世界经济论坛（WEF）：2022网络安全信息共享对集体防御的商业必要性白皮书（英文版）（16页）.pdf

1、The Business Imperative of Cyber Information Sharingfor Our Collective DefenceC O M M U N I T Y P A P E RN O V E M B E R 2 0 2 2In collaboration with Global Resilience FederationPartnership against CybercrimeContentsForewordExecutive summaryIntroduction1 Making information sharing a C-suite prerogat

2、ive2 Managing compliance and regulatory concerns3 Defining“sharing”on a practical levelConclusionContributors34568101314Cover:Mars Yu,Getty Images Inside:Getty Images 2022 World Economic Forum.All rights reserved.No part of this publication may be reproduced or transmitted in any form or by any mean

3、s,including photocopying and recording,or by any information storage and retrieval system.DisclaimerThis document is published by the World Economic Forum as a contribution to a project,insight area or interaction.The findings,interpretations and conclusions expressed herein are a result of a collab

4、orative process facilitated and endorsed by the World Economic Forum but whose results do not necessarily represent the views of the World Economic Forum,nor the entirety of its Members,Partners or other stakeholders.The Business Imperative of Cyber Information Sharing for Our Collective Defence2For

5、ewordWhy are we still talking about cyberthreat information sharing?It is not a controversial topic.Cybersecurity professionals almost universally support increased information sharing.Scores of reports have endorsed the concept,and government policies promote the idea.Entire organizations exist to

6、enable it.In fact,the consensus on information sharing is remarkable for its consistency and durability.Yet,despite this consensus,the level of cyberthreat information sharing remains insufficient.Cleary,if everyone agrees that we should do something,but many organizations do not,we need to examine