A common concern about practicing a Collective Defense strategy is whether the data sharing required to facilitate collective threat intelligence conflicts with stringent data privacy regulations, including GDPR. The reality is that data sharing for cybersecurity means sharing only anonymized metadata, which is the root of the back-end architecture needed to create a bigger picture of the threat landscape. The payoff of anonymized data sharing, which strips out any sensitive or personally identifiable information (PII) of the company through data minimization, is that it enables organizations to work together in real time. As Pereira notes, “Collective Defense doesn’t mean sacrificing anonymity. With this in mind, I would say that we need to collaborate more in defending our organizations collectively, as this is the only way we can tackle some of the greatest threats such at APTs,” which often have ties to nation states such as Russia or China.
As Founder of C5 Capital André Pienaar adds in the on-demand webinar Funding resilience: A VC’s view on the optimistic future of healthcare and cyber, “With Collective Defense, all data that flows anonymously through participating hospitals and clinics is analyzed in real-time to search for suspicious activity. Whenever a suspicious threat is detected, preventative action is taken across the network of hospitals, all the way down the supply chain, to block the attack before it occurs. This collaborative approach has completely changed the nature of cybersecurity at these hospitals.”
.png)
