techUK member roundtable: Industry-led cyber intelligence sharing
3pm – 4.30pm21 March 2024
Online
On Thursday 21March (15.00–16.30) techUK is delighted to host a roundtable discussion with members to consider the future of industry-led cyber intelligence further to the decommissioning of the Cybersecurity Information Sharing Partnership (CISP) which was managed by the NCSC and free to join.
The CISP’s original purpose was to provide a platform for cyber security professionals in the UK to collaborate on cyber threat information in a secure and confidential environment. With its retirement, this is now being addressed by other tools; however, there are questions as to whether all of the benefits of the CISP are still being delivered and whether there should be an ‘industry owned’ community and platform.
The purpose of this roundtable is to explore these questions and more about what industry could do around cyber intelligence sharing; who should be the custodian of that community; and should we look to follow the example of the Information Technology – Information Sharing and Analysis Center (IT-ISAC) in the USA?
Register to attend this roundtable online now.
Background on the Cybersecurity Information Sharing Partnership (CISP)
From 2013 to 2023 the UK had a partnership (the CISP) for collectively sharing threat intelligence and cyber security information across all sectors. A joint steering group for the CISP included industry members, who also formed the Fusion Cell.
When it was founded, it was targeted at Network Defenders, because they would have information to share and know how to respond. A platform was developed that allowed them to share information with TLP:RED and allowed for incident reporting.
The membership grew explosively until it became the largest cyber security information-sharing partnership globally – with over 17,000 members (more than FS-ISAC at the time) from across all sectors and with a very varied skill level.
As the ownership of the CISP community and platform became the responsibility of NCSC, it took a while to settle on finding a home within the agency, and it eventually landed in Engagement rather than Incident Management. These factors led to other mechanisms being developed/used to allow Network Defenders to share actionable threat intelligence/cyber security information, including within the NCSC (for example, Slack channels for Trusted Partners) and MISP for Indicators of Compromise, and the eventual decommissioning of CISP.
Some issues made it difficult for multi-national organisations (e.g., finance) which wanted a platform enabling and respecting their international colleagues to share information, too.
Some organisations lobbied to retain an incident management/network defender community, and others lobbied for sector-specific mechanisms.
Therefore, now is a good time to explore this issue again and we would encourage those interested to come along and join in this discussion.
Speakers/contributors include:
Stuart Murdoch, Founder & CEO, Surevine
Chris Gibson, Executive Director at FIRST, former Director of CERT-UK
Scott Algeier, Executive Director of the IT-ISAC and former Executive Director of ICASI
Simon Onyons, Managing Director - EMEA Cyber Security at FTI Consulting
Bill McCluggage, Laganview Associates
Jill Broom
Head of Cyber Resilience, techUK
Jill Broom
Head of Cyber Resilience, techUK
Jill leads the techUK Cyber Security programme, having originally joined techUK in October 2020 as a Programme Manager for the Cyber and Central Government programmes. She is responsible for managing techUK's work across the cyber security ecosystem, bringing industry together with key stakeholders across the public and private sectors. Jill also provides the industry secretariat for the Cyber Growth Partnership, the industry and government conduit for supporting the growth of the sector. A key focus of her work is to strengthen the public–private partnership across cyber to support further development of UK cyber security and resilience policy.
Before joining techUK, Jill worked as a Senior Caseworker for an MP, advocating for local communities, businesses and individuals, so she is particularly committed to techUK’s vision of harnessing the power of technology to improve people’s lives. Jill is also an experienced editorial professional and has delivered copyediting and writing services for public-body and SME clients as well as publishers.
Annie is the Programme Manager for Cyber Resilience at techUK. She first joined as the Programme Manager for Cyber Security and Central Government in September 2023.
In her role, Annie supports the Cyber Security SME Forum, engaging regularly with key government and industry stakeholders to advance the growth and development of SMEs in the cyber sector. Annie also coordinates events, engages with policy makers and represents techUK at a number of cyber security events.
Before joining techUK, Annie was an Account Manager at a specialist healthcare agency, where she provided public affairs support to a wide range of medical technology clients. She also gained experience as an intern in both an MP’s constituency office and with the Association of Independent Professionals and the Self-Employed. Annie holds a degree in International Relations from Nottingham Trent University.
Prior to joining techUK, Raya worked in Business Development for an expert network firm within the institutional investment space. Before this Raya spent a year in industry working for a tech start-up in London as part of their Growth team which included the formation and development of a 'Let's Talk Tech' podcast and involvement in London Tech Week.
Raya has a degree in Politics and International Relations (Bsc Hons) from the University of Bath where she focused primarily on national security and counter-terrorism policies, centreing research on female-led terrorism and specific approaches to justice there.
Outside of work, Raya's interests include baking, spin classes and true-crime Netflix shows!
Tracy supports several areas at techUK, including Cyber Exchange, Cyber Security, Defence, Health and Social Care, Local Public Services, Nations and Regions and National Security.
Tracy joined techUK in March 2022, having worked in the education sector for 19 years, covering administration, research project support, IT support and event/training support. My most outstanding achievement has been running three very successful international conferences and over 300 training courses booked all over the globe!
Tracy has a great interest in tech. Gaming and computing have been a big part of her life, and now electric cars are an exciting look at the future. She has warmed to Alexa, even though it can sometimes be sassy!
The Cyber Security Programme provides a channel for our industry to engage with commercial and government partners to support growth in this vital sector, which underpins and enables all organisations. The programme brings together industry and government to overcome the joint challenges the sector faces and to pursue key opportunities to ensure the UK remains a leading cyber nation, including on issues such as the developing threat, bridging the skills gap and secure-by-design.
Our new group will keep techUK members updated on the latest news and views from across the Cyber security landscape. The group will also spotlight events and engagement opportunities for members to get involved in.