EISAS

European Information Sharing and Alert System

EISAS basic toolset

The EISAS basic toolset report published in December 2011, provides a methodology that facilitates outreach to the EISAS target group (citizens & SMEs) with information about IT Security in order to efficiently empower them with necessary means & skills to protect their computers.

EISAS enhanced (report for implementation)

The EISAS enhanced report, it's an implementation plan for further development and deployment of EISAS framework. The goals of this report are to create an 'out-of-the-box' method for implementing a fully functional EISAS framework.

Download:

EISAS Basic toolset report

EISAS (enhanced) report on implementation

EISAS Roadmapeisas_roadmap_image

The EISAS Roadmap, which was was published in February 2011, provides the direction to further the development and deployment of the European Inforamtion Sharing and Alert System (EISAS). It has been produced by ENISA upon request of the EU Commission as communicated in the Communication on Critical Information Infrastructure Protection - COM (2009)149.

Download the EISAS Roadmap

EISAS feasibility study

There are many systems and initiatives across Europe that have the goal of disseminating appropriate and timely information on Network and Information Security (NIS) vulnerabilities, threats, risks and alerts, as well as sharing good practices. ENISA was asked to analyse the current state of affairs as regards such systems and initiatives in the public and the private sectors in the EU Member States and to identify possible sources of security information that could potentially contribute to a Europe-wide Information-Sharing and Alert System (EISAS).

It was hoped that the findings of this analysis would lead to the development of a scenario that would both address the lack of available NIS information in some Member States and add value (in a way yet to be determined) to existing information sharing systems in other Member States. Ideally such an EISAS would build on these existing systems, firstly to avoid the duplication of effort and competition, and secondly to draw from the lessons learned and the good practices of these (national) systems.

In defining the most promising scenario for a European involvement in this field, the study analysed first the findings of previous projects and other studies with a similar scope and second the status quo of the existing (national) information sharing systems for home-users and Small and Medium
Enterprises (SMEs).

Two types of involvement for the European Union (operating and facilitating) in the three parts of the information sharing process (information gathering, processing and dissemination) have been examined under three different perspectives (technical/organisational, political and social/cultural).

The study concludes that the most effective level of involvement for the European Union in the establishment and operation of an information sharing system for its home-users and SMEs would be that of a facilitator, moderator of discussion and a ‘keeper of good practice’. The report closes with proposals for the next steps to be taken and a ‘proof of concept’ scenario.

Downloads

The final PDF report of the EISAS feasibility study