About the Trusted Information Sharing Network
The Trusted Information Sharing Network (TISN) is a forum in which the owners and operators of critical infrastructure can work together by sharing information on security issues which affect critical infrastructure. The network is made up of a number of Infrastructure Assurance Advisory Groups (IAAGs) for different business sectors, and overseen by the Critical Infrastructure Advisory Council (CIAC).
Links:
About Critical Infrastructure
The Australian Government defines critical infrastructure as those physical facilities, supply chains, information technologies and communication networks that, if destroyed, degraded or rendered unavailable for an extended period, would significantly impact on the social or economic well-being of the nation or affect Australia’s ability to conduct national defence and ensure national security.
About Critical Infrastructure Protection
In some parts of Australia, up to 90 per cent of critical infrastructure is privately owned, or operated on a commercial basis.
CIP brings together a significant number of existing strategies, plans and procedures that deal with the prevention, preparedness, response and recovery arrangements for disasters and emergencies. It is not a new discipline, but is a coordinated blending of existing specialisations, including:
- law enforcement and crime prevention
- counter terrorism
- national security and defence
- emergency management, including the dissemination of information
- business continuity planning
- protective security (physical, personnel and procedural)
- e-security
- natural disaster planning and preparedness
- risk management
- professional networking, and
- market regulation, planning and infrastructure development.
CIP requires the active participation of the owners and operators of infrastructure, regulators, professional bodies and industry associations, in cooperation with all levels of government, and the public. To ensure this cooperation and coordination, all of these participants should commit to the following set of common, fundamental principles of CIP. These principles are to be read as a whole, as each sets the context for the one following.
- CIP is centred on the need to minimise risks to public health, safety and confidence to ensure Australia’s economic security and maintain our international competitiveness, and to ensure the continuity of government and its services.
- The objectives of CIP are to identify critical infrastructure, analyse vulnerability and interdependence, and protect Australia from, and prepare for, all hazards.
- Because all critical infrastructure cannot be protected from all threats, appropriate risk management techniques should be used to determine relative severity and duration, the level of protective security, and to set priorities for the allocation of resources and the application of the best mitigation strategies for business continuity.
- The responsibility for managing risk within physical facilities, supply chains, information technologies and communication networks primarily rests with the owners and operators.
- CIP needs to be undertaken with an ‘all hazards approach’, with full consideration of interdependencies between businesses, sectors, jurisdictions and government agencies.
- CIP requires a consistent, cooperative partnership between the owners and operators of critical infrastructure and governments.
- The sharing of information relating to threats and vulnerabilities will assist governments, and owners and operators of critical infrastructure, to better manage risk.
- Care should be taken, when referring to national security threats to critical infrastructure, including terrorism, to avoid causing undue concern in the Australian domestic community and to potential tourists and investors overseas.
- Stronger research and analysis capabilities can ensure that risk mitigation strategies are tailored to meet Australia’s unique critical infrastructure circumstances.