What is the purpose of ISACs?

• A. To share general security best practices across all industries
• B. To share actionable intelligence such as indicators of compromise, precursors, and information about attacks and threats among industry-specific groups
• C. To provide hardware support
• D. To manage user identities

Answer: (B)

ISACs are built to securely share threat intelligence within a specific industry, so members can detect and respond to threats more quickly. Their purpose is to distribute actionable information—such as indicators of compromise, precursors, and details about attacks and threats—tailored to the needs of that sector. This industry-focused sharing helps organizations understand what to look for and how attackers are operating in their particular environment, which general guidance alone cannot provide. ISACs don’t provide hardware support or manage user identities, and they aren’t meant to deliver broad, cross-industry security best practices.