The Tactical Analysis Center (TAC) is a lightweight, industry-driven, rapid analysis function. Primarily led by EnergySec staff, industry volunteers, and other partners, its role is to provide quick concise analysis, alerting and response to security issues. The mission of the TAC is to provide timely, relevant and actionable cybersecurity situational awareness information to electric sector asset owners.
Asset owners, government, vendors, and other partner communities all have valuable data pertinent to the analysis task. The TAC uses an “all sources” approach to tactical awareness and employs several resources to get the job done.
Through our partnerships, the TAC has access to non-public threat data. Analysis functions will produce actionable recommendations for asset owners to follow in an effort to mitigate their risk of exposure.
Through our community outreach efforts, it is expected that non-public vulnerability data will be made available for the purpose of developing actionable mitigations.
Through our government outreach efforts, we are afforded the ability to provide certain types of Sensitive But Unclassified (SBU) information to the sector.
Similar to other public “watch floors,” such as the SANS Internet Storm Center, volunteer TAC handlers will provide rapid notification of issues related to the sector.
Rapid Analysis Dissemination
In all cases, the TAC will value timeliness over completeness in its analysis. More thorough evaluation is generally best performed by other organizations, such as ICS-CERT and the ES- ISAC.