Unofficial copy of the text drafted for PM-ISE's Standards Coordinating Council (standardscoordination.org), in response to the US DHS request for comment in March 2015 on implementation aspects of White House Executive Order 13691.

1. UNOFFICIAL TEXT
PM-ISE statement for submission to US DHS request for comments
on White House Executive Order 13691 on ISAOs
(See DHS NOTICE FR Doc. 2015-04435, at
https://www.federalregister.gov/articles/2015/03/04/2015-04435/office-of-
cybersecurity-and-communications-national-protection-and-programs-directorate-
notice-of)
"The Standards Coordinating Council (SCC) is an advisory working group to the
Information Sharing and Access Interagency Policy Committee, co-chaired by the
Program Manager for the Information Sharing Environment (www.ise.gov), and
composed of open standards consortia and participating standards stakeholders:
www.standardscoordination.org The SCC provides a forum for cooperation among
open standards communities for identification of, and research on, open standards
and standards projects that support data transactions and exchanges useful to its
information sharing and safeguarding goals and objectives.
SCC's Project Interoperability, which can be accessed at
www.standardscoordination.org/project_interoperability, is a developing
community resource under which participating stakeholders are sharing methods
and use cases, and working towards an agreed common set of architectures and
practices for data sharing and governance.
SCC members believe that successful, widespread cyber risk information sharing, as
contemplated by the February 2015 White House executive order
(https://www.whitehouse.gov/the-press-office/2015/02/13/executive-order-
promoting-private-sector-cybersecurity-information-shari) can and will work, when
grounded in a voluntary, shared set of well-defined agreements and protocols, using
open standards that permit broad adoption and self-governance by sharing
communities. These standards are likely to embrace both technical data methods,
and business process and legal standards for risk sharing, information governance,
privacy protection and voluntary cooperation among independent public and
private parties. The best available standards and practices, in both cases, are likely
to come from more than one organization, and embrace multiple methods and
technologies. Also, cyber risk is global; similar information sharing activities are
underway in multiple regions and jurisdictions, sharing many of the same threats,
and providing additional potentially-relevant methodologies. The SCC is focused on
developing articulated guidance and options for implementing public- and private-
sector sharing communities: we will continue to publish and share our work with
DHS and all stakeholders, as resources to help achieve that goal."