E-EWS-based Governance Framework for Sharing Cyber Threat Intelligence in the Energy Sector
Jyri Rajamäki, Asfaw Feyesa, Anup Nepal · European Conference on Cyber Warfare and Security · 2024
The integration of traditional energy technologies with modern digital technologies increases the risks of cyber-attacks and data breaches. Sharing cyber threat intelligence (CTI) is important for the common defense. The DYNAMO project has chosen the ECHO Early Warning System (E-EWS) as a tool for CTI information sharing. The management of E-EWS becomes the basis for guiding the ethical and efficient operation of the DYNAMO platform and the wider energy sector. The governance framework defines roles, responsibilities, and procedures that are tailored to sharing information, enhancing collaboration, and ensuring the integrity of shared information. Effective governance promotes transparency, compliance, and trust among stakeholders, which ultimately strengthens the security posture of the DYNAMO platform and improves the energy industry's resilience against cyber threats. This paper proposes a governance framework for the DYNAMO platform, including a committee, data security policies, and NIS2 and GDPR compliance. It emphasizes user-friendly collaboration tools, access control, continuous monitoring, stakeholder training, compliance, and phased implementation. The goal is iterative improvements through continuous evaluation.