Cyber Threat Intelligence Coordinating Group (CTICG)
Since its establishment, the Multi-State Information Sharing and Analysis Center (MS-ISAC) -- which serves as the central cyber security resource for our nation's state, local, territorial and tribal governments -- recognized the need for collaboration with physical security partners and actively pursued a collaborative relationship with physical security partners within the states -- including homeland security directors and law enforcement--many of whom participate in the MS-ISAC.
About the CTICG
In order to further the collaborative efforts of the MS-ISAC and strengthen information sharing, the MS-ISAC Chair, in collaboration with the New York State Police and the FBI, established the Cyber Threat Intelligence Coordinating Group (CTICG) as a means to facilitate valuable situational awareness and identification of interrelationships between physical and cyber security activities.
The group has been incredibly successful in breaking down the traditional barriers for true information sharing -- taking threat intelligence and making it actionable.
CTICG Participation
The CTICG comprises law enforcement, government and private sector entities with a vested interest in cyber or physical security.
The CTICG currently includes representatives from the following entities:
- Federal Bureau of Investigation
- Federal Energy Regulatory Commission
- National Security Agency
- U.S. Air Force
- U.S. Department of Homeland Security
- National Cyber Security Division
- Intelligence and Analysis
- ICE Homeland Security Investigations
- U.S. Department of Justice
- U.S. Secret Service
- State of New York (Office of Cyber Security, Office of Counter Terrorism, NYS Intelligence Center)
- NY State Police
- NJ State Police
- Local Police Departments
CTICG Activities
The CTICG conducts monthly classified briefings for situational awareness and to identify opportunities for collaboration. CTICG members partner on myriad investigations, including sharing intelligence about IP addresses and other data to facilitate malware investigations, and assisting in identifying attack origins. The MS-ISAC's new forensic lab is used to assist in cyber cases among the CTICG members.
The group is also working on a cyber asset mapping project to help better identify where physical and cyber assets coexist, assess the impacts of potential incidents and identify strategies for mitigating those risks.
The CTICG has issued white papers on a number of cyber security topics including wire transfer fraud, social media threats and zero-day exploits. These briefings are made available publicly.
Because of the successful information sharing approach of the CTICG, several of its members have detailed intel specialists to co-locate to the MS-ISAC headquarters including the FBI and US Secret Service.
CTICG Advisories and Whitepapers