Tools to build trust
For a WARP to be successful it must create trust among its community members as well as trust with the WARP Operator if sharing of sensitive information, such as incident data, is going to happen.
Trust is built between people and has been the subject of some research but little has been done in the context of identifying what trust factors affect a person's ability to share information. The following document describes the findings from research conducted in the UK, supported by CPNI, into the social-psychological factors influencing the sharing of cyber threat information.
Analysis of detailed interviews with a rich variety of security professionals, spread over one year, yielded insights into both the influences and the mental processes involved. Trust, ability, empowerment and professional confidence are key factors. The influence of expectations, reputation and perceptions of others were also identified as important. This research has led to the development of practical techniques for nurturing the sharing of sensitive information between organisations.
The following workbook gives you an opportunity to raise your self-awareness in relation to sharing sensitive information. By sensitive, we mean information which carries an element of risk to you as a person but could benefit another. It is based on a Sharing Cultural Assessment (SCA) model which came from research conducted among a number of sharing forums in the UK, as described above.
Sharing Cultural Assessment Workbook
Sharing Cultural Assessment Workbook
At the WARP Annual Forum 2007, a workshop was held on how to use this Cultural Assessment Workbook in a group of people using a set of cards. This group approach may be more beneficial in some situations than an individual approach and therefore these cards and instructions are reproduced in the following documents for others to use.
The original research report titled 'Why would I tell you? - Perceived Influences for Disclosure Decisions by Senior Professionals in Inter Organisation Sharing Forums' is reproduced below with kind permission of the author.