How ISAOs improve prospects for information sharing ISAOs present a new opportunity for businesses to band together and better understand the threat landscape, make more informed investments to address the most significant cyber-risks and rapidly adjust security controls to address emerging threats. The resulting improvements in cybersecurity could increase the cost of doing business for hackers in a way that benefits an entire economy. ISAOs provide a uniquely powerful model for cybersecurity information sharing, with the following potential benefits: • Creating a trusted and connected network that significantly strengthens an individual organization’s capabilities for identifying and mitigating cyber-risks. • Quickly delivering actionable cyberthreat intelligence to support measurable cybersecurity improvements. • Lowering cost and barriers of entry for cybersecurity information sharing. • Enhancing and simplifying cybersecurity information management, analysis and intelligence. • Qualifying members for legal protections from certain liability, anti-trust and regulatory enforcement actions. • Helping meet or exceed regulators’ rising expectations for cyber-risk mitigation at a time in which company executives are increasingly held accountable for breaches. • Transforming business models for information sharing to increase economies of scale. 20 Key findings from The Global State of Information Security® Survey 2017 © 2016 PwC

Toward new possibilities in threat management - Page 21 Toward new possibilities in threat management Page 20 Page 22