHS, the
main goal of
creating and promoting
Isao was to make
to make it to make sharing
easier for all organizations,
even if they don't belong to
any.
So here the same thing
as the result
of the Izak part.
I add to this list containing
some examples of ISIS,
including ICSE
Advance Cybersecurity Security
Center, DHS,
also see our eyes
or Cyber Resilience and
Resilience Institute.
And I added
the source Isao dot org
where you can find a full list
of ISO's and
some Izak or sector
based Isaacs.
We've come to the end of this lesson
in this video. We've seen the
different types of community
data sources, including
Isaacs and AITZAZ,
each of the two community types.
We've seen their history.
What are these communities?
And we've seen the
benefits of joining one of
these two communities.
And it's important to choose
wisely the community you want
to belong to or to subscribe
to because
you will need to get the most
out, the most
out of this intelligence
that's shared within the community.
For example, if you are a
bank or any financial institution,
then joining, for example,
Physick is a
good choice for you.
Now that you've seen two different
types of external data
sources, including
private data collection sources
and community data collection
sources, we will have only
one type left.
So wait before making
a choice, because
you might be interested by the
public data sources.
This is what you are going to see
in the next video.
So don't miss it.