Cyber Situational Awareness and Information Sharing in Critical Infrastructure Organizations

Abstract

Cybersecurity-related capabilities play an ever-growing role in national security, as well as securing the functions vital to society. The national cyber capability includes the resilience of companies running critical infrastructures, their cyber situational awareness (SA) and the sharing of cybersecurity information required for cyber SA. As critical infrastructures become more complex and interdependent, ramifications of incidents multiply. The EU Network and Information Security Directive calls for cybersecurity collaboration between EU member states regarding critical infrastructures and places the most crucial service providers and digital service providers under security-related obligations. Developing better SA requires information sharing between the different interest groups and enhances the preparation for and management of incidents. The arrangement is based on drawing correct situation-specific conclusions and, when needed, on sharing critical knowledge in the cyber networks. The target state is achieved with an efficient process that includes a three-level-strategic, operational and technical/tactical-operating model to support decision-making by utilizing national and international strengths. In the dynamic cyber environment strategic agility and speed are needed to prepare for incidents.

Building Situational Awareness of GDPR

“…E-health privacy risk awareness was surveyed by Bellekens et al (2016). Pöyhönen et al (2019) examined cyber SA in critical infrastructure organisations. Argaw et al (2020) addressed the cybersecurity of hospitals, noting that information sharing simplifies SA and a clear perception of threats and details related to threat actors.…”

Pengembangan Financial Service Information Sharing and Analysis Center (FS-ISAC) di Indonesia dengan Pendekatan ENISA ISAC in a Box

“…Serangan siber tersebut harus dihadapi dengan upaya kolaboratif dari setiap pihak dengan upaya yang dapat dilakukan masing-masing [2]. Untuk mengembangkan cyber security situational awareness yang lebih baik, diperlukan upaya berbagi informasi antara kelompok kepentingan yang berbeda untuk meningkatkan persiapan dan manajemen insiden [3]. Langkah ini merupakan best practice yang disebut dengan Cybersecurity Information Sharing (CIS) atau yang lebih dikenal dengan Information Sharing and Analysis Center (ISAC).…”

Information Sharing Models for Early Warning Systems of Cybersecurity Intelligence

“…The main research question is "how can cyber in-formation sharing models be understood in maritime domain?" • The fourth case study publish in 5 analyses inter-sector cyber information sharing models in critical infrastructure protection. It studies how the cyber situational awareness of an organisation can be developed; how do the organizations exchange their cyber security related information; and how an organisation's cybersecurity capability can be utilised more extensively?…”