Information sharing concept
The sharing of information about the risks facing networks is self evidently beneficial to both government and industry. If a mechanism can exist through which one company can learn from the experiences, mistakes, and successes of another, without fear of exposing company sensitivities to competitors and the media, then every participant can improve their level of assurance.
This mechanism, called an Information Exchange, is based upon the personal trust of representatives, sharing information in a confidential meeting, run under a version of the 'Chatham House Rule'. Trust is built up slowly; representatives at Information Exchanges are expected to attend all meetings, which are held every two months. Meeting face-to-face, we are building up a trusted, relatively small community with a common interest. Each organisation can put forward a maximum of two representatives, and cannot send substitutes to attend; a stranger turning up at a meeting would inhibit the sharing of sensitive information.
Further information about individual Information Exchanges can be found in the Products and Services section of our website. Information Exchanges.
WARPs
A WARP (Warning, advice and reporting point) is a community based service for sharing up-to-date advice on information security threats, incidents and solutions. WARPs were developed by NISCC as part of its Information Sharing Strategy in recognition of the need to provide a cost-effective way to facilitate information security among a diverse range of organisations, many of which form part of the CNI.
A WARP works because its membership is a community, based on geography, technology, business need or another area of common interest. On the ground, this means that a security concern of one member is probably a concern of the other members and their WARP is the most effective way of sharing information between them.
To find out more or to get involved visit www.warp.gov.uk/.
19/07/2007