Governance of Cyber Threat Information Sharing for Public-Private Partnerships: Comparative Analysis of National Cases

Recently, national security efforts necessitated collaboration with the private sector to share cyber threat information(CTI) to respond to evolving cyber threats. However, most countries around the world do not have established cybersecurity public-private partnerships, and even in countries with cybersecurity governance, dysfunctions such as privacy breaches and conflicts in the legal system have arisen, making the role of the state even more important. To overcome these problems and successfully implement CTI-sharing with the private sector in the future, this study identifies four governance components: Organization, Legal basis, Institutional Management Measures, and Evaluation & Reward. Based on this analysis, we propose a model that can be used as a basis for developing a National framework CTI.