In an effort to strengthen the ability to fight security breaks, is sharing cybersecurity information among enterprises and the federal government helpful? The short answer is yes. While The Cyber Information Sharing Act is flawed, it is necessary.
The sharing of information to increase public and corporate awareness of cybersecurity threats and intelligence is a key step towards increasing general awareness and understanding of the growing threat. The first generation of this program will be primarily reactionary in nature. Meaning, the information being shared with the public will be focused on methods, tactics and technologies that are currently being used across the globe to propagate cyber-attacks. Sharing information is still critical as studies show that over 60% of attacks are focused towards smaller businesses and organizations that are less prepared to defend the attack and are often more prone to not surviving a critical attack or breach due to a lack of insurance, capital reserves or financial and legal support. Consumers within certain market and demographic segments are also being targeted and need additional education on attack techniques and how to reduce their overall risk of being attacked or having their personal information or identify stolen.
Employees and leaders of small and medium-sized organizations should benefit from the current program, but the next generation of the program should provide a deeper level of threat trending and analysis. With the use of artificial intelligence, next generation technologies and smart computers, the program can help warn of potential threats or provide recommendations to the public and corporations on how to mitigate the risk of being a cyber-attack victim before the threat is actually launched or a breach occurs. Security Intelligence Centers are a good example of this. To learn more about how the Security Operation Center of today is becoming the Security Intelligence Center of tomorrow, contact Continu.net for more information.