The importance of sharing cyber threat information has been discussed for more than a decade. Establishment of sector based communities built on a basis of affinity and trust is recognized as a key ‘next phase’ of developing resilience capabilities for our nation. This national ISAO will provide a connective platform for locally structured and market-based ISAO activity, providing a sustainable model for growth while enhancing overall resilience. CyberUSA will effectively become a ‘community of communities’ to allow business to continue as normal at the local level, providing a funding methodology to support local efforts, while also providing exponential improvements to cyber resilience capabilities locally and nationally.
Establish an ISAO relationship with an existing or startup cyber community (geographic, thematic, sector based, or other). Provide tools and platform for maintaining trust and a vetted membership, sustainment, self-funding through marketplace engagement, capacity building and threat information sharing. Link the community to a nationwide “community of communities” via CyberUSA to enable cross domain threat information sharing, situational awareness and enhanced security readiness across the CyberUSA ecosystem. Provide enrichment, integration and escalation to appropriate law enforcement and intelligence agencies.
Sustainable Funding: Free Market Driven
Local ISAO’s will have access to a funding model that will allow use of a marketplace development platform, a threat intelligence platform, a membership model and interconnection with the CyberUSA network of communities.
Situational Awareness: Multi Sector/Multi State
Convene State-Level coordination, in cooperation with National Council of Governors, to coordinate resilience efforts and communications infrastructure across regions, connecting at the national level.
Develop a CyberSTATE effort for each state and determine priorities, information and threat sharing opportunities within each location.
Provide rapid rollout capability to support ISAO and ISAC integration with national ISAO infrastructure utilizing available tools: Cyber Torchbearer ™ toolkit and Marketplace under development by DHS NIPP S&R program for national rollout: ISAO SO methodologies; CyberUSA Community Ecosystem Development Model.
Education, Outreach, Acceleration: Force Multipliers
CyberUSA provides a mechanism for rapid adoption, via value driven programs, integrated marketplace assessment and data collection with mapping to the NIST Framework, analysis tools for enrichment of marketplace data providing clearer understanding of capability and workforce development needs.
CyberUSA provides methods to effectively integrate local activities with the NIST National Initiative for Cybersecurity Education (NICE) program for development of education tools and assets within covered markets and jobs map. This allows close integration with academic institutions for development of appropriate education programs to address identified jobs, skills & resilience gaps.
CyberUSA will host monthly educational sessions within each region, corresponding face-to-face meeting for statewide and regional ecosystem participation, trust building, training and communication.
Each year, all states and local participants are invited to contribute to the national gathering for all regions at CyberUSA Congress to advance the priorities of the national ISAO and integrate with the national ecosystem.