Governments often have collected and analyzed threat information in the process of providing for their national security. Both types of information, vulnerabilities and threats, can be of great value to businesses and governments should assess how, and to what extend, it should be shared with industry. Businesses generally own and operate the global information infrastructure and, as such, have primary leadership and responsibility for information security requirements, standards, design, implementation, and protection. It is of vital economic interest for businesses worldwide to cooperate with all stakeholders, public and private, to provide for a secure infrastructure to ensure consumer trust. While Protecting Privacy.
Industry manages the private sector portion of the global information infrastructure.
Industry should cooperate, company to company, in reporting and exchanging non-proprietary information concerning threats, vulnerabilities, and protective measures. Industry should also cooperate with governments in reporting attacks and incidents of cyber crime, while adhering to national law or other agreements regarding the collection, processing, and disclosure of personal data. Information Sharing With Governments. GBDe companies will work within national or regional efforts to identify when, how, and with whom this should occur. This must be consistent with national laws, recognizing that in most cases current laws do not address the potential liability concerns of industry resulting from information received from or provided to the government.