DHS and DOJ Release Updated Guidance for Sharing Cyber Threat Indicators and Defensive Measures

On June 15, in response to feedback from non-federal entities on guidance released in February, the Departments of Homeland Security (DHS) and Justice (DOJ) issued updated guidance for companies about sharing cyber threat indicators and defensive measures with the federal government under the Cybersecurity Information Sharing Act (CISA).

The new guidance identifies:

• the types of information that qualify as a cyber threat indicator that would be unlikely to include information that is not directly related to a cybersecurity threat and is personal information of a specific individual or information that identifies a specific individual; and
• information protected under otherwise applicable privacy laws that are unlikely to be directly related to a cybersecurity threat.