Does your organization voluntarily share information about observed threat actor tactics, techniques, and procedures (TTPs) with an Information Sharing and Analysis Center (ISAC) or similar industry group after removing sensitive data?

Sharing sanitized threat intelligence about attacker TTPs helps strengthen the collective security posture of your industry by allowing other organizations to prepare defenses against similar attacks. This collaborative approach enables faster identification of emerging threats and more effective response strategies across the sector.

Evidence of fulfillment could include documentation of ISAC membership, logs or records of information shared (with sensitive data removed), internal policies governing threat intelligence sharing, or correspondence with ISAC representatives confirming your organization's participation in information sharing activities.