WP4: CIICS Enhancements

The Work Package provides a vehicle under which enhancements to the Cyber Information and Incident Coordination System (CIICS) can take place.  CIICS scope under Work Package (WP) 1 of MN CD2 included implementation for a subset of Low Level Requirements (LLRs) desired by the sponsoring nations.  This WP completes fulfilment of all LLRs.

 

Timely information sharing of technical data is essential for the defence of modern communication and information systems (CIS) in a coalition environment. However, efficient, effective and interoperable solutions are not widely available as the security community continues to grapple with standardized formats and supporting technologies. An assessment performed within NATO on this topic highlight that an information sharing capability can now be put in place to address at least the main requirements of CSIRTs.

This information sharing capability, called CIICS, has been realized via two MN CD2 WPs.  WP1 focused mainly on the ticketing management subsystem of CIICS which supports customized incident handling workflows.  This WP, 4, focuses mainly on the information sharing subsystem of CIICS which includes the ability to share threat intelligence using STIX via a variety of mechanisms, including the TAXII protocol.  In addition to these enhancements, further improvements are being made to the ticketing subsystem; as well, linkages between to the two subsystems will be put in place.  Conclusion of this WP will realize a full ecosystem of technical information sharing for cyber defence data.

 

Nations interested in joining this WP are asked to contact the MN CD2 Project Office.