[nsp-sec] Hey what's with all this Government and Private industry sharing wrt cyberdefense?

[Smith, Donald]

I am in the process of writing a diary about government and private sector sharing. I believe it has actually gotten better in the last few years due to work being done in groups like this.
I am solicitation additional information especially wrt other publicly known private + government sharing groups.
They have to be publicly known or I will not publish anything about them! I also won't publish anything about said groups that isn't public published!

I am not looking to start a "we shouldn't share vs. we should share" war. If you wish to discuss that privately with me feel free but lets keep the sig to noise level down if we can.



Here is the rough draft

"Seriously, its a good trend and should be encouraged.
Here are two efforts that recently came to my attention.

DOD is launching a program that will send members of their IT teams to industry to improve the government's IT expertise particularly in cybersecurity.
http://www.washingtonpost.com/wp-dyn/content/article/2010/12/30/AR2010123003292_pf.html

Estonia is building a Cyber Defense League with private sector cyberdefense experts and government agencies.
http://www.npr.org/2011/01/04/132634099/in-estonia-volunteer-cyber-army-defends-nation?sc=tw&cc=share


I have been involved in several similar efforts in the past and while not all produced the exact results desired IMHO such sharing benefits the parties involved.

Private industry has people that, as part of their day to day job, watch for cyber security threats and trends.

Government agencies have personal with the same responsibilities and abilities.

Both have different views into various portions of "cyber land" and may see different things at different times but eventually will probably see whatever the other is seeing.

Sharing that type of information just makes sense. The "bad guys" share. If the good guys don't we will always be one step behind them.

Other Government and private industry cybersecurity sharing forums include but are NOT limited to:
nsp-security, ops-trust, infragard and many others.


A few other articles on Government and private sector sharing wrt cybersecurity intel:
http://www.nationaljournal.com/njmagazine/id_20090502_5834.php

http://gcn.com/Articles/2006/08/16/Sharing-data-is-crucial-to-cyberdefense.aspx?Page=2

http://www.dailyherald.com/article/20101227/news/101229642/

http://www.ncs.gov/nstac/reports/2009/NSTAC%20CCTF%20Report.pdf"



Sharing: Author's permission required.
Donald.Smith at qwest.com gcia

This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.