Guidelines to setting up an information sharing community such as an ISAC or ISAO

Overview of setting up an ISAC

The objective of this guideline (this document) is to describe the practical aspects of setting up a new information sharing community, such as an Information Sharing and Analysis Centre (ISAC) or an Information Sharing and Analysis Organisation (ISAO). In this guideline, we will refer to individuals or organisations that intend to set up a sharing community as “you” or the “operator”.

Relevant research has already been conducted and published by organisations such as the European Union Agency for Network and Information Security (ENISA) and the ISAO Standards Organisation. Our guideline provides practical best practices to set up an information sharing community based on feedback and experience from existing information sharing communities.

This guideline is focused around the Open Source Threat Intelligence Sharing platform (MISP) used in support on information sharing activities.

Guideline available in PDF format. Version 2019-03-11

Operated by

  • CIRCL Computer Incident Response Center Luxembourg

Founding members

  • MISP project - Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing
  • MISP Standard - The collaborative intelligence standard powering intelligence and information exchange, sharing and modeling.


(+352) 247 88444


122, rue Adolphe Fischer
Luxembourg, L-1521