DoD-Defense Industrial Base Collaborative Information Sharing Environment (DCISE)— DCISE is the operational hub of DoD’s Defense Industrial Base (DIB) Cybersecurity Program, focused on protecting intellectual property and safeguarding DoD content residing on or transiting through, contractor unclassified networks. DCISE develops and shares actionable threat products, performs cyber analysis and diagnostics, and provides remediation consultation for DIB participants.

DCISE is the reporting and analysis hub for implementation of Section 941 of the Fiscal Year 2013 National Defense Authorization Act regarding certain types of cyber incidents by Cleared Defense Contractors (CDCs), and the related Defense Federal Acquisition Regulation Supplement (DFARS 252.204-7012). Cyber incidents outlined in the DFARS are submitted to DCISE as mandatory reports; however, all other cyber incidents can be reported voluntarily.

• Rated as Capability Maturity Model Integration for Services (CMMI-SVC) Maturity Level 3 
• Collaborative partnership with over 800 CDCs and U.S. Government (USG) agencies • 484,000+ actionable, non-attributable (to submitting source) indicators 
• 75,000+ hours of no-cost forensics and malware analysis for DIB Partners 
• 12,000+ cyber threat reports

DCISE Fact Sheet
 

If you are a Cleared Defense Contractor and interested in joining the DIB CS Program, click here to go to the DIB Cyber Incident Reporting & Cyber Threat Information Sharing portal to apply.
 

1. Tactical Operations: Conducts daily functions related to processing of voluntary and mandatory incident reports as well as malware analysis, Customer Response Forms (CRFs), CRF Supplements, and partner engagement.
2. Applied Research: Handles mid-to-long term analytic functions related to processing of Threat Activity Reports (TARs), Cyber Targeting Analysis Reports (CTARs), Alerts, Warnings and other risk-based analyses. Works the downgrade and release of information derived from USG sources through Cyber Threat Bulletins (CTBs) and Threat Information Products (TIPs).

1. Assess Branch: Performs analysis of cybersecurity processes of DIB partners through the Cyber Resilience Analysis (CRA) tool. This branch also evaluates other vulnerability and pen testing assessment procedures and provides them as a service to the DIB Partnership.
2. Assist Branch: Evaluates different cybersecurity technologies that can be provided to the DIB partnership as a pilot. Once the pilot is offered to the DIB, the information gathered from the capability is passed on to AD to determine if the information is applicable. Once the pilot is completed, and if it is determined to be successful, it may be considered as a permanent service offering for the Partnership.
3. Architect Branch: Researches and identifies the most effective ways to communicate with the DIB partnership. Their research discovers technologies that can best support transmitting cyber threat information from AD to the Partnership.

1. Customer Engagement: Primarily responsible for customer relationships; DIB Partner on-boarding and outreach campaigns to promote DIB participation, as well as event planning for Technical Exchanges and Regional Partner Exchanges; and facilitating Analyst-to-Analyst and Business-to-Business Exchanges.
2. Organizational Readiness: A team of knowledge managers, business and process analysts; quality control analysts; quality assurance analysts, process owners and support staff to drive continual process improvement. Systematically coordinates and aligns resources and functions with the DCISE vision, mission, goals and objectives through the DCISE Performance Management Plan.