so they call for the creation of a baseline for these isao. so dhs will find the private sector nonprofits to develop the baseline and at the baseline will be developed in a multi-stakeholder process with the private sector and it will enable isao to demonstrate they will handle the information that they are being called upon to share responsibly. part of the reason for doing this expansion of the concept is so that we can broaden what is possible in the information sharing space as much as we can because we believe it is such a foundational capability that we need to have that basis and foundation be as broad as possible. it clarifies that the ability to enter an agreement with isao. isao doesn't have to share with the federal government in fact we hope that many of them will focus on the private sector sharing. isao i do share don't have to share with the end cake although we do expect many well. but that deo makes it clear how many they can share what they want. now, tied to the legislative proposal that the administration made, we highligh

so, isao don't need to have this. but if they want that capability coming and we have heard from many that that is a capability that they would like so it's something that we have wanted to provide. so, one of the things that i hope the conversation can go forward with today is a deeper discussion on the ends that we are trying to achieve. information sharing and and of itself is not the end. we don't want to share information for the sake of sharing information. we want to achieve something with that and i think that part of the way to break the logjam is by focusing in on some of the outcomes that we want to achieve and deviating about whether or not those are the policy ends that we want to get to so for example if we want to create this concept of a cyber weather map, something that dhs talked a lot about and has promoted. if that is our policy goal and one that we at the white house support, then that necessitates one kind of information sharing and we should explore. so the analogy that we need a different kind

there are a number of isaos now. there are a number of these already. under the executive order, the president is directing d.h.s. to enter into an agreement with a nongovernmental organization to identify a common set of voluntary standards or guidelines that will deal with the creation and functioning of these organizations. essentially this nongovernmental organization is going to establish standards for these private associations. this will, the thinking is, develop and deepen the development of these private sector information sharing organizations. do you want to comment? >> absolutely. i mentioned before that there's no way that the government is going to be able to help every company in america secure itself. we view ourselves as an enabler. we're trying to help companies understand what best practices are, implement them, share information and effectively respond to incidents. those three things i talked about as part of seener security. we have some extraordinarily successful information sharing analysis organizations right now. they are secto

. >> and i like that in the isao concept you are focusing and a lot of time and for the government people they focus on that government is good to be involved in a solution in the information we have to come into the government and i'm pleased that nsa sounds like you're taking it out. >> some of the things people focus on the idea of the hub. but we are not talking about the government being in the middle. we are talking about private sector organizations and these can be small, very flexible if you look at the definition. >> something that michael talked about that we featured in the paper today was focusing on the outcomes. and we found if we focus on the outcomes then you say who needs what information to take what action and you're right when you look at those outcomes to government and is not always critical in those outcomes in the private to private and mark you have been at the center of a lot of these outcomes, the favorable outcomes here for a long time in your role of the communications and the rest. when you are looking at the news that has come out with your experience -- >>

with regards to 85% of the air can express being what they pay for for the vendors and 4% from the isao and 1% from government and i want the reaction to that breakdown. you know, how much of that needs to be increased? what are types we are getting? >> that's fascinating. out of@h that we see in a year that we get 4% of the signatures from the isac and from the government. you are nodding the most. >> and concurrence area that's an amazing statistic because it would seem like it would be the other way around that they should get most of the information from the federal government or other sharing organizations. but it also points to the source that a lot of the organizations themselves share among themselves without having to go to a higher authority or some other authority looking for problems that they can tell you about. this has long been recognized even before there was a dhs is most of the information we knew about ourselves is known by ourselves and we don't have to wait for someone to tell us the obvious we can just begin to look for it. the question then is how do you tell oth