Information Sharing (Cyber Threat Intelligence)

Information sharing is the fifth pillar of DORA, recognizing that individual organizations benefit from collective threat intelligence. By sharing information about cyber threats, vulnerabilities, and attack techniques, financial entities can better prepare for and respond to emerging threats.

DORA Article 45 establishes a framework for voluntary information sharing among financial entities, subject to appropriate safeguards. Shared information may include indicators of compromise (IoCs), tactics, techniques and procedures (TTPs), security alerts, and configuration tools. Organizations must ensure that information sharing respects confidentiality, protects personal data, and doesn't compromise competitive positions.

Effective information sharing typically operates through sector-specific Information Sharing and Analysis Centers (ISACs), bilateral agreements between organizations, regulatory sharing mechanisms, and threat intelligence platforms. For the European financial sector, organizations like the European Financial ISAC (FI-ISAC) facilitate structured information exchange.