owasp-collective-defence-agreement.md

---

title        : OWASP Collective Defence Cluster (CDC) - two years on
type         : working-session
track        : CISO
topics       : ["Owasp Project"]
featured     : yes                   # review with summit team "yes"
when_day     : Tue
when_time    : DS-2
room_layout  :
room_id      : table-3
session_slack: https://os-summit.slack.com/messages/CAUSJ7P4H
status       : review-content     # draft, review-content, done
organizers   :
description  :
participants :

---

This Working Session aims to continue the work done at the last Summit on this CDC model.

Why

In the same way that countries use NATO Collective defence - Article 5 to:

create a unique and enduring principle that binds its members together, committing them to protect each other and setting a spirit of solidarity within the Alliance (http://www.nato.int/cps/cn/natohq/topics_110496.htm)

companies should share information, knowledge, and resources so that malicious activities are easily detected and mitigated.

The framework created at the Working Session will promote collaboration between companies and create a shared mission to protect customer data and company assets.

What

• Review model created last year

• Share experiences from companies that tried it

Outcomes

• Create one page document with the statement supported by FAQ

• Commitment for more companies to try it

• Commitment to explore further integrations and collaboration workflows

Who

The target audience for this Working Session is:

• CISOs

References

• Collective defence - Article 5

Previous Summit Working Session

https://owaspsummit.org/Working-Sessions/CISO/AppSec-Article-5-Collective-Defence-Agreement.html