When was IT-ISAC Established?

IT-ISAC was established by leading Information Technology Companies in 2000 and achieved operational capability in 2001.

Who owns IT-ISAC?

IT-ISAC is a 501C6 Members Organization, governed by a board of members comprised of leading technology companies of all sizes from across the globe.

What relationships does IT-ISAC have with organizations outside the U.S.?

IT-ISAC members operate globally to address worldwide cyber threats. To enhance international engagement, IT-ISAC seeks participation in global cybersecurity forums and partnerships with private-sector organizations outside the U.S. As a member of FIRST, IT-ISAC provides a daily open source cyber-threat report and collaborates with ICT ISAC Japan and Taiwan CERT/CC. Additionally, IT-ISAC offers thought leadership at international conferences.

How can IT-ISAC provide value to my company?

IT-ISAC is more than another threat feed. We are a growing community of companies dedicated to actively collaborating to address cybersecurity challenges. Subject-matter experts from the world’s leading technology companies regularly discuss common security challenges, threats, and effective practices. A more complete set of member benefits is available at www.it-isac.org/benefits.

Does IT-ISAC partake in automated information sharing?

Yes. We receive automated feeds from DHS and leverage the Community Edition of the Splunk Intelligence Management platform for automated sharing with members. The platform uses the STIX/TAXII protocols and also enables automated connections through APIs. The platform is designed to work with any STIX/TAXII enabled product. Further, every indicator IT-ISAC receives is submitted into this platform so that members can pull them through an automated connection.

Does IT-ISAC receive government funding?

No. We are 100% funded by our members. For more information about our members, please visit: www.it-isac.org/members.

Will joining IT-ISAC stop my company from being attacked?

While IT-ISAC membership does not make a company immune from an attack, membership in IT-ISAC is one important component of having a robust cyberrisk strategy. IT-ISAC membership provides access to indicators from across the globe and access to some of the leading subject-matter experts in the world’s leading technology companies.

Can companies outside the U.S. become members, or is membership limited to U.S. based companies?

Yes, although when IT-ISAC was first formed it limited its membership to U.S. companies. Today, IT-ISAC has members from across the globe. The cyber threat is global, and so is our membership.

How can I join?

All members are required to complete an application and sign the IT-ISAC Member Agreement. Companies interested in joining should contact membership@it-isac.org to obtain these documents and for more information.