What is EE-ISAC?
Information Sharing and Analysis Center (ISAC), the goal is to share information at a European level on vulnerabilities, threats and incidents within a trusted community. ISACs can be public, private or public-private partnerships where participants mutually exchange information and experiences on cyber security. With the intensive information sharing about and analysis of incidents, threats, trends and good practices participants can enhance their digital resilience.
As mandated by the EC, ENISA aims to provide ongoing support to sectorial ISACs, including energy.
ENISA as the facilitator of sectorial European ISACs (aligned with the NIS Directive): ENISA holds the secretariat and enables information exchange by providing tools, means and platforms for the stakeholders. In consultation with the Chair, ENISA will be able to organize workshops and support drafting annual activity bulletins.
ENISA certainly will be able to serve as the enabler of cooperation among the different EU ISACs, and foster cooperation.
European Energy Information Sharing and Analysis Centre (EE-ISAC), is an industry-driven, information sharing network of trust.
EE-ISAC main objectives and aims
-
EE-ISAC’s mission is to provide a trusted and confidential environment through which actors in the European energy ecosystem can share cybersecurity threats, vulnerabilities and incidents.
EE-ISAC key aims originals:
- Sector-specific intelligence across the energy value chain.
- The engagement of a variety of sector stakeholders.
- Access to a broad network of organizations.
- A proactive and trust-based sharing community.
- Enhancing organizational resilience and preparedness.
EE-ISAC objectives:
- Improving the resilience and security of Europe’s energy infrastructure.
- Establishing an environment of trust in which information can be shared with those responsible for the protection of the European energy system, as an element of critical infrastructure.
- Supporting the search for answers and solutions to vulnerabilities, which could otherwise be exploited.
- Preventing attacks on critical infrastructure European energy system elements by
developing and implementing “best practices”, “lessons learned” and incident response plans.
- Supporting an active community to identify and analyze threats, vulnerabilities and
incidents of unauthorized entry or manipulation of networks or software supporting critical infrastructures.
- Providing mutual support for members through discussion groups, remedial information or questions and answers.
- Allowing public-private cooperation in the field of cyber security, related to the energy sector.
The internal activity of EE-ISAC is structured into five task forces:
- Malware Information Sharing Platform (MISP).
- Threat landscape.
- Threat intelligence and incident analysis response.
- Communication and external relations.
- EU initiatives.
For more information about EE-ISAC´s features, objectives and organizations can be found on its website https://www.ee-isac.eu/