:: RFC Guide to Cyber Threat Information Sharing

DRAFT Guide to Cyber Threat Information Sharing (Second Draft)

NIST requests comments on the second draft of Special Publication (SP) 800-150, Guide to Cyber Threat Information Sharing. This draft provides guidelines for establishing, participating in, and maintaining cyber threat information sharing relationships. The publication describes the benefits and challenges of sharing, the importance of building trust, the handling of sensitive information, and the automated exchange of cyber threat information. The goal of the publication is to provide guidelines that help improve cybersecurity operations and risk management activities through safe and effective information sharing practices. The guide is intended for computer security incident response teams (CSIRTs), system and network administrators, security staff, privacy officers, technical support staff, chief information security officers (CISOs), chief information officers (CIOs), computer security program managers, and other stakeholders in cyber threat information sharing activities. 

The public comment period for the publication closes on May 24rd, 2016.
Email comments to sp800-150comments@nist.gov .

Second Draft SP 800-150 (762 KB)
Comment Template Form - Second Draft SP 800-150
Apr. 21, 2016 SP 800-150