CISA’s Threat Sharing in a Death Spiral, says John Terrill

A recent report indicates that participation in the Cybersecurity and Infrastructure Security Agency’s (CISA) Automated Indicator Sharing initiative has hit its lowest levels since 2017. A September report from the Department of Homeland Security’s Office of Inspector General revealed a 93% drop in shared cyber threat indicators, raising concerns about the program’s ability to protect critical infrastructure.

In comments to Chris Riotta of BankInfo Security, Phosphorus CISO John Terrill says:

AIS “has found itself in a death spiral with both producers and consumers of cyber indicators all pulling back,” according to John Terrill, CISO at Phosphorus Security. “Fortunately, CISA knows this and can hopefully stop the bleeding and reboot this information sharing initiative with the new TIES (Threat Intelligence Enterprise Services) program.”

“The real question is what will TIES do differently to avoid the same fate as AIS,” he added.

Read the full article here for more on the report and what comes next for a new Threat Intelligence Enterprise Services initiative.