Your English writing platform
Discover LudwigExact(13)
The law also allows "communications between a Federal entity and a non-Federal entity regarding a previously shared cyber threat indicator to describe the relevant cybersecurity threat or develop a defensive measure based on such a threat indicator" to receive liability protection.
A "cyber threat indicator" means information that is "necessary to describe or identify" a variety of listed threats, including "malicious reconnaissance" and methods of exploiting a security vulnerability or causing a legitimate user to unwittingly enable such exploitation.
When a company receives a threat indicator or defensive measure from another party, it must comply with any lawful restrictions the sharing entity imposes on sharing or using that information.
In determining what information to share, a company should evaluate whether a cyber threat indicator or defensive measure implicates sensitive business information, and exercise particular care in evaluating the costs and benefits of sharing this information.
CISA provides that a company must remove any information from a cyber threat indicator that it knows at the time of sharing to be "personal information of a specific individual or information that identifies a specific individual" that is not "directly related" to a cybersecurity threat.
CISA does not explicitly require companies to review and remove such personal information from "defensive measures," but the Guidance encourages companies to do so, and, importantly, takes the position that a defensive measure may itself contain a cyber threat indicator that is subject to CISA's review and removal requirements.
Similar(47)
Share or Receive Cyber Threat Indicators or Defensive Measures.
Guidance to Assist Non-Federal Entities to Share Cyber Threat Indicators and Defensive Measures with Federal Entities Under the Cybersecurity Information Sharing Act of 2015.
The aim of this paper was to assess vulnerability of wetland ecosystem services and to characterize the threat indicators according to importance, severity, and probability of occurrence.
The different combinations of biodiversity and threat indicators allowed us to set differential priorities for biodiversity conservation and assess their spatial variation.
We then use this framework to examine the feasibility of monitoring species and threat indicators in a community-based biodiversity payment scheme in Menabe, Madagascar.
Write better and faster with AI suggestions while staying true to your unique style.
Since I tried Ludwig back in 2017, I have been constantly using it in both editing and translation. Ever since, I suggest it to my translators at ProSciEditing.

Justyna Jupowicz-Kozak
CEO of Professional Science Editing for Scientists @ prosciediting.com