Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

SP 800-150 (Draft)

Guide to Cyber Threat Information Sharing

Date Published: April 2016
Comments Due: May 24, 2016 (public comment period is CLOSED)
Email Questions to:


Christopher Johnson (NIST), Mark Badger (NIST), David Waltermire (NIST), Julie Snyder (MITRE), Clem Skorupka (MITRE)


NIST requests comments on the second draft of Special Publication (SP) 800-150, Guide to Cyber Threat Information Sharing. This draft provides guidelines for establishing, participating in, and maintaining cyber threat information sharing relationships. The publication describes the benefits and challenges of sharing, the importance of building trust, the handling of sensitive information, and the automated exchange of cyber threat information. The goal of the publication is to provide guidelines that help improve cybersecurity operations and risk management activities through safe and effective information sharing practices. The guide is intended for computer security incident response teams (CSIRTs), system and network administrators, security staff, privacy officers, technical support staff, chief information security officers (CISOs), chief information officers (CIOs), computer security program managers, and other stakeholders in cyber threat information sharing activities.



cyber threat information sharing; indicators; information security; cyber threat; information sharing
Control Families

Incident Response; System and Information Integrity