On Thursday 21 March (15.00–16.30) techUK is delighted to host a roundtable discussion with members to consider the future of industry-led cyber intelligence further to the decommissioning of the Cybersecurity Information Sharing Partnership (CISP) which was managed by the NCSC and free to join.
The CISP’s original purpose was to provide a platform for cyber security professionals in the UK to collaborate on cyber threat information in a secure and confidential environment. With its retirement, this is now being addressed by other tools; however, there are questions as to whether all of the benefits of the CISP are still being delivered and whether there should be an ‘industry owned’ community and platform.
The purpose of this roundtable is to explore these questions and more about what industry could do around cyber intelligence sharing; who should be the custodian of that community; and should we look to follow the example of the Information Technology – Information Sharing and Analysis Center (IT-ISAC) in the USA?
Register to attend this roundtable online now.
Background on the Cybersecurity Information Sharing Partnership (CISP)
From 2013 to 2023 the UK had a partnership (the CISP) for collectively sharing threat intelligence and cyber security information across all sectors. A joint steering group for the CISP included industry members, who also formed the Fusion Cell.
When it was founded, it was targeted at Network Defenders, because they would have information to share and know how to respond. A platform was developed that allowed them to share information with TLP:RED and allowed for incident reporting.
The membership grew explosively until it became the largest cyber security information-sharing partnership globally – with over 17,000 members (more than FS-ISAC at the time) from across all sectors and with a very varied skill level.
As the ownership of the CISP community and platform became the responsibility of NCSC, it took a while to settle on finding a home within the agency, and it eventually landed in Engagement rather than Incident Management. These factors led to other mechanisms being developed/used to allow Network Defenders to share actionable threat intelligence/cyber security information, including within the NCSC (for example, Slack channels for Trusted Partners) and MISP for Indicators of Compromise, and the eventual decommissioning of CISP.
Some issues made it difficult for multi-national organisations (e.g., finance) which wanted a platform enabling and respecting their international colleagues to share information, too.
Some organisations lobbied to retain an incident management/network defender community, and others lobbied for sector-specific mechanisms.
Therefore, now is a good time to explore this issue again and we would encourage those interested to come along and join in this discussion.
Speakers/contributors include:
- Stuart Murdoch, Founder & CEO, Surevine
- Chris Gibson, Executive Director at FIRST, former Director of CERT-UK
- Scott Algeier, Executive Director of the IT-ISAC and former Executive Director of ICASI
- Simon Onyons, Managing Director - EMEA Cyber Security at FTI Consulting
- Bill McCluggage, Laganview Associates
Dan Patefield
Dan Patefield
Dan leads the techUK Cyber Security programme, having originally joined techUK in August 2017 as a Programme Manager working across the Cyber and Defence programmes. He is responsible for managing techUK's work across the cyber security eco-system, bringing industry together with key stakeholders across the public and private sectors. Dan also provides the industry secretariat for the Cyber Growth Partnership, the industry and Governmnet conduit for supporting growth across the sector. A key focus of his work is to strengthen the public-private partnership across cyber security to support further development of UK cyber security policy.
Before joining techUK he worked as Forum Lead for the Westminster eForum. In this role he had a focus on the technology and telecoms space, on issues ranging from Broadband and Mobile Infrastructure, the Internet of Things, Cyber Security, Data and diversity in tech. Dan has a BA in History from the University of Liverpool.
- Email:
- [email protected]
- Phone:
- 020 7331 2165
Jill Broom
Jill Broom
Jill is techUK’s Programme Manager for Cyber Security, working across the cyber eco-system to bring industry together with key stakeholders across the public and private sectors.
Prior to focusing in on techUK's cyber security work, Jill was also part of techUK's Central Government programme team, representing the supplier community of technology products and services to Whitehall departments.
Before joining techUK, Jill worked as a Senior Caseworker for an MP, advocating for local communities, businesses and individuals, so she is particularly committed to techUK’s vision of harnessing the power of technology to improve people’s lives. Jill is also an experienced editorial professional and has delivered copyediting and writing services for public-body and SME clients as well as publishers.
- Email:
- [email protected]
- Twitter:
- @honeybroom
- Website:
- www.techuk.org
- LinkedIn:
- https://www.linkedin.com/in/jill-broom-19aa824
Annie Collings
Annie Collings
Annie joined techUK as the Programme Manager for Cyber Security and Central Government in September 2023.
Prior to joining techUK, Annie worked as an Account Manager at PLMR Healthcomms, a specialist healthcare agency providing public affairs support to a wide range of medical technology clients. Annie also spent time as an Intern in an MPs constituency office and as an Intern at the Association of Independent Professionals and the Self-Employed.
Annie graduated from Nottingham Trent University, where she was an active member of the lacrosse society.
- Email:
- [email protected]
- Twitter:
- anniecollings24
- LinkedIn:
- https://www.linkedin.com/in/annie-collings-270150158/
Upcoming Cyber Security events
Cyber Security updates
Sign-up to get the latest updates and opportunities from our Cyber Security programme.
