Working Group 5: Cybersecurity Information Sharing

Status UpdateDecember 3, 2015

Christopher Boyer, Co-Chair (AT&T)Rod Rasmussen, Co-Chair (IID)Brian Allen, Co-Chair (Time Warner Cable)

2

WG5 Description

• In order to improve the communication sector’s ability to identify, protect, detect, respond, and recover from cyber attacks, Working Group 5 will develop recommendations to the Council encourage sharing of cybersecurity information between companies in the communications sector.

3

WG5 MembersName Company Name (cont.) Company (cont.)Chris Boyer (Co-Chair) AT&T Robert Gessner MCTVRod Rasmussen (Co-Chair) IID Mark Hoffer MCTVBrian Allen (Co-Chair) Time Warner Cable Michael Robinson MCTVGreg Intoccia (FCC Liaison) FCC Bill Mertka Motorola (ATIS)Vern Mosley (FCC Liaison) FCC Larry Walke NABMartin Dolly AT&T (ATIS) Loretta Polk NCTATrace Hollifield Bright House Networks Matt Tooley NCTAKathryn Condello CenturyLink Dr. Donald H. Sebastian NJ Institute of TechPaul Diamond CenturyLink Frank Menzer NOAAMary Haynes Charter Kathy Whitbeck NsightJohn Kelly Comcast Cable Jesse Ward NTCAJorge Nieves Comcast Cable Kazu Gomi NTT AmericaPaul Fournier Comcast Cable Shinichi Yokohama NTT AmericaRudy Brioche Comcast Cable Michael Brown RSAKevin Kastor Consolidated Richard Perlotto II ShadowserverJemin Thakkar Cox Communications Jason Jenkins SilverStarMatt Carothers Cox Communications Allison Growney SprintJohn Marinho CTIA Brian Scarpelli TIAChris Alexander DHS Joe Viens Time WarnerJohn O'Connor DHS Chris R. Roosenraad Time Warner CableAlexander Gerdenitsch Echostar Arthur “Trey” Jackson T-MobileJennifer Manner Echostar Cindy Carson T-MobileDavid Colberg EMC Howard Salters T-MobileDaniel Cashman FairPoint Communications Robert Mayer US TelecomCarlos Carrillo FireEye Eric Osterweil VerisignThomas M. MacLellan FireEye Shawn Wilson VerisignTony Cole FireEye Nneka Chiazor VerizonDave Keech Frontier Dorothy A. Spears-Dean VITAEthan Lucarelli Iridium (Wiley Rein) Greg Lucak WindstreamMichael O'Reirdan MAAWG Kelly Fuller WOW, Inc.

4

WG5 Organization

• WG5 will focus on four study efforts to develop the recommendations:

(1) Use Cases,

(2) Information Sharing Barriers,

(3) Optimal Sharing “Trust Pools,” and

(4) Conduits for Information Sharing

5

WG5 Deliverables

• Dec 2015 - Cybersecurity Information Sharing Diagram

• Mar 2016 - Use Cases

• Jun 2016 - Impediments/Barriers and Solutions to Cybersecurity Information Sharing

• Sep 2016 - Cybersecurity Information Sharing “Trust Pools”

• Dec 2016 - Cybersecurity Information Sharing Platforms

• Mar 2017 - Recommendations for Cybersecurity Information Sharing

6

• Agreed to recurring weekly calls

• Held face-to-face meeting on November 4, 2015

– Reviewed WG5 Description, agreed on deliverables and milestones

– Focused on Cybersecurity Information Sharing Diagram

• In process of identifying examples of information that may be shared based on the Cybersecurity Information Sharing Diagram

WG5 Status

7

WG5 Status (cont.)

8

Dec 2015 - Cybersecurity Information Sharing Diagram

• Mar 2016 - Use Cases

• Jun 2016 - Impediments/Barriers and Solutions to Cybersecurity Information Sharing

• Sep 2016 - Cybersecurity Information Sharing “Trust Pools”

• Dec 2016 - Cybersecurity Information Sharing Platforms

• Mar 2017 - Recommendations for Cybersecurity Information Sharing

WG5 Timeline

9

Next Steps

• Finalize WG5 membership

• Focus on preparing Baseline and Draft Use Cases in preparation for March 2016 Deliverable – Use Cases

• Schedule another face-to-face meeting in 1Q2016 timeframe

• Provide periodic status updates to Steering Committee and Council