A congressional report recommended that the federal government takes several measures to improve its intelligence sharing relationship with industry through policy reviews and joint collaboration platforms.<\/p>\n\n\n\n
The report, created by the Cyberspace Solarium Commission (made up of government and nongovernment cyber experts), presented 75 cyber policy recommendations, including the recognition that information sharing is a perpetual challenge both between feds and private industry and agencies within the federal government.<\/p>\n\n\n\n
The report suggests that Congress direct the executive branch to undergo a six-month review of intelligence policies, procedures and resources to identify pieces that inhibit the intelligence community to effectively share information.<\/p>\n\n\n\n
\u201cIt needs to be done better in terms of higher level of collaboration [at] more senior levels between and among the government and private sector,\u201d said Tom Gann, chief public policy officer at McAfee.<\/p>\n\n\n\n
To start, the report calls on the federal government to create a \u201csystemically important critical infrastructure\u201d designation that would allow operators of that infrastructure to receive special assistance from the government to secure their systems.<\/p>\n\n\n\n
The information sharing relationship between the government and industry needs to include more contextualized information, Gann said, which provides greater insight into the overall threat environment. Industry doesn\u2019t need to know just that there\u2019s new malware and who sent it, but also what organizations and senior leaders of actors might be involved, as well as motivations.<\/p>\n\n\n\n
\u201cIt\u2019s building as complete of a picture as you can of a threat environment on a day-to-day basis … which is so important,\u201d Gann said.<\/p>\n\n\n\n
There are some efforts within the federal government focusing on improving intelligence sharing with private industry. The Cybersecurity and Infrastructure Security Agency at the Department of Homeland Security works with private and public sector partners to protect critical infrastructure. Another effort at the NSA\u2019s Cybersecurity Directorate is focusing on intelligence sharing with the Defense Industrial Base.<\/p>\n\n\n\n
To further those efforts, the report also suggests Congress fund the creation of a \u201cJoint Collaborative Environment,\u201d which would host both classified and unclassified cyberthreat information, malware forensics and network data. The platform would share information with other federal agencies and owners of \u201cimportant\u201d critical infrastructure, and eventually expanding to intelligence sharing and analysis centers, and a larger swath of critical infrastructure operators. The commission also proposed a Joint Cyber Planning Cell to coordinate cybersecurity planning efforts with the private sector.<\/p>\n\n\n\n
The report also recognizes that U.S. government doesn\u2019t know how to best serve the private sector with intelligence collection. In order to mitigate that, the report recommends that the Congress mandate a \u201cformal process to solicit and compile private-sector input to inform national intelligence priorities, collection requirements, and more focused U.S intelligence support to private-sector cybersecurity operations.\u201d<\/p>\n\n\n\n
The private sector was a critical piece of the commission\u2019s three-pronged, layered deterrence strategy it recommended. Strengthening the feds\u2019 relationship with the critical infrastructure operators was a key aspect of the report, as demonstrated by the participation of Tom Fanning, CEO of Southern Company, a utility company.<\/p>\n\n\n\n
To further that relationship, the federal government and different cybersecurity providers, such as telecom and end-point security companies, may want to explore what it would look like to partner with the federal government and allow it to actively block malicious activity, said Michael Daly, chief technology officer for cybersecurity and special missions at Raytheon.<\/p>\n\n\n\n
\u201cI think there would be a benefit to us at least investigating that as an option \u2014 how could we use public-private partnerships to do more active blocking?\u201d Daly said.<\/p>\n\n\n\n
Daly added, \u201cIf we know that\u2019s a malicious site, let\u2019s not let our citizens go to it.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
A recent report takes aim at improving information sharing between feds and the private sector to build a complete threat picture.<\/p>\n","protected":false},"author":7,"featured_media":27372,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":31,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[106,31,110,14,33],"tags":[],"coauthors":[3242],"class_list":["post-24087","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-home","category-it-cloud-report","category-it-networks","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"T4GKB2JT7VDPBNYBFS7ZQNUH7M","arc_canonical_url":"\/home\/2020\/03\/16\/ways-government-industry-can-overcome-a-perpetual-challenge\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n