A trusted community.
A shared understanding.

Information Sharing and Analysis Centre for the identity ecosystem.

An Information Sharing and Analysis Centre provides a trusted framework in which public and private organisations can share information about threats, incidents, vulnerabilities and countermeasures, analyse it together and turn individual experience into collective knowledge.

Members can compare information held by different organisations and identify attacks that affect more than one service.

Document fraud, compromised enrolment, deepfakes, injection attacks and credential misuse affect different parts of the same chain of trust. An incident observed by one organisation may reveal a risk relevant to many others.

ISAC for Identity and QTSP connects operational evidence with the expertise needed to understand these risks, assess attacks and improve security across identity documents, digital identity and (Qualified) trust services.

Securely exchange information about threats, incidents, vulnerabilities and fraud patterns. Build collective awareness through trusted sharing and cooperation between participating organisations.

Combine operational experience with technical analysis to understand attacks, assess their feasibility and maintain a shared understanding of the evolving state of the art.

Turn shared findings into effective countermeasures and consistent assurance practices. Bring technical evidence into the evolution of evaluation methodologies, standards and regulatory frameworks.

Useful cooperation depends on clear rules for confidentiality, the handling of shared information and its permitted use.

Participants share operational information under agreed confidentiality rules and Traffic Light Protocol (TLP) markings.

These missions guide the Technical Groups and common activities, from threat analysis and operational cooperation to attack methods and evaluation methodologies.