Information Sharing Platform
On this Page
UAE-FS-ISAC is equipped with a centralized threat intelligence platform (TIP) that can connect various UAE Financial institutions and UAE Government entities to share threat intelligence information efficiently and securely.
As attackers step up with their tactics to act upon financial motives and target financial institutions continuously, there is a requirement to identify and establish standard information exchange channels. Specific challenges:
Â
- No centralised platform to exchange threat intelligence data between the UAE financial sector and Government entities.
- Absence of standard sharable data format which is enriched, machine readable, accurate and relevant to the context.
Mission and Vision
-
Creating and establishing secure infrastructure that enables the sharing and dissemination of intelligence with peers.
-
Providing immediate information on major or crisis-level incidents related to the industry and/or its members.
-
Permitting all peer members to have the capability to submit threat information or other artifacts voluntarily.
-
Utilising the sector's vast resources (people, process, and technology) to aid the entire industry with situational awareness and advance warning of new physical and cyber security threats, incidents and challenges.
The Central Bank of UAE encourages financial institutions to be part of the community to communicate and share indicators of compromise, phishing campaigns, and other potential attack information with the community for awareness, and to implement relevant preventive measures.
Kindly download, complete and send the document to the following email: [email protected]
Participants can create events related to cyber incidents and share them across the community via MISP. Below are the types of threat information that could be shared:
Â
- Indicators of Compromise (IOCs): such as malicious files, suspected or compromised email addresses, malicious IP addresses, or malware samples; or information about threat actors.
- Modus operandi, Tactics, Techniques, and Procedures (TTP): Awareness of cyber-criminal behaviour and understanding their tactics, techniques and procedures (TTP).
- Attributing factors: Information about the threat observed such as internet address, location, any names and/or any other information associated with the threat.
- Cyber-threat intelligence and analysis:Â Gather and analyse threat intelligence from various sources and types of information to build reports, metrics, trends, and projections.
- Best practice awareness and lessons learned: Information on enhancing security management systems and/or security controls.
- Tool Configurations: Recommendations for setting up and using tools (mechanisms) that support the collection, exchange, processing, analysis, and use of cyber-threat information.
Last updated on: Monday 09 October 2023
Total visitors 6701
Rate this page
Rated by 2 People
Thanks for rating