1 1 00:00:00,390 --> 00:00:01,380 Information Sharing 2 2 00:00:01,380 --> 00:00:04,050 and Analysis Centers, ISACS. 3 3 00:00:04,050 --> 00:00:07,020 Information Sharing and Analysis Centers began back 4 4 00:00:07,020 --> 00:00:11,040 in the 1990s as a form of a public-private partnership 5 5 00:00:11,040 --> 00:00:12,840 here in the United States. 6 6 00:00:12,840 --> 00:00:16,110 Now, for each critical industry, an ISAC was set up. 7 7 00:00:16,110 --> 00:00:19,350 An ISAC is a not-for-profit group set up to share 8 8 00:00:19,350 --> 00:00:21,210 sector specific threat intelligence 9 9 00:00:21,210 --> 00:00:24,090 and security best practices among its members. 10 10 00:00:24,090 --> 00:00:27,111 Now, these were set up here in the United States, 11 11 00:00:27,111 --> 00:00:30,600 but over in the UK they have a similar thing known as CSIP, 12 12 00:00:30,600 --> 00:00:33,570 which is the Cybersecurity Information Sharing Partnership. 13 13 00:00:33,570 --> 00:00:36,180 And this serves a similar purpose over there. 14 14 00:00:36,180 --> 00:00:38,370 Now, as I said there is an ISAC 15 15 00:00:38,370 --> 00:00:40,500 for many different industries. 16 16 00:00:40,500 --> 00:00:43,110 For instance, there's one for critical infrastructure. 17 17 00:00:43,110 --> 00:00:44,250 One for government. 18 18 00:00:44,250 --> 00:00:45,450 One for healthcare. 19 19 00:00:45,450 --> 00:00:46,530 One for financial. 20 20 00:00:46,530 --> 00:00:48,150 And one for aviation. 21 21 00:00:48,150 --> 00:00:50,070 These are the ones we're going to cover in this lesson 22 22 00:00:50,070 --> 00:00:52,170 but there are many other ones out there. 23 23 00:00:52,170 --> 00:00:55,380 For the exam you don't need to go too deep into an ISAC 24 24 00:00:55,380 --> 00:00:58,590 just to know that they exist and the basics of them. 25 25 00:00:58,590 --> 00:01:01,080 So let's talk about critical infrastructure first. 26 26 00:01:01,080 --> 00:01:03,150 What is critical infrastructure? 27 27 00:01:03,150 --> 00:01:05,220 Well, critical infrastructure is defined by the 28 28 00:01:05,220 --> 00:01:07,890 Department of Homeland Security here in the United States. 29 29 00:01:07,890 --> 00:01:11,040 They define it as any physical or virtual infrastructure 30 30 00:01:11,040 --> 00:01:13,410 that is considered so vital to the United States 31 31 00:01:13,410 --> 00:01:16,530 that their incapacitation or destruction would have 32 32 00:01:16,530 --> 00:01:18,780 a debilitating effect on security, 33 33 00:01:18,780 --> 00:01:20,580 national economic security, 34 34 00:01:20,580 --> 00:01:22,380 national public health or safety, 35 35 00:01:22,380 --> 00:01:24,480 or any combination of these. 36 36 00:01:24,480 --> 00:01:27,420 Basically, these are really important things. 37 37 00:01:27,420 --> 00:01:29,190 These include the chemical sector, 38 38 00:01:29,190 --> 00:01:31,080 the commercial facility sector, 39 39 00:01:31,080 --> 00:01:32,670 the communication sector, 40 40 00:01:32,670 --> 00:01:34,710 the critical manufacturing sector, 41 41 00:01:34,710 --> 00:01:36,060 the dam sector, 42 42 00:01:36,060 --> 00:01:38,070 the defense industrial based sector, 43 43 00:01:38,070 --> 00:01:40,020 the emergency services sector, 44 44 00:01:40,020 --> 00:01:41,460 the energy sector, 45 45 00:01:41,460 --> 00:01:43,350 the financial services sector, 46 46 00:01:43,350 --> 00:01:45,420 food and agriculture sector, 47 47 00:01:45,420 --> 00:01:47,340 government facility sector, 48 48 00:01:47,340 --> 00:01:49,320 healthcare and public health sector, 49 49 00:01:49,320 --> 00:01:51,360 information technology sector, 50 50 00:01:51,360 --> 00:01:54,030 nuclear reactors, materials and waste sector, 51 51 00:01:54,030 --> 00:01:55,770 transportation systems sector 52 52 00:01:55,770 --> 00:01:58,680 and water and wastewater systems sector. 53 53 00:01:58,680 --> 00:02:01,530 These are the 16 critical infrastructures that are listed 54 54 00:02:01,530 --> 00:02:03,450 by the Department of Homeland Security. 55 55 00:02:03,450 --> 00:02:06,120 Again, for the exam, you do not need to memorize 56 56 00:02:06,120 --> 00:02:08,820 all 16 of these, but you should understand that 57 57 00:02:08,820 --> 00:02:10,260 these are really important things 58 58 00:02:10,260 --> 00:02:11,850 and we want to make sure they're secure. 