ASD offering two-way threat intelligence service

The Australian Signals Directorate is reminding agencies and business of the availability of its two-way threat intelligence service.

ASD’s Cyber Threat Intelligence Sharing (CTIS) is a sharing platform that enables government and industry partners to receive and share information about malicious cyber activity at machine speed.

ASD’s Australian Cyber Security Centre (ACSC) has partnered with Microsoft to develop a CTIS plugin for Microsoft Sentinel, and with Splunk to develop a CTIS plugin for Splunk Enterprise Security. If an agency or business is using Sentinel or Splunk Enterprise Security, it can now join and contribute to ASD’s CTIS platform. This will enable the agency or business to receive and share threat intelligence with ASD and other industry partners, and better protect business and customer data from cyber threat actors.

The cyber threat to Australia is continually growing and changing. Data from the latest ASD Cyber Threat Report shows a cybercrime is reported every six minutes, and costs to businesses impacted by cybercrime continue to rise. Collaboration across industry, business and government is key to making Australia a tough cyber target.

Proactive cyber threat intelligence sharing builds resilience across organisations to lift our national cyber defences, enabling organisations to stay ahead of cyber threats.

The ability to connect ASD’s CTIS through Microsoft’s Sentinel and Splunk platforms enables ASD to build online resilience and counter the cyber threats we collectively face.

To join CTIS, an organisation needs to be an ASD Cyber Security Network Partner. Find out more about the ASD Cyber Security Partnership Program here.

Image credit: iStock.com/Just_Super