PESCO PROJECTS

CYBER THREATS AND INCIDENT RESPONSE INFORMATION SHARING PLATFORM (CTIRISP)

Cyber Threats and Incident Response Information Sharing Platform will develop more active defence measures, potentially moving from firewalls to more active measures.

This project aims to help mitigate these risks by focusing on the sharing of cyber threat intelligence through a networked Member State platform, with the aim of strengthening nations’ cyber defence capabilities.

PROJECT DESCRIPTION

The acknowledgement of Cyberspace as a military domain of operation implies an increasing need for Cyber Threats information sharing, to help EU Member States to efficiently cope with the constantly evolving Cyber Threat Landscape. The project aims at the sharing of cyber threats information, the strengthening of MS cyber defence capability and the strengthening of response in cyber incidents, demanding multinational cooperation.

OBJECTIVES/PRODUCTS

The short-term objectives of the project are: Define the cyber threat landscape; Study and assess the existing open-source threat intelligence information sharing solutions among EU MS; Review the existing information sharing procedures at the EU level; and Legal Issues.

The mid-term objectives: Threat Intelligence Platform development (MISP modules and EDR information sharing agents); Develop a harmonized information sharing and incident response framework, at the EU level; Further optimize the methods and procedures reviewed previously.

The long-term objectives: Cyber threat intelligence platform evaluation; Evaluate the new tactics and procedures; Cyber threat Intelligence-driven Incident Response (Active Defence) training; Project Dissemination.