ADAM FEDERMAN
What if the private sector banded together to create its own intelligence sharing networks exempt from FOIA law and public accountability?
In the last decade a number of different industries ranging from financial services and health care to nuclear energy and defense have created what are known as Information Sharing and Analysis Centers (ISACs). They allow member companies to share information anonymously without fear that it will be subject to FOIA requests or anti-trust violations. Now the oil and gas industry is getting in on the act.
In late June, the oil and gas industry announced the creation of an ISAC. According to the group’s website the ONG-ISAC, “is being created to provide shared intelligence on cyber incidents, threats, vulnerabilities, and associated responses present throughout our industry.” The website explains that the analysis center is built around four core principles, among them, “anonymous submissions” and “protection from FOIA disclosure and anti-trust violations.” This is apparently a hallmark of private sector intelligence-sharing networks, even though they continue to share information with government agencies. An ISAC primer published by Booz Allen Hamilton states, “ISACs operate in a manner to protect members from anti-trust violations and Freedom of Information Act queries.”
David Frazier, the chairman of the newly formed ONG-ISAC and director of information technology for Halliburton, told a cybersecurity website that the group, “Will provide industry participants a secure way to share information and stay connected with law enforcement agencies.” So far, according to the Houston Chronicle, at least 25 oil and gas companies have signed on, with membership rates ranging from $2,000 to $50,000 a year.