CISA Commits to Revitalising Threat Sharing System Following Watchdog Report

The Cybersecurity and Infrastructure Security Agency (CISA) has announced plans to enhance its Automated Indicator Sharing (AIS) programme, following a critical report from the Department of Homeland Security’s Office of the Inspector General. The report highlighted significant declines in participation and deficiencies in funding transparency, raising alarms over the efficacy of the system designed to share cybersecurity threat information.

 

CISA has seen participation in AIS plummet from 304 users in 2020 to just 135 in 2022, the lowest level since 2017. This decline has been attributed to a lack of outreach strategies to recruit and retain data contributors, alongside a 93% drop in the sharing of cyber threat indicators during the same period.

 

The inspector general’s report noted that a key federal agency halted its participation due to unspecified security concerns, yet did not disclose the agency’s identity. CISA’s lack of communication has left some stakeholders unaware of the AIS capabilities, with one entity only discovering the system through independent research.

 

Originally established under the Cybersecurity Act of 2015, AIS facilitates real-time sharing of cyber threat intelligence among public and private sectors. However, CISA’s paused outreach efforts and inability to maintain accurate spending records have hindered its effectiveness.

 

In response to the findings, CISA has pledged to actively recruit participants and improve financial documentation. The agency is also exploring new approaches to enhance its threat intelligence capabilities. An evaluation of the AIS service is set to conclude by July 2025, with plans for a spending strategy due by December 2024. CISA has emphasised its commitment to strengthening cybersecurity collaboration, as the nation’s critical infrastructure remains at risk.