Cyware, a threat intelligence platform provider used by MSSPs, government agencies and a variety of businesses, has released new research about the benefits of collaboration and information sharing.
The company’s 2024 Threat Intelligence and Collaboration Survey, conducted with security professionals at the recent Infosecurity Europe 2024 exhibition, reveals that the overwhelming majority of organizations recognize the crucial importance of collaboration and information sharing in the fight against cybercrime. However, Cyware found that most organizations struggle to effectively combine insights across teams and security platforms.
Specifically, 91% of respondents said collaboration and information sharing are very important or absolutely crucial for cybersecurity. In addition, 70% believe their organization could improve threat intelligence sharing, with 19% saying they could share significantly more.
However, 53% of respondents said their organization does not currently utilize an information sharing and analysis center (ISAC), underlining the shortcomings of the way most security teams approach threat intelligence. Also, 28% said they were unaware of the existence and role of ISACs altogether.
When asked to identify the weakest link in their approach to cybersecurity information sharing and collaboration, 51% said people are the main barrier to improvement, followed by processes (21%) and technologies (11%). Taking all these factors into account, 49% of respondents said that their organizations struggle to combine and derive actionable insights across multiple security tools, such as threat intelligence platforms, SIEM, asset management, and vulnerability management platforms.
Looking at the emerging role of AI in improving or reducing an organization’s ability to share threat intelligence, 65% thought it would improve their organization’s ability to share information. Meanwhile, 35% said the technology is already having an impact.
Other key research findings include:
- 70% said their organizations could share more threat intelligence. Only 23% said they are currently sharing the right amount of information, and just 2% thought they were sharing too much.
- Asked which teams are least likely to share threat intelligence with other departments, DevOps (31%) emerged as the top answer, followed by security ops (17%), threat intelligence (16%) and IT ops (15%).
- 23% of teams share threat intelligence on a daily basis, 21% in real-time, 17% weekly and 14% monthly.
Cyware Chief Information Security Officer Terrence Driscoll sees a disconnect between teams and the siloed approach taken around the use of security tools. He believes that a siloed approach “poses a serious threat” to the delivery of threat intelligence.
“What’s required instead is the proactive approach offered by creating virtual and distributed cyber fusion centers where traditionally siloed security functions are scalable and integrated, combining high-fidelity threat intelligence with threat operations for rapid threat response,” Driscoll said in a statement.
Cyware Quarterbacks AI-Powered Security
In May 2024, Cyware launched Cyware Quarterback, an AI-powered interface that provides its enterprise customers and network members, MSSPs included, as a way to efficiently perform actions on their security infrastructure.
Additionally, Cyware Quarterback can also generate responses with various large language models (LLMs). One of its unique capabilities is the ability to compare responses from various LLMs to implement comprehensive analysis of security incidents.
In a leadership related move, Cyware appointed Stephan Tallent in April 2024 as the new head of MSSPs. Cyware said Tallent’s appointment will fuel Cyware’s channel-first strategy. He brings with him decades of experience at companies that include High Wire Networks, Stellar Cyber and Fortinet.
