As with any new platform that aims to be interoperable with multiple disparate systems, data types and organizations, there are considerable challenges. Chief among them is a lack of a unified framework, platform, and data standards for information sharing. While some organizations with advanced cybersecurity operations have implemented information-sharing platforms, most are not interoperable with those of governments and business peers. And then there is the potentially massive volume of data, which can be overwhelming and downright unmanageable. “Most organizations just end up with too much data coming in and they really can’t work out what to do with it,” said Grant Waterfall, PwC’s US and Global Co-Leader, Cybersecurity and Privacy. “This is where threat fusion centers and Advanced Security Operating Centers are absolutely critical to aggregate data and filter out false positives.” This year, 55% of survey respondents say they collaborate and share information with others to improve cybersecurity. Those that do report they gained actionable information from business peers and established Information Sharing and Analysis Centers (ISACs). A new type of group, Information Sharing and Analysis Organizations (ISAOs), which aim to help businesses share threat information with one another and the public sector, is already 17 Key findings from The Global State of Information Security® Survey 2017 © 2016 PwC

Toward new possibilities in threat management - Page 18 Toward new possibilities in threat management Page 17 Page 19