Building on his 2013 Cybersecurity Executive Order and amid growing support for the Administration’s Cybersecurity Framework – developed by the National Institute of Standards & Technology (NIST) – US President Barack Obama issued a further Executive Order to promote private sector cybersecurity information sharing. Both public and private sector cybersecurity experts have long touted enhanced, real-time information sharing as critical in rapidly recognizing and preventing cybersecurity attacks. However, proposed information sharing legislation has stalled, while reports of high profile data breaches and attacks only continue. Friday’s Executive Order calls on the Secretary of the Department of Homeland Security (DHS)  to “strongly encourage development and formation of Information Sharing and Analysis Organizations (ISAOs).” In collaboration with other federal entities, the DHS Secretary is also called on to identify and enter into an agreement with a nongovernmental organization that will develop and maintain a set of voluntary standards and guidelines under which ISAOs may function. Such standards would address issues such as member agreements, processes and procedures, technical issues and privacy protections.

White House press release