59 59 00:02:11,850 --> 00:02:14,250 And so as a cybersecurity analyst, there are a lot of 60 60 00:02:14,250 --> 00:02:17,880 people working in these 16 sectors around the country. 61 61 00:02:17,880 --> 00:02:21,000 Now, if you happen to be working for one of these 16 sectors 62 62 00:02:21,000 --> 00:02:23,760 you're probably going to be dealing with a lot of ICS, SCADA 63 63 00:02:23,760 --> 00:02:27,390 and embedded systems because these are a main focus within 64 64 00:02:27,390 --> 00:02:30,180 critical infrastructure and therefore the threats against 65 65 00:02:30,180 --> 00:02:33,510 them are a big concern for you as a cybersecurity analyst. 66 66 00:02:33,510 --> 00:02:36,660 The next ISAC we want to talk about is the government. 67 67 00:02:36,660 --> 00:02:37,920 Now, the government has their own, 68 68 00:02:37,920 --> 00:02:40,230 and we're not talking about the federal government here. 69 69 00:02:40,230 --> 00:02:43,380 Instead, this government ISAC is focused on serving 70 70 00:02:43,380 --> 00:02:46,080 non-federal governments in the United States. 71 71 00:02:46,080 --> 00:02:48,510 Such as the state, local, tribal 72 72 00:02:48,510 --> 00:02:50,070 and territorial governments. 73 73 00:02:50,070 --> 00:02:53,010 For example, my company is based out of Puerto Rico 74 74 00:02:53,010 --> 00:02:55,260 which is a territory of the United States. 75 75 00:02:55,260 --> 00:02:58,320 So our government is a territorial government and they work 76 76 00:02:58,320 --> 00:03:01,320 as part of this ISAC with the federal government in this 77 77 00:03:01,320 --> 00:03:03,630 public-private partnership to make sure they're 78 78 00:03:03,630 --> 00:03:05,430 being served and they understand what threats are 79 79 00:03:05,430 --> 00:03:06,780 against their government. 80 80 00:03:06,780 --> 00:03:09,600 The next ISAC we're going to talk about is healthcare. 81 81 00:03:09,600 --> 00:03:12,090 This ISAC serves healthcare providers that are often 82 82 00:03:12,090 --> 00:03:14,640 targets of criminals who are seeking to blackmail them 83 83 00:03:14,640 --> 00:03:17,520 or looking for ransom opportunities by compromising 84 84 00:03:17,520 --> 00:03:20,880 patient data records or interfering with medical devices. 85 85 00:03:20,880 --> 00:03:23,880 As you saw earlier, healthcare is considered one of the 86 86 00:03:23,880 --> 00:03:26,220 critical infrastructures inside this country. 87 87 00:03:26,220 --> 00:03:29,030 But then we have this separate ISAC here to help 88 88 00:03:29,030 --> 00:03:30,180 support healthcare providers directly. 89 89 00:03:30,180 --> 00:03:33,450 Next, we have financial and this serves the financial sector 90 90 00:03:33,450 --> 00:03:36,000 to prevent fraud and extortion of both the consumer 91 91 00:03:36,000 --> 00:03:37,860 and the financial institutions. 92 92 00:03:37,860 --> 00:03:40,530 For example, we want to make sure we're getting information 93 93 00:03:40,530 --> 00:03:42,870 about anybody who's trying to affect a major trading 94 94 00:03:42,870 --> 00:03:45,630 platform like the NASDAQ or the stock market 95 95 00:03:45,630 --> 00:03:47,520 or somebody who might be able to go after ATMs 96 96 00:03:47,520 --> 00:03:49,500 to have them give out money for free. 97 97 00:03:49,500 --> 00:03:51,900 All of these could pose a national security risk 98 98 00:03:51,900 --> 00:03:54,360 or an economic risk to our country. 99 99 00:03:54,360 --> 00:03:56,550 And finally, we have aviation. 100 100 00:03:56,550 --> 00:03:59,280 Aviation is focused on serving the aviation industry 101 101 00:03:59,280 --> 00:04:02,310 to prevent fraud, terrorism, service disruptions 102 102 00:04:02,310 --> 00:04:05,820 and unsafe operations of air traffic control systems. 103 103 00:04:05,820 --> 00:04:08,670 Again, this is an area we don't want to have problems in 104 104 00:04:08,670 --> 00:04:10,410 because if somebody could take over the air traffic 105 105 00:04:10,410 --> 00:04:12,450 control system they could start crashing planes 106 106 00:04:12,450 --> 00:04:15,000 into each other and that would be a really bad day for us. 107 107 00:04:15,000 --> 00:04:17,610 So obviously these are things that we have to worry about 108 108 00:04:17,610 --> 00:04:19,830 and so there's an ISAC set up to help support the 109 109 00:04:19,830 --> 00:04:22,030 aviation industry in the fight against this.