7 Keys to Successful Cybersecurity Public-Private-Partnership

The "P.A.R.T.N.E.R" system is a simple formula for establishing a successful cybersecurity information sharing Public-Private Partnership (PPP) program.

What is the P.A.R.T.N.E.R system?

Platform Neutrality: A neutral non-profit entity serves as the best platform for supporting a successful partnership. Government and the private sector must be comfortable in an environment that is trusted and neutral.

Authority: Members must possess executive authority over critical internet assets and a willingness to take action. Partner members must commit resources to fund the project adequately and provide the technical expertise necessary for success.

Rules Enforced: The desire to involve law enforcement or large network providers may result in relaxed demands on participation. However, non-participating members hurt morale and limit success. Any member that does not actively participate should be excluded, regardless of the members size or brand importance.

Trust: Confidentiality must be enforced through legal agreements and technical privacy controls. No skills or data will be shared in an environment in which trust is not guaranteed.

No Open Membership: If everyone is a member, then no one benefits. Too many groups measure success by the number of members. The best measure of success should be substantive participation from a small number of active, trusted, members.

Encourage Participation: Respect the different goals of partners and encourage appropriate value return. Confidentiality can be maintained while still supporting members who desire to acknowledge their participation publicly. Encouraging benefits will encourage participation and success.

Responsive: A cyber threat on one partner will affect another partner later. Each member of the partnership must exercise care and concern for all threats, not just those affecting the specific member.

**Note: This is adapted from a 2012 BNA article co-authored by myself, Doug Depeppe, and Rich LaMagna.