Financial entities may share cyber threat information with each other within trusted communities. Sharing is voluntary but encouraged. Arrangements must protect confidential and personal data and be notified to the supervisor.
Why it matters
For DORA, information sharing is rarely a purely technical question. It touches ownership, budget and how quickly decisions can be made when something goes wrong. Teams that agree on these points in advance spend less time debating them under pressure.
What to check
- Identify relevant sharing communities
- Set rules for what you share and how
- Notify the supervisor when you join an arrangement
Where to start
Early warnings from peers often arrive before public advisories. Write down what you decide, who owns it and when it will be reviewed. That record is often the evidence a reviewer asks for later.