What to share

The starting point and goal of the information exchange should be to share information that can directly be used to increase resilience of the recipients’ operations. Therefore, the originator should always be aware of who the recipient is, the level of detail of the information and whether it promotes the purpose and objective of the ISAC. When it comes to types of information to share, sector specific information obviously varies. However, some general guidelines to the content of the information exchange could be:

• Threat information
• Vulnerability information
• Incident information
• Mitigation
• Good practices
• Situational metrics
• Compliance topics
• Law enforcement and intelligence information 

Outcome:

• Document – Terms of Reference