ACTRA: A Case Study for Threat Information Sharing

This paper provides a case study for information sharing within a public/private not-for-profit partnership organization called ACTRA -- Arizona Cyber Threat Response Alliance, Inc.. This initiative is comprised of public and private entities, with government agencies as invited guests, aligned around the goal of improved response to cyber security events. Technical, political, legal and organizational issues arise when multiple parties attempt to exchange information in a formal setting. Benefits and specific solutions developed are discussed. The study concludes with several areas for future improvement and investigation, as well as recommendations for newly forming sharing groups.