Cyber risk does not observe geographic or organisational boundaries. As threats increase in frequency and complexity, it’s essential for Australian organisations to collaborate.

This paper has researched Information Sharing and Analysis Centres (ISACs) across the globe to identify what components, support and strategies are needed if Australian industry ISACs are going to represent the next generation in the uplift of Australia’s industry cyber security resilience.

Deloitte has used a combination of research, international engagement, and local industry engagement to identify four broad capability categories that Australian Industries should consider when implementing ISACs within their sectors, noting that Deloitte recognises that it won’t be a “one size fits all” approach across the Australian industry landscape.

Potential ISACs capabilities

• Threat Intelligence Sharing Services
  
• Sector Collaboration & Communication Services
• Reporting & Compliance
• Cyber Support Services

Considerations for establishing an Australian ISAC approach

• Most Australian industries have access to global ISACs, however these bodies don’t provide the regional viewpoint that Australian ISACs will
• Australian ISACs may get value out of being a chapter or member of their industry’s global equivalent
• There are existing capabilities in some industries that deliver some of the proposed capabilities. These capabilities can be reused
• While these bodies should involve government engagement, and may include government funding, it is critical for the success of these bodies that they are industry led and industry run
• These bodies shouldn’t be seen as information flow to an organisation. It should be about bi-directional information sharing to/from your organisation.

Download the research paper.