Can We Evaluate the Impact of Cyber Security Information Sharing?

Once concentrated on protecting critical infrastructure, cyber security information sharing efforts have evolved in recent years to include many industries and have resulted in the current complex constellation of situational awareness sharing efforts on various levels. They have also yielded a plethora of cyber threat intelligence sharing technologies. Yet, despite the proliferation of these efforts and technologies, the literature on the ability to measure the value and the impact of cyber security information sharing remains limited. We aim to address the lack of empirical studies by using a triangulated mixed-methods research design to explore stakeholder attitudes towards cyber security information sharing benefits and risks, and to investigate the impact of this sharing on the productivity and performance of cyber security analysts.